PHP2Shell isn’t a WordPress bug — it’s a flaw underneath almost every business website, and it lets a stranger take over the web server without a password. Updated WordPress last week? That doesn’t fix this one — and the site […]
Most providers will not tell you how much managed IT services cost until you are in a sales process. Here is what the published Australian ranges actually say — and, more usefully, how to tell whether one quote is even
How Much Do Managed IT Services Cost in Australia? Read Post »
Most small businesses either have no acceptable use policy or copied one from a university — and both fail for the same reason: nothing in them is actually enforced. The short version An acceptable use policy sets out what staff
Acceptable Use Policy: What an Australian Small Business Needs to Include Read Post »
A business continuity plan and a disaster recovery plan get used as if they mean the same thing. They do not — and the difference decides whether your business can keep taking orders while your IT is being fixed. The
Business Continuity Plan vs Disaster Recovery: What an Australian SMB Actually Needs Read Post »
Self-service password reset (SSPR) removes the single most common helpdesk ticket there is — the forgotten password. But where you configure it changed in 2025, and most Microsoft 365 tenants are still carrying a policy gap they can’t see. The
Self-Service Password Reset (SSPR) in Microsoft 365: How to Set It Up Properly Read Post »
Over the past couple of weeks we’ve seen a lot more of a kind of attack that doesn’t look like a virus and isn’t really a trojan. There’s no malware for your antivirus to catch — because the attacker never
The headlines said Microsoft extended Windows 10 support for free. If you run a business, that extension isn’t for you — and staying on Windows 10 after end of support now carries a real, escalating cost. The short version Windows
Windows 10 End of Support: What It Actually Costs Your Business to Stay Put Read Post »
The Australian Signals Directorate has confirmed it is replacing the ASD Essential Eight with a new Essentials series. But this is an evolution, not a demolition — and the worst response available to an Australian business is to stop work.
Replacing the ASD Essential Eight: What the Essentials Series Means for Your Business Read Post »
The Cyber Security Act 2024 has been law since 2024, and its ransomware payment reporting rules have been in force since 2025. Most Australian businesses captured by them have no idea the obligation applies — until the 72-hour clock is
The Fortinet breach now circulating as FortiBleed has exposed administrator and VPN credentials for roughly 74,000 FortiGate firewalls across 194 countries — about half of every internet-facing FortiGate on the planet. It isn’t a new vulnerability, and that’s exactly why
