Security Updates
Latest Threat Alerts
Live FeedLarge-scale exploitation campaign targeting website content management systems (CMS)
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) is tracking a large-scale exploitation campaign targeting various vulnerab…
Reported widespread credential exposure affecting Fortinet Firewalls and VPN Gateways
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC) is aware of public reporting of a malicious campaign against Fortinet Fire…
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware target…
ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCl…
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
A recent wave of cyber attacks targeting financial services, private equity, and professional services is attributed to a data extortion group known as UNC66…
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution – Patch ASAP
WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the content management s…
New AI frontier cyber threat guidance for boards of directors
Questions for boards to ask about AI cyber threats.
Updated guidance on the 2026 Minimum Elements for a Software Bill of Materials
We've joined international partners to update SBOM minimum elements guidance, helping organisations improve software transparency and supply chain security.
About this feed. These alerts are gathered automatically from public sources and updated hourly, and are provided as general information only. We make no warranty, express or implied, as to their accuracy or completeness, and nothing here is professional or security advice. Each headline links to the original report and all content remains the property of its source. Alerts and advisories from the Australian Signals Directorate are © Commonwealth of Australia, reused under a Creative Commons Attribution 4.0 International licence. The sources shown are independent, and their inclusion here does not imply they endorse this feed or our services.