THE WIDER INDUSTRY
Briefings on the cyber security alerts that matter to Australian small businesses, each linked to the official advisory with practical next steps.
Latest stories first. Filter by topic or search the archive.
8 stories
Agencies from Japan, the US, Germany and Australia warned that North Korean actors pose as recruiters to infect developers’ computers through “technical tests”, while others use false identities to get hired.
The ACSC said a substantial number of potentially vulnerable Adobe Commerce and Magento stores were running in Australia, as attackers began exploiting a critical flaw that allows remote code execution without logging in.
The ACSC saw attackers targeting authentication bypass flaws in N-able N-central, a tool many IT providers use to manage their customers’ computers. Small businesses were told to check with their provider.
Australia and international partners warned that Russian government-linked actors are scanning for routers with weak, decades-old management settings, copying their configurations and harvesting credentials.
ASD’s Australian Cyber Security Centre says attackers are scanning for vulnerable website plugins at scale, and many small and medium Australian businesses have already been affected.
The ACSC warned of a widespread campaign using exposed and stolen credentials against Fortinet firewalls and VPN gateways, and asked all users to change passwords and tighten access straight away.
The ACSC has seen legitimate Australian business websites used to show fake Cloudflare checks that ask visitors to paste and run a command. Doing so installs malware that steals passwords and browser data.
The ACSC warned that attackers were using a critical cPanel and WHM flaw to get into hosting control panels without a password, and that some managed service providers’ customers had been compromised.
Try another topic or clear your search.