When did you last check your website's security?

The Australia Signal Directorate's (ASD) Australian Cyber Security Centre (ACSC) has seen malicious cyber actors targeting content management systems (CMS), the software many businesses use to manage their websites.

If your website is compromised, malicious cyber actors could:

• deface or disrupt your website
• steal customer or business information
• redirect visitors to scams or malicious content
• use your website to target others, including customers and suppliers.

ASD's ACSC has published a technical alert with advice on how to:

• check whether a website has been compromised
• investigate and remediate identified issues
• improve website security
• report a suspected compromise to ASD's ACSC.

The alert is intended for those who manage websites, such as website administrators, developers, or IT providers. If someone else manages your website, please share the alert with them and ask whether your website has been reviewed and if any action is required.

Websites are often a critical business asset. Taking simple steps now can help prevent disruption, data loss, and reputational damage.