Uncategorized

Convoluted layers: An artificial intelligence primer

Rapid advances in artificial intelligence (AI), along with public releases of AI products, have prompted governments, businesses and criminals to accelerate efforts to incorporate this new technology into their operations. This advice provides definitions for some of the most commonly encountered AI terms in cybersecurity and a brief typology of cyberthreats that will arise from […]

Convoluted layers: An artificial intelligence primer Read More »

Multiple Vulnerabilities In Ivanti Endpoint Manager Mobile (Ivanti EPMM)

The Australian Signals Directorate’s (ASD) Australian Cyber Security Centre (ACSC) is aware of two vulnerabilities, one medium and one high severity, in Ivanti Endpoint Manager Mobile (EPMM). The ASD’s ACSC recommends organisations patch to the latest version of Ivanti EPMM, available through Ivanti’s download portal, and investigate whether their systems have been compromised.

Multiple Vulnerabilities In Ivanti Endpoint Manager Mobile (Ivanti EPMM) Read More »

BADBAZAAR and MOONSHINE: Spyware targeting Uyghur, Taiwanese and Tibetan groups and civil society actors

This advisory is jointly produced by government agencies from the UK, Australia, Canada, Germany, the Netherlands, New Zealand, the Republic of Korea and the US and is supported by members of the NCSC’s Cyber League. Its purpose is to raise awareness about the growing threat that malicious cyber actors pose to individuals connected to topics

BADBAZAAR and MOONSHINE: Spyware targeting Uyghur, Taiwanese and Tibetan groups and civil society actors Read More »

BADBAZAAR and MOONSHINE: Technical analysis and mitigations

This guidance has been jointly produced by government agencies from the UK, Australia, Canada, Germany, the Netherlands, New Zealand, the Republic of Korea, and the US and is supported by members of the NCSC Cyber League. Its provides new and collated threat intelligence on two spywares known as MOONSHINE and BADBAZAAR with guidance for how

BADBAZAAR and MOONSHINE: Technical analysis and mitigations Read More »

Critical vulnerability in Pulse/Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways (CVE-2025-22457)

Ivanti have released information regarding active exploitation of a critical vulnerability in Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways (CVE-2025-22457). ASD’s ACSC recommends customers follow the advice contained in Ivanti’s Security Advisory and assess their environments for malicious activity.

Critical vulnerability in Pulse/Ivanti Connect Secure, Policy Secure and Neurons for ZTA gateways (CVE-2025-22457) Read More »