classification.gov.au defaced

The classification.gov.au website was defaced today - doubtless through a vulnerability in the content management system used to maintain the site. The tone and content of the defacement makes it pretty clear that this was not just a random script kiddie:

(image mirrored from here)

Given the controversy surrounding Australian censorship and classification bodies in the last while, an attack like this is not surprising. The relevant risk manager should have been aware of the clear spike in hostile intent towards the relevant web properties once negative publicity started. It would be interesting to know whether an independent assessment was commissioned to try to pre-empt this type of PR disaster.

The site was taken offline soon after the compromise became public, and at the time of writing is still down.