InfoSecBulletin Cybersecurity for mankind
On February 21, the Australian Department of Home Affairs issued a directive prohibiting the installation of Kaspersky Lab products and services on all Australian government systems and devices.
The directive under the protective security policy framework (PSPF) mandates federal entities to eliminate “all instances” of Kaspersky’s products.
UK Software Firm Exposed 8 million of Healthcare Worker Records
GitHub Enterprise Server Vulns Expose Risk of Code Execution
CVE-2025-2492
ASUS warns of critical auth bypass flaw in routers
16,000+ Fortinet devices compromised with symlink backdoor, Mostly in Asia
Patch now! Critical Erlang/OTP SSH Vuln Allows UCE
CISA warns of increasing risk tied to Oracle legacy Cloud leak
CVE-2025-20236
Cisco Patches Unauthenticated RCE Flaw in Webex App
Apple released emergency security updates for 2 zero-day vulns
Oracle Released Patched for 378 flaws for April 2025
CVE-2025-24054
Hackers Exploiting NTLM Spoofing Windows Vuln the in Wild
Home Affairs secretary Stephanie Foster assessed that Kaspersky software “poses an unacceptable security risk to Australian government, networks and data, arising from threats of foreign interference, espionage and sabotage.”
“I also considered the important need for a strong policy signal to critical infrastructure and other Australian governments regarding the unacceptable security risk associated with the use of Kaspersky Lab products and web services.”
All non-corporate Commonwealth entities must stop using Kaspersky Lab products and services and uninstall them by 1 April 2025, the directive states.
Only agencies involved in “national security or regulatory functions, including compliance and law enforcement functions” can seek an exemption to the ban, if mitigations are in place.
This decision follows a six-month ban by the U.S. government on Kaspersky software sales in North America.
Australia has joined the US and Canada in banning Kaspersky software from government systems, becoming the third Five Eyes nation to do so. The US implemented its ban in 2017.
