Banking scams have moved to your phone – here is how to protect your business
Banking scam attempts are up 35% and now target mobile phones almost exclusively. Simple steps Sydney small businesses can take to stay safe.
Cybersecurity
Practical cybersecurity guidance for Australian and New Zealand businesses.
One email was enough to hijack this AI assistant: what it means if AI reads your inbox
Researchers showed a single email could take over the Manus AI agent and reach connected accounts. What it means for businesses giving AI access to email.
Stolen staff passwords let an attacker take French tax data for seven weeks
An attacker used stolen staff passwords to take French tax data for seven weeks without being noticed. What it means for your business logins.
Citrix remote access flaws are being attacked. Is your business affected?
Citrix has patched two critical NetScaler ADC and Gateway flaws that attackers exploited before fixes existed. What Sydney businesses should check.
A serious WordPress flaw is being targeted. Is your website patched?
Attackers are targeting a serious flaw in WordPress core (CVE-2026-87902). What it means for small business websites and how to check yours is patched.
A phishing service for hire took over 12,000 Microsoft inboxes
Microsoft has shut down EvilTokens, a paid phishing service that took over 12,000 Microsoft accounts and used them to trick staff into sending money. What it means for your business.
That sponsored bank link could be a fake
Criminals bought sponsored search ads to send banking customers to fake login pages. What Australian small businesses should change this week.
Your AI Assistant May Be Reading More Than You Allowed
Meta’s Muse assistant described a user’s private messages he says he never granted it. What Sydney small businesses should check on work devices.
Your phone now warns you about scams. Your invoices still do not.
Google’s September Pixel Drop adds scam alerts to the handset. Useful – but the fraud that costs Australian small businesses arrives by email.
Passkey and sign-in prompts are the new phishing bait for Microsoft 365
Microsoft warns extortion gangs are using passkey and single sign-on themed scams to break into Microsoft 365 accounts. What Sydney businesses should do.