Category: Awareness

Australian Cyber News Last Week – November 27th, 2023: Well, that was a busy week. The Australian government’s release of the 2023-2030 Australian Cyber Security Strategy. I wrote up the TissuePath breach and followed down a rabbit hole of Core Desktop and AlphV (Black Cat). Optus CEO resigns, Changes to the SOCI act, Federal whole-of-government zero trust target, scale back of Metadata retention, and two-year delay on banning ransomware payments.

Australian Cyber News Last Week – November 20th, 2023: It was a week of fallout Optus Outage is putting pressure on the company, especially their CEO. DP World Australia is causing rethinks and proposals around Critical Infrastructure and Ransomware reporting. To back this up a new report “ASD Cyber Threat Report 2022-2023”, reveals cybercrimes are soaring with the targets ranging from everyday people to big businesses and even our nation’s most crucial assets.

Australian Info and Cyber Security Last Week 26th June 2023: Efos machine provider Smartpay impacted OZ and NZ customers. Libraries Tasmania had an old-school data handling incident, placing PII on this public website. The HWL Ebsworth Lawyers breach is continuing to expose clients with the Big 4 banks and the Department of Defence joining the growing list. And to finish off we welcome our new National Cybersecurity Co-Ordinator, Air Marshal Darren Goldie.

Australian Info and Cyber Security Last Week 12th June 2023: The ACT Government has been caught up in the Barracuda email gateway vulnerability. Investigations are continuing, I suspect there will be more organisations caught in this one. An update to the HWL Ebsworth with the Tasmanian Government caught up as one of their clients. The firm a many high-profile and government clients. More to play out here as well.

Australian Info and Cyber Security Last Week 5th June 2023: The Department of Defence made headlines by initially claiming they had only a few Chinese surveillance devices on their network, but an internal audit revealed over 400. Toyota finally revealed that Australian users were caught up in the overseas breach. Access key allowing access to databases was publicly available on GitHub for almost five years.

Last Week 22 – 28 May: Only one published data handling breach in the media last week. An interesting trend with data handling and internal data disclosure (via poor access control) being reported.