Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Critical Vulnerability in popular Java framework Apache Struts2 Critical Vulnerability in popular Java framework Apache Struts2 14 Dec 2023 Alert Alert on a critical Apache Struts2 RCE vulnerability affecting Java applications; organisations should identify affected systems and apply vendor updates.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Russian FSB cyber actor Star Blizzard continues worldwide spear-phishing campaigns Russian FSB cyber actor Star Blizzard continues worldwide spear-phishing campaigns 08 Dec 2023 Advisory The Russia-based actor is targeting organisations and individuals in the UK and other geographical areas of interest.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Serious vulnerabilities in Atlassian products including Confluence, Jira and Bitbucket Serious vulnerabilities in Atlassian products including Confluence, Jira and Bitbucket 07 Dec 2023 Alert Alert on critical vulnerabilities in Atlassian products (CVE-2023-22522, CVE-2023-22523 and CVE-2022-1471). Review Atlassian guidance and apply patches and mitigations immediately.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Exploitation of Unitronics Programmable Logic Controllers (PLCs) Exploitation of Unitronics Programmable Logic Controllers (PLCs) 05 Dec 2023 Alert Alert on global exploitation of PLCs, with reported compromises in Australia affecting critical sectors including water, energy and healthcare.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Citrix Products NetScaler ADC and NetScaler Gateway Vulnerabilities Citrix Products NetScaler ADC and NetScaler Gateway Vulnerabilities 19 Jul 2023 Alert Alert on a Citrix vulnerability allowing unauthenticated remote code execution; organisations should update NetScaler ADC and Gateway to the latest version.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / #StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability #StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability 22 Nov 2023 Advisory Alert on LockBit 3.0 affiliates exploiting the Citrix Bleed (CVE-2023-4966) vulnerability, including attack methods, risks, and mitigation steps for organisations.
