APS A.I CyberSecurity Scoring
28/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Australian Public Service in 2026.
No incidents recorded for Australian Public Service in 2026.
No incidents recorded for Australian Public Service in 2026.
Latest updates, reports, and threat intel affecting the global network.
While the threat landscape evolves at machine speed, our sector remains tethered to a talent pool that fails to reflect either the...
APS leaders must be asking for real-time, reproducible evidence their tech security posture is effective.
How can agencies rapidly introduce a Zero Trust approach that both integrates with existing infrastructure and evolves with ongoing...
Federal government entities are not reporting cyber incidents to the country's main intelligence agency and more than three in four still...
Registrations have opened for the Government Cyber Security Showcase Victoria 2026, a one-day event aimed at helping public sector leaders...
A British cybersecurity expert has been given coveted Australian permanent residency status after hacking the government's systems while his...
This two-day national forum brings together senior government leaders, cybersecurity specialists, AI technologists, and policy experts to explore how...
This year has been a whirlwind for Australian Government lawyers, with shifts in technology and an ambitious reform agenda driving change...
Defence company Thales Australia has opened a new cyber Security Operations Centre (SOC) in Canberra to protect Government and Critical...
ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reach the vulnerable function, causing heap corruption.
PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param_set_default_file() and param_set_backup_file() functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 shell to trigger the crash.
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() due to a race condition between task spawning and object deletion. Attackers can trigger the calibration process via shell commands to write to freed heap memory, corrupting unrelated objects or allocator metadata and destabilizing heap operations.
Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copies HDF5 attribute names into a fixed 256-byte buffer without length validation. Attackers can craft HDF5 files with oversized attribute names to overflow the destination buffer, causing memory corruption and crashes when applications enumerate attribute names.
Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound email processing in applications that send mail to user-supplied addresses. This issue has been patched in versions 12.60.0 and 13.10.0.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.