Australian Cyber Security Magazine, Issue 11, 2021

COVER FEATURE: PREPARING AUSTRALIAN BUSINESS FOR A CYBER ATTACK

Welcome back to the Australian Cyber Security Magazine and the last issue for 2021. There continues to be much debate on the most appropriate legislative approach to take in response to a sustained cybersecurity threat landscape. Critics of the Security Legislation Amendment (Critical Infrastructure) Bill 2020 argue it is an extension in the long line of security related acts that could potentially give more power to the executive and at the expense of individual freedoms of citizens. Despite years of warnings that legislation was needed but seemingly resisted, there is no doubt this is all being rushed through and with limited consultation with industry.

As a cover feature in this edition, the Security Legislation Amendment (Critical Infrastructure) Bill 2020 will give the government power to defend networks of critical infrastructure providers under cyber-attack as a “last resort”. The Australian Federal Police and Australian Criminal Intelligence Commission will have the power to combat serious crime enabled by anonymising technology using three new warrants: network activity, data disruption and account takeover. We also include links through to our Tech & Sec Weekly Series and the latest Cyber Security Weekly podcasts.

CONTENTS

1. Australia’s mobile wallet adoption surge creates new opportunities and challenges for merchants
2. Enterprise server spending in Australia to increase at 6.3% CAGR Over 2020-2025
3. Top 10 malware affecting Australians
4. Macquarie Telecom group reaches Milestone for Government security-cleared personnel
5. Enrolments open for the 2022 ADF cyber gap program
6. United We Stand – Divided We Fall – Security Threats on Australia’s Horizon
7. Australian protective security renaissance
8. Scams increase by more than 50% in August as Australians in lockdown are hit hard by identity theft
9. Fortinet invests in Federal Government integration and innovation centre
10. What changes to the critical infrastructure act will mean to industry – Cyber Risk Meetup Highlights
11. Preparing Australian business for a Cyber-Attack
12. Sharpening the cyber security axe in Australia to stay in the race
13. Micro-Credentialling helps plug Australia’s cyber skills gap
14. Future of Network Infrastructure – on Cloud
15. Mitigating controls for ineffective patching
16. The seven authentication best practices that support zero trust
17. Hikvision vulnerability leaves surveillance cameras open to cyberattacks
18. OMIGOD vulnerability risk for Microsoft Azure cloud customers