National Cyber Security Centre

New Zealand has built a world-class technology sector known for its ingenuity, practicality and willingness to challenge convention. This success can make us an attractive target for state actors, competitors, and criminals.   We have today released Secure Innovation guidance alongside the NZ Security Intelligence Service (NZSIS), for founders and leaders of start-ups in the emerging technology sector.   This guidance is for emerging technology companies in New Zealand and outlines cost-effective measures leaders can take now to protect their ideas, reputation, and future success.   As part of a joint effort, this has been published at the same time as similar guidance from the security intelligence agencies in Australia, Canada, the UK, and the US.   Together, we are helping to protect our respective technology sectors from a range of current and emerging threats, particularly those from state actors.   Learn more about our Secure Innovation guidance for New Zealand's emerging technology companies here 👇 https://lnkd.in/gzdKSJNQ

As Cyber Smart Week comes to an end, the risk to our online security doesn’t.     Scammers take $3.8m from New Zealanders’ every week.    #OwnYourOnline and #StopTheScamathon by adopting two simple cyber security measures on your online accounts. Find out more at https://lnkd.in/gNMScxDi     #OwnYourOnline  #CSW24

Cyber security alert ⚠ The NCSC would like to draw your attention to a critical vulnerability affecting FortiManager. The CVE for this vulnerability has now been assigned as CVE-2024-47575. The NCSC is aware of exploitation in September 2024.   CVE-2024-47575 is a missing authentication for critical function in the FortiManager fgfmd daemon which may allow a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests to port TCP/541.   The vulnerable versions of FortiManager are:   👉7.6.0 and below 👉7.4.4 and below 👉7.2.7 and below 👉7.0.12 and below 👉6.4.14 and below  👉6.2.12 and below   The vulnerable versions of FortiManager Cloud are:   👉 7.4.4 and below 👉7.2.7 and below 👉7.0.12 and below 👉All versions of 6.4   Old FortiAnalyzer models (1000E, 1000F, 2000E, 3000E, 3000F, 3000G, 3500E, 3500F, 3500G, 3700F, 3700G, 3900E) may also be vulnerable in certain configurations.    The NCSC encourages organisations in New Zealand that use the affected products to review the vendor advisory and apply all available patches as soon as possible. We also recommend that organisations inspect devices for suspicious activity and consider the potential risk and exposure of sensitive information from these devices. Consider rebuilding the affected devices with new credentials and using IP filtering to restrict access to these services. Vendor advisory 🔗 https://lnkd.in/dQp5iuuG

Welcome to Cyber Smart Week: The Scamathon 🎬 We’re proud to be running this year’s campaign which supports New Zealanders to #OwnYourOnline. This years campaign called The Scamathon features a host of scammers appealing to us to do all the wrong things. But we can all help to avoid giving to The Scamathon by adopting some simple cyber security measures. Visit https://lnkd.in/gNMScxDi to find out more about our campaign and view new videos daily throughout the week. #StopTheScamathon #OwnYourOnline #CSW24

This year, the NCSC is excited to be running Cyber Smart Week.     Keep a lookout next week for this year’s The Scamathon campaign.      #StopTheScamathon  #OwnYourOnline #CSW24

We have eight free online events running from 21-24 October during Cyber Smart Week. Whether you're a seasoned professional or just embarking on your online security journey, our experts will share invaluable tips, tricks, and practical advice you can use right away. These webinars will cover a range of sectors and groups, including: ✅ individuals ✅ healthcare ✅ small business ✅ mentors and advisors ✅ financial services ✅ seniors ✅ local and central government ✅ tech professionals. To secure your spot at the session of your choice, register now 🔗 https://lnkd.in/gEV2Yaaf Please share this with anyone you think would benefit from attending. #NCSC #CERTNZ #ownyouronline #csw24

Do you need a fun, fast, and easy way to test your incident response plan and help to improve your organisations cyber resilience?   The NCSC has released Rolls & Responders – our new resource to help New Zealand organisations test their incident response plan and in turn, help to improve their cyber resilience.   We know that for organisations, devising scenarios and exercises to test an incident response plan can become a time-consuming, complicated, and expensive task.   That’s why we’ve developed Rolls & Responders to be a lightweight, plug-and-play solution that will promote more regular use of exercises in business continuity planning.   Download Rolls & Responders on the NCSC website and test your organisation 👉 https://lnkd.in/gaQWfHme

Today, Hon Andrew Bayly, Minister for Small Business and Manufacturing, announced the launch of the Own Your Online: business online security series. Many businesses don’t know where to start with online security and don’t have time to seek out all the information. So, we’ve made it easy. We’ve created five videos that take you through how to help your business become more secure online. From setting up two-factor authentication, to helping secure your website and social media accounts. These videos will give you an understanding of the basics your business needs to have in place, and how to go about implementing them. Start your business online security journey now and help Unmask Cyber Crime. 🔗https://lnkd.in/gnrrq8Pp #NCSC #CERTNZ #ownyouronline 

Joint guidance 📢 Within critical infrastructure, operational technology (OT) controls many of the essential services we rely on – from the water we drink, to the transport systems that gets us from A to B. Ensuring our OT systems are cyber secure is paramount to preserving our everyday life.   We have partnered with our Australian counterparts, Australian Signals Directorate and other international agencies to support their release of the ‘Principles of operational technology cyber security’ publication.   These principles aim to help leaders, developers and other key stakeholders make robust, informed, and comprehensive decisions when designing, implementing, and managing cyber security risks in OT environments.   The six principles are:  👉 ensure the system is safe  👉know and defend your vital systems  👉protect your OT data – it is valuable 👉 separate OT from other networks  👉secure your supply chain  👉prepare your people – they are your first line of defence.   Read the paper and find out more about keeping OT cyber secure 👉 https://lnkd.in/gnpvGRuJ   #CyberSecurity #SecurityInfrastructure 

This year Cyber Smart Week will be brought to you by the NCSC, now that we have joined together with CERT NZ as one agency.   Last October CERT NZ launched the highly successful EXPOSED campaign on the new Own Your Online website. Research showed that 70% of people took some action after seeing the campaign.   We are encouraging New Zealanders to continue to build good online security habits to keep their accounts, businesses and online lives secure.   👉 Sign up to be a supporter! You’ll get an educational and promotional pack to help boost online security awareness in your business and prompt action.   It includes material to share with your customers, clients, colleagues and staff. In it you will find webinars, posters, social media content, email banners and much more.   If you want to get involved, sign up to become a Cyber Smart Week supporter:  https://lnkd.in/gQ8DqhEE #ownyouronline #csw24 CERT NZ