The Australian Government has issued a new directive banning the use of Kaspersky Lab products and web services across all government systems and devices. The directive, issued by the Department of Home Affairs and effective April 1, 2025, mandates the removal of any existing Kaspersky installations and prohibits future use.
This decision comes after a threat and risk analysis concluded that Kaspersky products pose “an unacceptable security risk to Australian Government, networks and data, arising from threats of foreign interference, espionage and sabotage.” The directive specifically highlights concerns about Kaspersky’s “extensive collection of user data and exposure of that data to extrajudicial directions from a foreign government that conflict with Australian law.”
While the directive doesn’t explicitly name the foreign government, Kaspersky Lab is a Russian cybersecurity company, and concerns have been raised in the past about potential ties to the Russian government. This ban aligns with similar actions taken by other countries, including the United States, which banned Kaspersky products from federal systems in 2017.
Australian Government entities are required to comply with the directive by April 1, 2025, and report their completion to the Department of Home Affairs. Exemptions may be granted for “legitimate business reasons” related to national security and regulatory functions, but only with appropriate mitigations in place.
This ban represents a significant step for the Australian government in its efforts to strengthen cybersecurity posture and protect sensitive data from potential foreign interference.
Related Posts:
- CVE-2024-39717: Versa Networks Director GUI Flaw Under Active Attack, CISA Issues Urgent Patching Directive
- China Targets U.S. Tech Startups through Investments, NCSC Reveals
- Chinese hackers attack Australian national universities, threatening national security
- Over 300,000 citizen data may be abused, Australia investigates Facebook
- Google Faces Australian Government Investigation due to collecting user data
