Global cybersecurity alert exposes 30 critical flaws under attack now

The Australian Government has joined forces with the US, UK, and FBI to issue a new cybersecurity advisory. The report highlights 30 critical vulnerabilities that hackers are actively exploiting. Officials are urging organisations to take immediate action to protect their systems. The advisory, released by the Australian Cyber Security Centre (ACSC) alongside international partners, lists flaws in widely used software. Microsoft, Pulse, Accellion, VMware, and Fortinet products are among the most targeted. Patches for all 30 vulnerabilities are already available, but many businesses have yet to apply them.

Four of the most exploited weaknesses in 2020 involved remote work tools, VPNs, and cloud-based systems. The ACSC is now pushing for a centralised patch management system to help companies stay updated. Despite this, the advisory does not outline specific steps to tackle human error—a major factor in breaches. Cybersecurity expert Jacqueline Jayne pointed out that phishing emails and other mistakes remain a common entry point for attacks. However, the document offers little guidance on reducing these risks. The ACSC has reiterated its commitment to working with global allies to address cyber weaknesses and share mitigation strategies.

The joint advisory provides a clear list of vulnerabilities and available fixes. Organisations are being told to prioritise patching and strengthen their defences. Without further measures to address human error, though, some risks will likely remain.