flaws detailed above. CISA and the FBI also published a list of the top 10 most exploited security flaws between 2016 and 2019 and a top list of routinely exploited bugs in 2020 in collaboration with the Australian Cyber Security Centre (ACSC) and the...

information. Few state and territory governments have previously revealed the existence of formal bug bounty programs. In 2019, NSW Customer Service Minister Victor Dominello stated that NSW had created such a program as part of the development of the...

security firm Cybereason. The firm discovered the activity last year but said the hacking campaign dates to at least 2019, and it suggested that reams of data could have been stolen in the interim. The research is an unsettling reminder of the scope of...

in the matter. Despite RI Advice commissioning two independent risk assessments and a cyber resilience initiative in 2019, the Federal Court ruled that the practices were too slow to implement. According to Ajay Unni, CEO and founder of StickmanCyber,...

of terrorism (CFT), which could save on overall compliance costs. Financial crime compliance costs jumped 18 per cent from 2019 to 2020, largely driven by increased labour costs. However, financial institutions that allocated a larger share of financial...

that consumers trust the least in relation to their perceived data security practices has substantially changed. In 2019, retail was cited by 50 per cent of consumers as the riskiest sector in terms of data security, followed by travel (40 per cent) and...

who has been named as shadow assistant minister for defence. Before securing a seat in the House of Representatives in May 2019, Thompson served with the Australian Army’s 1st Battalion, Royal Australian Regiment. During his six years with the ADF from...

compliance costs More than two-thirds of financial institutions surveyed indicated they had increased compliance staff since 2019. Labour and training accounted for 54 per cent of average compliance costs while technology, including adding or...

and sovereign capability to protect the country’s national interests and citizens who are most at risk from cyber harms. In 2019 we conducted an assessment in Vanuatu. Since then, Vanuatu has strengthened its cyber security in several ways, including:...

list as well as sending SMS messages to other phone numbers. xHelper: A malicious application seen in the wild since March 2019, used for downloading other malicious apps and display advertisements. The application is capable of hiding itself from the...

began to appear. However, Group-IB researchers believe the initial test versions of the malware date back to November 2019. Conti has dominated the ransomware scene in terms of the number of companies whose data has been encrypted. In 2020, Conti...

10 IPS signatures accounted for 87 per cent of all network attacks; unique detections reached their highest count since Q1 2019. This increase indicates that automated attacks are focusing on a smaller subset of potential exploits rather than trying...

New York’s Department of Financial Services for “significant cyber security violations”, after four security breaches from 2019 to 2021 that exposed a sizeable amount of sensitive customer data. The cruise line operator had violated a state cyber...

Russian military aggression, both directly in their territories and indirectly through cyber and other attacks. In October 2019, the government of Georgia, alongside international partners including the UK's National Cyber Security Centre (NCSC), called...

Meituan were fined $2.75 billion and $527 million, respectively, in 2021. Alibaba's fine equated to about 4 per cent of its 2019 domestic sales, while Meituan's was equivalent to 3 per cent of its 2020 domestic sales. The CAC outlined that Didi had...

The US Treasury Department sanctioned three North Korean hacking groups (Lazarus Group, BlueNoroff, and Andariel) in 2019 for sending stolen financial assets to the North Korean government. Previously, the US government outlined that the various tactics...

in organisations considered to be of strategic interest to Beijing. Those targeted for “credential phishing” since 2019 include the International Federation for Human Rights, Amnesty International, the Mercator Institute for China Studies, Radio Free...

Entrust had yet to bend to LockBit's demands. The LockBit gang, whose malware of the same name was first detected in 2019, has become one of the more prolific threat groups in the growing and evolving ransomware scenes. DDoS campaigns are designed to...

breach, according to Sophos researchers, which has led to an "attack, change, attack, change" cycle, a trend observed since 2019. Half of (49 per cent) of the surveyed respondents are planning to make changes in the next six months due to experiencing...

created by a Turkish-speaking entity called Nitrokod. The campaign has claimed roughly 111,000 victims in 11 countries since 2019, according to the CPR team, including Australia. The campaign drops malware from free software available on popular...