Access publications and alerts / Alerts and advisories / Archived alerts and advisories / BADBAZAAR and MOONSHINE: Technical analysis and mitigations BADBAZAAR and MOONSHINE: Technical analysis and mitigations 09 Apr 2025 Advisory Understand how BADBAZAAR and MOONSHINE spyware works and learn technical steps to detect and reduce the risk to mobile devices.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Fast Flux: A national security threat Fast Flux: A national security threat 04 Apr 2025 Advisory Learn what fast flux is, why it poses a serious cyber security risk, and how you can help protect networks and services.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Critical vulnerability in Pulse/Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways (CVE-2025-22457) Critical vulnerability in Pulse/Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways (CVE-2025-22457) 04 Apr 2025 Alert Alert on active exploitation of CVE-2025-22457 in Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways; follow Ivanti guidance.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Critical vulnerabilities in Ingress-NGINX Controller for Kubernetes Critical vulnerabilities in Ingress-NGINX Controller for Kubernetes 26 Mar 2025 Alert Alert on critical vulnerabilities in Ingress-NGINX Controller for Kubernetes allowing unauthenticated remote code execution and potential full cluster takeover.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Next.js authentication bypass vulnerability (CVE-2025-29927) Next.js authentication bypass vulnerability (CVE-2025-29927) 25 Mar 2025 Alert A Next.js middleware authentication bypass may enable remote attackers to bypass security controls. Update to the latest patched version immediately.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Increase in denial-of-service (DoS) attacks against Australian organisations Increase in denial-of-service (DoS) attacks against Australian organisations 17 Mar 2025 Advisory Understand the increase in denial of service (DoS) attacks and learn simple ways to reduce disruption to your online services.
