Cybersecurity News
Filters
Filtered by tag: vulnerabilities × Clear
Australian Cybersecurity Magazine
Critical PHP vulnerabilities allow remote execution
Matched: Australia
Australia's cyber security agency has warned of two critical PHP vulnerabilities flagged by the PHP Foundation. The flaws could allow remote code execution, posing significant risk to systems running affected PHP versions. Users and administrators are urged to apply patches promptly and follow guidance from both the ACSC and PHP Foundation to mitigate potential exploitation.
Australian Cybersecurity Magazine
ACSC updates alert on critical Citrix NetScaler vulnerabilities, adds new RCE CVE
Matched: Australia
The ACSC has updated its critical alert urging Australian organisations using Citrix NetScaler ADC and Gateway to apply vendor patches immediately. The update adds a new remote code execution CVE to previously flagged vulnerabilities. The flaws are being actively exploited, and unpatched systems remain at serious risk. Organisations are advised to review Citrix's guidance and prioritise patching as soon as possible.
Australian Cybersecurity Magazine
ACSC warns of confirmed exploitation of Citrix NetScaler vulnerabilities
Matched: Australia
The ACSC has issued a critical alert warning that vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway are being actively exploited against Australian organisations. The agency is urging affected organisations to apply patches immediately and check for signs of compromise, as threat actors may have already accessed systems prior to patching.
Australian Cybersecurity Magazine
ACSC warns of actively exploited vulnerabilities in Citrix NetScaler products
Matched: Australia
Australia's ACSC has issued a critical alert warning organisations using Citrix NetScaler ADC and NetScaler Gateway about multiple newly disclosed vulnerabilities that are being actively exploited. Affected users are urged to apply patches immediately to reduce the risk of compromise.
'The attacks we found only scratch the surface of what is possible': Experts say so-called 'Proactive SIM' cards can hijack smartphones, IoT devices and even EV chargers
Researchers warn that "Proactive SIM" cards can exploit a decades-old telecom standard to execute commands on host devices without user interaction. The vulnerability affects smartphones, IoT devices, and EV chargers. Because the SIM sits inside the device and communicates directly with its processor, a compromised or malicious card can run code invisibly, and researchers say discovered attacks likely represent only a fraction of what's possible.
Recorded Future’s Insikt Group reports 44% rise in high-impact CVEs in July
Matched: Australia
Recorded Future's Insikt Group recorded an 85 high-impact CVEs in July 2026, a 44% rise from the previous period. The report highlights vulnerabilities that organisations in Australia and New Zealand should prioritise for remediation, reflecting a growing threat landscape requiring urgent attention from security teams.
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
Matched: health
South Korean and US cybersecurity agencies have warned about Gunra ransomware targeting critical infrastructure globally, including healthcare, financial services, government, and nonprofit sectors. The attacks exploit vulnerabilities in Fortinet and Schneider Electric systems. Gunra follows a ransomware-as-a-service model and represents a continuing trend of sophisticated ransomware variants threatening essential services worldwide.
DigiCert survey finds 81% of Australian organisations hit by AI security incidents or vulnerabilities
Matched: Australia
A DigiCert survey found that 81% of Australian organisations have experienced an AI-related security incident or identified AI-related vulnerabilities. The findings suggest AI security risks are already a widespread concern among Australian enterprises, highlighting the growing challenge businesses face in managing threats introduced or amplified by artificial intelligence adoption.
ACSC warns of large-scale campaign exploiting CMS vulnerabilities in Australia
Matched: Australia
Australia's cyber security agency has warned of a large-scale campaign targeting web content management systems, with many Australian businesses already compromised. The ACSC says attackers are exploiting CMS vulnerabilities to gain access to websites and their underlying infrastructure, urging organisations to patch systems, review user accounts, and check for signs of compromise.
A Record-Breaking Patch Tuesday for June 2026
Microsoft's June 2026 Patch Tuesday addressed nearly 200 security vulnerabilities across Windows and related software, the largest monthly update in the company's history. Around 30 of the flaws were rated critical, and exploit code for at least three vulnerabilities is already publicly available, raising the urgency for users and administrators to apply the patches promptly.