Read CERT NZ's latest quarterly report
25 November 2020
Dismiss
Skip to main content
Return to homepage
Search
Main navigation
Individuals
Guides
Back
Guides
Getting started with cyber security
Back
Getting started with cyber security
Top 11 tips for cyber security
How to create a good password
Backing up data and devices
Use two-factor authentication to protect your accounts
Keep your data safe with a password manager
Protecting your privacy online
Keep up with your updates
Report online
Stepping up your cyber security
Back
Stepping up your cyber security
Secure your home network
Buying a new device
Cyber security and social media
Keeping your mobile phone safe and secure
Shopping online safely
Cryptocurrency security
How the cloud works
Ditch your older device
Staying secure while working from home
Using encryption to keep your data safe
Report online
Report online
Explore
Back
Explore
Credential dumps
Report online
Alerts
Back
Alerts
Nitro PDF users’ email addresses and hashed passwords leaked
Malware being spread via email attachments
Businesses compromised through remote access systems
Attackers using COVID-19 themed scams - updated alert
Serious issue with older Microsoft Windows systems
Financial sector targeted in blackmail campaign
Serious vulnerability in popular forum software - vBulletin
Christchurch tragedy-related scams and attacks
Google Chrome web browser security issue
Bomb threat emails affecting New Zealanders
Webcam and password blackmail scam
Malware targeting business customers of New Zealand banks
Invoice scams affecting New Zealand businesses
New malware found on routers
Misuse of Cisco devices
RealMe phishing emails
Vulnerabilities in computer processors
Report online
Report online
Business
Guides
Back
Guides
Business basics
Back
Business basics
Managing passwords and authentication in your business
Top 11 cyber security tips for your business
Using two-factor authentication (2FA) to secure your business
Backups for your business
Choosing an IT service provider
Secure your small business network
Using a password manager in your business
Report an incident
Secure your website
Back
Secure your website
Trade Smart Online
Back
Trade Smart Online
Protect it campaign
Report an incident
Benefits of using HTTPS across your website
Set up logs for your website
Accepting payments online
Keeping business data safe with encryption
Report an incident
Policies and processes
Back
Policies and processes
Create a cyber security policy for your business
Create a password policy for your business
Cyber security awareness for your staff
Cyber security risk assessments for business
Enabling staff to work remotely
Types of remote access software
Software as a service
Preventing your email from being spoofed
Report an incident
Responding to incidents
Back
Responding to incidents
Getting a vulnerability report
Creating an incident response plan
What to do after you’ve identified a cyber security incident
Communicating in a cyber security incident
Report an incident
Report an incident
Common threats
Back
Common threats
Protecting your business from spear phishing and whaling
Phishing scams and your business
Business email compromise
Report an incident
Alerts
Report an incident
IT specialists
Guides
Back
Guides
Legacy systems
Mobile device management
Back
Mobile device management
Managing mobile devices on your network
Report an incident
How to report a vulnerability
Default credentials
Cloud-based identity providers and authentication
Securing access to Microsoft 365
Mitigating the impact of incidents in M365
Preparing for denial-of-service incidents
Mitigating denial-of-service attacks
Manage authentication
Back
Manage authentication
Changing default credentials
Configuring central identity providers
Report an incident
Asset lifecycle management
Back
Asset lifecycle management
Creating an asset lifecycle
Lifecycle management: identifying existing assets
Mitigating legacy systems
Identifying and managing legacy systems
Report an incident
Report an incident
Critical controls
Back
Critical controls
Multi-factor authentication
Back
Multi-factor authentication
Implementing multi-factor authentication
Report an incident
Patching
Back
Patching
Implementation advice for patching
Creating a standard patching process
Report an incident
Implement and test backups
Back
Implement and test backups
Backing up your data
Report an incident
Application allowlisting
Back
Application allowlisting
Implementing application allowlisting
Report an incident
Centralised logging
Back
Centralised logging
Configuring centralised logging
Report an incident
Network segmentation and separation
Back
Network segmentation and separation
Architecting network segmentation
Report an incident
Securing internet-exposed services
Back
Securing internet-exposed services
Implementation advice for securing internet-exposed services
Report an incident
Secure defaults for macros
Back
Secure defaults for macros
Configuring secure defaults for macros
Report an incident
Report an incident
Advisories
Back
Advisories
Oracle WebLogic Server vulnerability being exploited
Increase in Ryuk ransomware attacks
Critical Windows Authentication Vulnerability in Netlogon
Emotet Malware being spread via email
Critical vulnerability in Microsoft Windows Server
Active ransomware campaign leveraging remote access technologies
Targeted attacks exploiting vulnerabilities in Microsoft Windows
Critical remote unauthenticated vulnerability in SMBv3
Vulnerability in Exchange Server actively exploited
Updated: Exploitation of critical Citrix vulnerability
Critical vulnerabilities in Microsoft Windows
Critical vulnerability in Microsoft remote desktop services
DDoS extortion campaign targeting financial sector
Virtual private network (VPN) vulnerabilities being exploited
Vulnerability and zero-day exploit targeting vBulletin forum software
'Urgent 11' vulnerabilities in VxWorks operating systems
Oracle WebLogic vulnerability being exploited
Exim mail transfer agent (MTA) vulnerability being exploited
Microsoft SharePoint vulnerability being exploited
Google Chrome web browser vulnerability
UPnProxy and 'EternalSilence' being used to exploit routers
Banking malware targeting business customers of New Zealand banks
VPNFilter malware
S/MIME and OpenPGP email client vulnerability
Cisco Smart Install misuse
MikroTik RouterOS vulnerability
Memcached reflection denial-of-service
Meltdown and Spectre CPU vulnerabilities
Report an incident
Report an incident
About
About us
Quarterly reports
Back
Quarterly reports
Quarter Three Report 2020
Quarter One and Two Report 2020
2020 half year summary
2019 Report Summary
Quarter Four Report 2019
Quarter Three Report 2019
Quarter Two Report 2019
Quarter One Report 2019
2018 Report Summary
Quarter Four Report 2018
Quarter Three Report 2018
Quarter Two Report 2018
Quarter One Report 2018
Quarter Four Report 2017
Quarter Three Report 2017
Quarter Two Report 2017
Our partners
Contact us
News
Back
News
Email-related attacks cost New Zealanders close to one million dollars
Businesses encouraged to trade smart online to avoid a nightmare before Christmas
What is a CERT, anyway?
Stay alert to email and online shopping scams this holiday season
Complacency makes Kiwis more vulnerable to cyber attacks
COVID-19: operating your business under Alert Levels 1 and 2
Online recruitment scams
COVID-19: operating your business at all alert levels
Using Zoom safely
Preparing your business for Alert Level 3
COVID-19: CERT NZ availability through levels 3 and 4
COVID-19: supporting people to work from home
Safer Internet Day – help kids stay safe online
Buying devices for back to school
Search
Subscribe to updates
Twitter updates
Facebook page
Report an issue
>Glossary Term
Name
Email
Subscription options
Advisories for businesses and individuals
Advisories for technical staff
Cyber Smart updates
Quarterly e-news
Spam protection
You must enable JavaScript to submit this form
Please tick the box to prove you're a human and help us stop spam.
Subscribe