Tactics, Techniques and Procedures Used to Target Australian Networks. By the ACSC.
https://www.cyber.gov.au/sites/default/files/2020-05/Summary%20of%20Tradecraft%20Trends%20for%202019-20%20%E2%80%93%20Tactics%2C%20Techniques%20and%20Procedures%20Used%20to%20Target%20Australian%20Networks%20%28May%202020%29.pdf OverviewThe Australian Cyber Security Centre (ACSC) investigated and responded to numerous cyber security incidents during 2019 and 2020 so far. This advisory provides a summary of notable tactics, techniques and procedures (TTPs) exploited by Advanced Persistent Threats (APT) and cybercriminals identified during the ACSC’s investigations. These TTPs are summarised practically in the framework of […]
NSW Auditor General slams NSW Universities on Cyber Security and Essential 8
https://www.audit.nsw.gov.au/sites/default/files/documents/Final%20report%20%20-%20Universities%202019%20audits%20tabled%204%20June%202020.P Extract from page 32 of the report: Cyber threats are becoming increasingly common and sophisticated as the global interconnectivity between computer networks has increased.Cyber security comprises technologies, processes and controls that are designed to protect IT systems and sensitive data from cyber attacks. The cyber security framework consists of threat identification, protection, detection, response […]
AUSTRALIAN GOVERNMENT AGENCIES WAY BEHIND IN ESSENTIAL 8 CORE SYSTEMS CYBER REVIEW BY THE AUSTRALIAN NATIONAL AUDIT OFFICE
Just one agency gets ‘Essential 8’ tick for financial, HR systems. Only one of the federal government’s largest agencies has fully applied the Australian Signals Directorate’s Essential 8 to some of its most important systems, the national auditor has found. The finding is contained in the 2019 Interim Financial Controls audit of major entities, which […]
Essential 8 No 1 mitigant – Application Whitelisting
Application whitelisting with Airlock is a simple, repeatable process andincorporates proven and effective workflows, designed for ease of use, indynamically changing environments. Airlock supports whitelisting ofexecutables, libraries and scripts via hash, publisher and/or path-basedpolicies. Why Airlock? SIMPLISTIC WORKFLOWSThe largest challenge organisations face when implementing Application Whitelistingis the creation and maintenance of the whitelist itself. Airlock […]
Fed agencies cop mass fail in core systems cyber review Just one agency gets ‘Essential eight’ tick for financial, HR systems.
https://www.itnews.com.au/news/fed-agencies-cop-mass-fail-in-core-systems-cyber-review-548738 Only one of the federal government’s largest agencies has fully applied the Australian Signals Directorate’s essential eight to some of its most important systems, the national auditor has found. The finding is contained in the 2019 interim financial controls audit of major entities, which reviewed the implementation of the controls now considered the baseline […]
Free Thycotic Whitepaper: Privileged Access Management & ASD Essential 8 Compliance. How to align a PAM project for ASD Compliance and Maturity
https://campaigns.thycotic.com/asd-compliance-whitepaper/
Australia is painting a big red cyber target on its critical infrastructure
https://www.computerweekly.com/opinion/Australia-is-painting-a-big-red-cyber-target-on-its-critical-infrastructure Australian’s critical infrastructure is particularly vulnerable right now to cyber attacks due to years of under investment in cyber security and aging legacy systems. The threat of foreign state-sponsored hackers breaking into Australian infrastructure and wreaking havoc sounds like something out of a Tom Cruise film, but as the CEO of a company which helps companies […]
Cyber-security fears takes Geelong Council website offline
Geelong Council has taken the Geelong Australia website offline on Wednesday afternoon following a cyber-security incident. The site was pulled down as a precaution as council staff investigate. CEO Martin Cutter said extra services will be deployed should the website remain offline on Thursday. “To ensure we continue to provide our community with support and […]
The State of Play in Cyber Security as we see it. Newsletter May 2020
The Essential 8 framework more important than ever The recent hack of Toll Holdings for the second time where sensitive data was stolen and their networked was ransomed again has highlighted the importance of Application Whitelisting, Privileged Account Management, Access control in the COVID-19 world is paramount. Data security, identity and stopping threats are the […]