NCSC Alerts and Advisories

Alert Status: Critical  

On 19 June 2024, Citrix released a security bulletin detailing multiple vulnerabilities in NetScaler ADC and Gateway products.

Advisory

The Australian Cyber Security Centre (ACSC) released an advisory on spyware BadBazaar and Moonshine that have been actively targeting vulnerable communities and activists in the Asia-Pacific region.

Alert Status: High 

The Australian Cyber Security Centre (ACSC) has reported that cyber actors are actively targeting financial organisations using brute force techniques, such as password spraying and credential stuffing.

Alert Status: Critical 

Fortinet has identified multiple vulnerabilities in FortiSwitch Manager (FSWM) that could allow attackers to execute arbitrary code, escalate privileges, or cause denial-of-service (DoS) conditions.

Advisory

Fast Flux techniques are increasingly being used by malicious cyber actors to evade detection and maintain resilient malicious infrastructure.

Alert Status: Critical  

Kubernetes maintainers have published an advisory detailing multiple critical vulnerabilities in Ingress-NGINX Controller that could allow unauthenticated remote code execution and full cluster takeover.

Alert Status: Critical

Fortinet identified a critical vulnerability affecting FortiOS and FortiProxy products. This vulnerability poses a significant risk as it could compromise the confidentiality, integrity, or availability of affected systems.