Australian Cyber Security Centre (ACSC) stories
Google links axios attack to suspected North Korean actor
This month
#
devops
#
advanced persistent threat protection
#
supply chain
Google says the axios npm supply chain attack was linked to suspected North Korean actor UNC1069, raising fears for Australian and New Zealand firms.
Rockwell Automation brings SecureOT to industrial systems
Last month
#
manufacturing
#
digital transformation
#
iot security
Rockwell Automation launches SecureOT to help Australian industry counter rising cyber attacks on critical operational technology.
Datadog flags rising DevSecOps risk from ageing code
Fri, 27th Feb 2026
#
devops
#
siem
#
application security
Datadog warns 87% of organisations run software with exploitable flaws as ageing code, fast releases and automation amplify DevSecOps risk.
AI reshapes cyber threats as Safer Internet Day nears
Wed, 11th Feb 2026
#
firewalls
#
ddos
#
network security
AI-driven agents and rising network attacks are reshaping cyber risks, experts warn, as Safer Internet Day 2026 urges 'verified trust' online.
FIRST marks record growth in global cyber defence
Fri, 9th Jan 2026
#
firewalls
#
ransomware
#
advanced persistent threat protection
Global cyber defence group FIRST reports record 2025 growth, topping 820 member teams and expanding technical, training and capacity work.
Hybrid identity security scores decline as vulnerabilities rise
Fri, 11th Jul 2025
#
risk & compliance
#
cybersecurity
#
okta
Security scores for hybrid identity systems drop to 61 in 2025, with mid-sized companies and government sectors facing the biggest vulnerability challenges.
Fast Flux DNS tactics escalate cyber defence challenges
Tue, 8th Apr 2025
#
ransomware
#
phishing
#
advanced persistent threat protection
The rise of Fast Flux DNS has empowered cybercriminals to evade detection more effectively, presenting significant challenges for security agencies in Australia.
Cybersecurity warning issued over Iranian infrastructure threats
Thu, 24th Oct 2024
#
mfa
#
phishing
#
email security
A coalition of global agencies warns of Iranian cyber threats targeting critical infrastructure, highlighting emerging tactics and unresolved vulnerabilities.
Global advisory issued on Iranian cyber threat tactics
Thu, 24th Oct 2024
#
advanced persistent threat protection
#
government
#
nsa
A joint advisory from international agencies warns of Iranian cyber actors targeting critical infrastructure sectors using brute force tactics for credential compromise.
Enhancing data centre security with mobile access control
Mon, 30th Sep 2024
#
endpoint protection
#
encryption
#
physical security
Mobile access control is revolutionising data centre security, addressing insider threats and ensuring compliance with mandates like GDPR and NDB.
Report reveals reliance on memory-unsafe languages in OSS projects
Tue, 2nd Jul 2024
#
cybersecurity
#
software development
#
fbi
A new cybersecurity report reveals that 52% of critical open-source projects rely on memory-unsafe programming languages, posing significant security risks.
Rising cybersecurity threats prompt shift from traditional password methods
Mon, 27th Nov 2023
#
mfa
#
advanced persistent threat protection
#
email security
Rising cybersecurity threats prompt a shift from traditional, vulnerable password methods to phishing-resistant authentication solutions.
Video: 10 Minute IT Jams - An update from Ricoh Australia
Tue, 5th Sep 2023
#
network infrastructure
#
document management
#
digital transformation
Yasu Takahashi, who is the Managing Director of Ricoh Australia, joins us today to tell us more about Ricoh Australia and their solutions for the APAC market.
Ransomware BianLian changes tactics, focusing on extortion
Thu, 25th May 2023
#
ransomware
#
ai security
#
cybersecurity
BianLian ransomware group shifts focus to data extortion, targeting Australian and US companies and critical infrastructure, warns cybersecurity advisory.
How leaders can safeguard customer data against today's new threats
Wed, 9th Nov 2022
#
data protection
#
ransomware
#
phishing
Australian businesses lost over $33 billion to cyber attacks in 2021. The government is considering fines of up to $50 million for data breaches.
CyberCX aims to help AU businesses achieve Essential 8 compliance
Thu, 13th Oct 2022
#
endpoint protection
#
cx
#
martech
The E8 are a set of priority mitigations recommended by the Australian Cyber Security Centre as the most effective controls against cyber threats.
Workday completes IRAP and gains FedRAMP authorisation
Mon, 18th Jul 2022
#
data analytics
#
martech
#
planning
Workday achieves IRAP Protected level assessment, enabling customers to process data in compliance with Australian government policies.
Vulnerabilities pose danger to SonicWall SMA 100 remote access appliances
Thu, 20th Jan 2022
#
iam
#
cybersecurity
#
sonicwall
SonicWall and Australia's ACSC are urging all businesses using SonicWall SMA 100 Series appliances to patch the devices as soon as possible.
Video: 10 Minute IT Jams - BeyondTrust on securing critical infrastructure
Thu, 22nd Jul 2021
#
pam
#
cloud security
#
iot security
In TechDay's second IT Jam with BeyondTrust, we speak to the company's sales engineer Scott Hesford about critical infrastructure and how best to secure it.
State-based cyber attack targeting Australian government and businesses
Fri, 19th Jun 2020
#
malware
#
cybersecurity
#
australian government
Prime Minister Scott Morrison told media on Friday morning that a 'malicious' attack by a state-based cyber actor is underway in the country.