News

• Posted March 01, 2024

The NCSC and CERT NZ have today joined international partners to release a cyber security advisory in response to the active exploitation of multiple vulnerabilities within Ivanti Connect Secure and Ivanti Policy Secure gateways.

• Posted February 28, 2024
• NZISM Updates

A new version of the New Zealand Information Security Manual (NZISM) has been released.

• Posted February 27, 2024
• Cyber Security Alerts
• Technical Advisories

An advisory published by the UK’s National Cyber Security Centre (NCSC UK) details recent tactics, techniques and procedures (TTPs) of the group commonly known as APT29, also known as Midnight Blizzard, the Dukes or Cozy Bear.

• Posted February 22, 2024
• Cyber Security Alerts
• Technical Advisories

The NCSC would like to draw your attention to two CVEs affecting all versions of ConnectWise ScreenConnect before 23.9.8. The NCSC is aware of open-source reporting of active exploitation and a proof of concept.

• Posted February 19, 2024
• Cyber Security Alerts
• Technical Advisories

The NCSC would like to draw your attention to two critical zero-day vulnerabilities affecting Microsoft products: CVE-2024-21410 affecting Exchange Server and CVE-2024-21413 affecting Outlook.

• Posted February 15, 2024

Laura, an NCSC analyst, shares insights into her workday – and it’s not what you might think.