Fed agencies cop mass fail in core systems cyber review Just one agency gets ‘Essential eight’ tick for financial, HR systems.
https://www.itnews.com.au/news/fed-agencies-cop-mass-fail-in-core-systems-cyber-review-548738 Only one of the federal government’s largest agencies has fully applied the Australian Signals Directorate’s essential eight to some of its most important systems, the national auditor has found. The finding is contained in the 2019 interim financial controls audit of major entities, which reviewed the implementation of the controls now considered the baseline […]
Free Thycotic Whitepaper: Privileged Access Management & ASD Essential 8 Compliance. How to align a PAM project for ASD Compliance and Maturity
https://campaigns.thycotic.com/asd-compliance-whitepaper/
Australia is painting a big red cyber target on its critical infrastructure
https://www.computerweekly.com/opinion/Australia-is-painting-a-big-red-cyber-target-on-its-critical-infrastructure Australian’s critical infrastructure is particularly vulnerable right now to cyber attacks due to years of under investment in cyber security and aging legacy systems. The threat of foreign state-sponsored hackers breaking into Australian infrastructure and wreaking havoc sounds like something out of a Tom Cruise film, but as the CEO of a company which helps companies […]
Cyber-security fears takes Geelong Council website offline
Geelong Council has taken the Geelong Australia website offline on Wednesday afternoon following a cyber-security incident. The site was pulled down as a precaution as council staff investigate. CEO Martin Cutter said extra services will be deployed should the website remain offline on Thursday. “To ensure we continue to provide our community with support and […]
The State of Play in Cyber Security as we see it. Newsletter May 2020
The Essential 8 framework more important than ever The recent hack of Toll Holdings for the second time where sensitive data was stolen and their networked was ransomed again has highlighted the importance of Application Whitelisting, Privileged Account Management, Access control in the COVID-19 world is paramount. Data security, identity and stopping threats are the […]
Recent cyber attacks just the tip of the iceberg for Australia Toll Group, BlueScope and Service NSW have all fallen victim to cyber criminals in recent days. The government and industry need to sharpen their response.
Cyberwarfare: ‘We may not know until it’s well advanced’
https://www.abc.net.au/news/2020-05-15/australia-unprepared-for-security-threats-warns-review/12248332 The report finds Australia is unprepared for an increasingly likely cyberwar. “In many ways, we may not even know when a cyber attack or indeed when a cyber campaign against Australian interests has begun,” says Professor Medcalf. “We may not know until it’s well advanced. There may be all kinds of preparation, pre-positioning, collection […]
A law firm’s worst nightmare… $21M ransom. Whitelisting is the solution.
A cybercriminal ring claiming to have stolen a huge cache of data from a major media and entertainment law firm — whose clients include Bruce Springsteen, Madonna, Elton John and Lady Gaga — is demanding a $21 million ransom payment, according to a published report. New York-based Grubman Shire Meiselas & Sacks this week confirmed its computer systems […]
Airlock Digital Application Whitelisting
Government service agents urged to protect clients and themselves
https://www.cyber.gov.au/news/government-service-agents-urged-protect-clients-and-themselves Agents of government services, such as taxation agents and financial advisers, are attractive targets for cybercriminals. The ACSC has published Cyber Security for Agents of Government Services to help agents protect their clients’ valuable and personal information, and their own businesses.