InfoSecBulletin Cybersecurity for mankind
On February 21, the Australian Department of Home Affairs issued a directive prohibiting the installation of Kaspersky Lab products and services on all Australian government systems and devices.
The directive under the protective security policy framework (PSPF) mandates federal entities to eliminate “all instances” of Kaspersky’s products.
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems
Paraguay 7.4 Million Citizen Records Leaked on Dark Web
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation
SoftBank: Over 137,000 personal info leaked
Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code
Home Affairs secretary Stephanie Foster assessed that Kaspersky software “poses an unacceptable security risk to Australian government, networks and data, arising from threats of foreign interference, espionage and sabotage.”
“I also considered the important need for a strong policy signal to critical infrastructure and other Australian governments regarding the unacceptable security risk associated with the use of Kaspersky Lab products and web services.”
All non-corporate Commonwealth entities must stop using Kaspersky Lab products and services and uninstall them by 1 April 2025, the directive states.
Only agencies involved in “national security or regulatory functions, including compliance and law enforcement functions” can seek an exemption to the ban, if mitigations are in place.
This decision follows a six-month ban by the U.S. government on Kaspersky software sales in North America.
Australia has joined the US and Canada in banning Kaspersky software from government systems, becoming the third Five Eyes nation to do so. The US implemented its ban in 2017.
