ACSC's 14 October alert "Protecting operational technology and edge devices" responds to overseas cyber security incidents affecting commercial refrigeration systems; while ASD's ACSC has not seen active targeting in Australia, it strongly recommends organisations operating internet-connected OT assess their exposure and follow its OT-environment, edge-device and secure-connectivity guidance. The alert's mitigation advice — keep OT environments, interfaces and edge devices off the direct internet, identify and patch vulnerabilities promptly, apply strong authentication, access controls and network segmentation, and monitor for unusual automated activity — applies squarely to the Ivanti Connect Secure VPN chain widely deployed across Australian government and enterprise perimeters, where the privilege-escalation component of the chain remains unpatched and CISA's KEV listing makes exploitation likely. Combined with the standing ACSC/ASD advisory on Chinese government-linked actors and the ASD patch-priority posture, this makes the Ivanti chain the patch-first priority for Australian estates. Suspicious activity or attempted exploitation can be reported to ASD via 1300 CYBER1.

• Source article