Strengthening Australia's cyber defences

Release details

Release type

Related ministers and contacts


The Hon Andrew Hastie MP

Assistant Minister for Defence


Media contacts

Assistant Minister Hastie’s office: Ella Kenny, 0437 702 111

Release content

25 March 2021

Australians cannot be complacent about their cyber security.

At the beginning of March, Microsoft detected a vulnerability in the Microsoft Exchange software. This vulnerability gives hackers the ability to access Australian data.

The Australian Cyber Security Centre (ACSC) has released advice detailing the cyber security threat to Australian businesses and organisations, and links to how to patch vulnerable versions of Microsoft Exchange.

However, many Australian businesses have not yet installed the Microsoft patch and this is the necessary software update to protect themselves from potential compromise.

Assistant Minister for Defence, the Hon Andrew Hastie MP, urged all Australian organisations to visit cyber.gov.au for information on this vulnerability and the steps required to address this threat.

“The Morrison Government’s first priority is to keep Australians safe, including when online, and it is vital that small businesses and organisations take the necessary steps to protect themselves from this vulnerability,” said Assistant Minister Hastie.

“My first priority is to keep Australians safe in both the physical world and online, and to do this I need everyone to listen to these warnings, and follow the advice of the ACSC and strengthen our cyber defences.”

“If you use Microsoft Exchange it is critical that you move fast to shut this potential threat down.”

Cyber security is a team effort and a shared responsibility. It is vital that Australian businesses and organisations are alert to this threat and take the additional steps outlined by the ACSC and Microsoft to strengthen the resilience of their networks.

We know about this vulnerability- and so do cybercriminals. By not patching, Australians are leaving their door open for criminals to exploit their computer systems.

Whilst this vulnerability is new, these kinds of threats are not. Last financial year, the Australian Signals Directorate and the Australian Cyber Security Centre received over 60,000 cybercrime reports. That is one every 10 minutes.

For all cyber security advice and guidance, including tips for how to stay secure online, visit cyber.gov.au or call 1300 CYBER1 (1300 292 371).

Other related releases