27 September 2023

State-based cyber attack: How to protect yourself

Start the conversation

Jasmine Gearie* says there are three main ways to protect personal and professional information from the ‘state-based’ cyber attack targeting Australians.

Prime Minister Scott Morrison has revealed today that Australian organisations – both public and private – are being targeted by a large scale state-based cyber attacker.

The Prime Minister says the threats are sophisticated, and are directed towards “all levels of government, industry, political organisations, education, health, essential service providers and operators of other critical infrastructure”.

While Mr Morrison would not name the origin of the cyber threat, he went on to say that “we know it is a sophisticated state-based cyber actor because of the scale and nature of the targeting and the tradecraft used”.

During a press conference in Canberra, the Prime Minister said this kind of malicious cyber activity towards Australian organisations wasn’t new, but was becoming more commonplace.

He was joined by Minister of Defence Linda Reynolds, who clarified that the campaign was “increasing in frequency, scale, in sophistication and also in its impact”.

What you can do to protect yourself

The Prime Minister stated that the purpose of his announcement was not to cause concern, but to advise Australians on how they can take action to protect themselves.

So, what can businesses and individuals do?

The government outlined three strategies that Australians should follow.

Firstly, it’s important to ensure that your internet-connected devices have been patched with the latest-available security updates, and to ensure they’re kept secure by installing any new updates as soon as they’re released.

For businesses, that includes ensuring any web-facing services they use (such as website hosting and email servers) are updated with the latest software fixes.

Secondly, multi-factor authentication for user accounts should be turned on as standard.

This will help keep your internet access, cloud-based platforms and organisation infrastructure secure.

Finally, the government recommends organisations register to become a partner of the Australian Cyber Security Centre (ASCS).

Businesses, government agencies and not-for-profit institutions that sign up will automatically receive threat information and actionable advice direct from the Australian government.

The threat of malicious cyber activity will also be of importance to the many Australians who have shifted into remote work as a result of the COVID-19 pandemic, and if you fall into that category, we’ve put together some simple advice on how you can protect yourself when you work from home.

*Jasmine Gearie is a writer at Tech Radar.

This article first appeared at techradar.com

Start the conversation

Be among the first to get all the Public Sector and Defence news and views that matter.

Subscribe now and receive the latest news, delivered free to your inbox.

By submitting your email address you are agreeing to Region Group's terms and conditions and privacy policy.