Releases

In December 2025, New Zealand's National Cyber Security Centre (NCSC) did something it had never done before. It emailed 26,000 New Zealanders  directly to warn them their devices were likely infected with malicious software called Lumma Stealer. The malware had been quietly harvesting passwords, browser data and banking credentials from Windows devices. Some of those stolen credentials were linked to government agency systems and bank accounts . It was the largest public out

Most people hear the term zero-day  and assume it's only relevant to big tech companies or spy agencies. Zero-days affect everyone more than you'd think. They turn up in phones, laptops, routers, apps and the cloud tools that we all use. Understanding what they are makes it easier to see why software updates appear at the worst possible moments and why the concern is not just for security people. Fresh vulnerability A zero-day vulnerability is a flaw in software or hardware t

A surprising number of data breaches still come down to the same thing, someone left something open that shouldn’t have been. Not a zero-day exploit or a nation-state actor, just a simple misconfiguration in an AWS deployment that no one noticed until it was too late. Secure Cloud Deployment. It happens everywhere. Even mature teams get caught by configuration drift, neglected IAM roles, privileged access tokens, or an old S3 bucket that was used for a demo and never locked d

The final outcome of most penetration tests is the report, and it is often the part dreaded most by the consultants carrying out the test. One part especially is frequently found difficult by many consultants but, with the right guidance, can actually be relatively straight forward. The Executive Summary. A-rated summary A pentest report is only as valuable as its first page. The executive summary is where decisions are made, it’s what boards, managers, and risk owners read f

When major European airports ground to a halt in September 2025, the cause wasn't a storm, strike, or mechanical failure. It was...

This guide covers the essential security checks every small team should use. Most of these tools are free or cheap, and they run...

New Zealand's small and medium-sized enterprises (SMEs) are rapidly adopting cloud infrastructure for its flexibility and scalability....

Cyber insurance can save your business when you are dealing with ransomware and the related business interruption, privacy breaches, and...

Why Fortinet Products Keep Appearing in Security Advisories Fortinet firewalls are everywhere, reportedly accounting for over half of all...

If you're responsible for keeping your business secure, you've probably heard terms like vulnerability scan , penetration test  (or...

Ransomware has become the most dangerous cyber security threat facing New Zealand businesses today. CERT NZ's latest Q1 2025 report shows...

Mobile apps are everywhere. Whether it’s a banking app, a fitness tracker, or a marketplace for local goods, almost every New Zealand...

In recent years cybercriminal groups have made headlines by systematically bypassing Multi-Factor Authentication (MFA), the security...

The Password Problem That's Costing New Zealand Picture this: A cybercriminal needs just one weak password to potentially access your...

Cybersecurity threats are evolving rapidly, and New Zealand businesses are no longer flying under the radar. From SMEs to large...

TL;DR This is a critical SharePoint server bug  that lets attackers break in without authenticating  and gain admin access to the system....

Generative AI chatbots are becoming a serious consideration for many New Zealand businesses. Whether it's to improve customer service,...

If you manage a website or IT services for a NZ business, there’s a big change coming. SSL/TLS certificates (those things that make your...

Many Kiwi businesses assume their IT provider handles all aspects of security. But penetration testing , a specialised service performed...

Guest post from TheXero For many small and medium businesses, Wi-Fi is something that’s set up once and rarely thought about again, until...