# IT Consulting Services URL: https://mercuryit.com.au/it-services/it-consulting-services/ Consulting Services Consulting services can be provided as part of managed services, project services or standalone consulting. Consulting services include: Project Management ICT and/or Cloud Strategy IT Audits and Review Security Audits Disaster Recovery and Business Continuity planning Conducting selection and procurement processes, including tenders, RFP and RFQ processes Governance Audits Software selection, integration planning and advice FAQs What are IT consulting services? IT consulting services provide expert advice to help your business solve specific technology challenges. Unlike day-to-day IT support, a consultant is a expert you engage for a specific project, such as developing an IT roadmap, auditing your cybersecurity risks, or planning a complex cloud migration. When should my business hire an IT consultant? You should hire an IT consultant when you're facing a major technology decision and lack the specific in-house expertise. This is ideal for developing your IT strategy, planning a new office relocation, needing an independent cybersecurity audit, or assessing your AI readiness. What's the difference between IT consulting and managed IT services? IT consulting is strategic and project-based, where we provide the plan. Managed IT services are operational and ongoing, where we execute the plan and run your day-to-day IT. A consultant helps you decide on the best cloud strategy; your managed service provider manages and supports that cloud environment. How can IT consulting save my business money? IT consulting prevents costly mistakes. By leveraging an expert, you ensure you invest in the right technology at the right time. A consultant identifies efficiencies, optimises software licensing, and designs a scalable IT roadmap. What IT consulting services does Mercury IT offer? Mercury IT provides strategic consulting for businesses. Our key services include developing comprehensive IT strategies and roadmaps, conducting in-depth cybersecurity risk assessments, planning cloud-readiness and migrations (Microsoft 365 & Azure), and advising on AI governance and roadmap. Contact us today to discuss your IT Consulting requirements Reach out --- # IT Managed Services URL: https://mercuryit.com.au/it-services/it-managed-services/ IT Managed Services is an effective way to ensure your IT best supports the smooth running of your business operations. We act as your remote helpdesk support and can assist however you need it. Fully Managed IT Services Where you have no in-house IT staff and need access to all areas of IT management. Partially Managed or Extension Services Where you have a small in-house team of IT staff and require specialised expertise in certain areas. Whichever best describes your needs, our Managed IT Services provide access to a team of skilled experts within a cost-effective framework, allowing you to focus on your business and leave IT to us. What's included in our IT Managed Service? Service Team (Helpdesk) To ensure we are an IT helpdesk provider that is always easily accessible, we take log service requests via email, web portal or over the phone to ensure your IT issues are dealt with efficiently. Our hard-working helpdesk support and team of engineers work from our Service Desk. Our helpdesk support is there to conduct troubleshooting, resolve enquiries and ensure your complex IT issues are in the right hands. While our team of engineers is there to monitor critical systems via real-time monitoring dashboards and alerts and perform regular maintenance. Through monitoring and regular maintenance, like outlined below, we aim to prevent issues from occurring while also providing recommendations for any changes, updates or other work that should be performed to ensure the continued operation of the environment. Unlimited Service Desk Support Reactive Onsite Support System Maintenance Patch Management Proactive Review Health Checks Device Monitoring How our IT Managed Service works 1. Moves, Adds and Changes (MAC) Every business and organisation requires new users to be set up, departing users to be removed and changes made to user profiles, applications, email etc. Moves, Adds, and Changes is a major component of our daily operations, so we’re highly experienced at providing this service. 2. Break - Fix Support It’s an unfortunate reality that, at some point, technology breaks. Whether it’s an account locked out, hardware wearing out, application integration issues, operating system issues or pretty much anything that is either software or hardware-driven, our knowledgeable team can rapidly troubleshoot issues reducing your business’ downtime. 3. Proactive Maintenance Server Maintenance Includes maintaining current service and security patches and checking backups, server health, event viewers and hardware status and proactive fault finding. Desktop Maintenance Includes maintaining current service and security patches for desktops and checking desktop health, event viewers and hardware status and proactive fault finding. 4. IT Advice When you sign up for our IT Managed Service, our team becomes your trusted IT partner. We get to understand what drives your organisation, outline your goals for IT (i.e. improving security and governance, improving efficiency, reducing ongoing issues, etc.) and provide technical advice to achieve them. We’re proud to partner with our customers to provide the expertise of an enterprise-level IT department at a scaled cost. To discuss your IT Support requirements further, please get in touch. FAQs What is managed IT services for businesses? Our comprehensive managed IT service includes helpdesk support, proactive network monitoring, and a complete data backup and disaster recovery plan. It also covers vendor management, software patching, and strategic IT consulting to align your technology with your business goals. How do managed IT services reduce IT downtime? Managed services reduce downtime by being proactive, not reactive. Through 24/7 monitoring, we identify and fix potential issues like hardware failures or security risks before they can cause an outage. Regular patch management and maintenance also prevent system crashes and security vulnerabilities, keeping your team productive. What is the difference between managed IT services and in-house IT teams? An in-house team consists of direct employees, which can be costly and may have skill gaps. Managed IT services give you on-demand access to an entire team of specialists such as (in cybersecurity, cloud, networking,) for a monthly fee. This is often more cost-effective and provides a much broader range of expertise than a small internal IT team. Can managed IT services scale as my business grows? Yes, managed services are designed to scale with your business. As you add new employees, open new offices or locations, or adopt new technologies, your IT plan can be adjusted. This is far more flexible and cost-effective than the slow and expensive process of hiring and training new full-time IT staff. How do managed IT providers improve cybersecurity for SMBs? Managed IT providers are the frontline defence for SMBs. We implement a layered security strategy that includes 24/7 threat monitoring, endpoint protection, firewalls, email filtering, and critical patch management. This multi-layered approach provides enterprise-grade security that is difficult for an SMB to implement and manage on its own. --- # IT Managed Services URL: https://mercuryit.com.au/it-services/it-managed-services-desktop/ IT Managed Services is an effective way to ensure your IT best supports the smooth running of your business operations. We act as your remote helpdesk support and can assist however you need it. Fully Managed IT Services Where you have no in-house IT staff and need access to all areas of IT management. Partially Managed or Extension Services Where you have a small in-house team of IT staff and require specialised expertise in certain areas. Whichever best describes your needs, our Managed IT Services provide access to a team of skilled experts within a cost-effective framework, allowing you to focus on your business and leave IT to us. What's included in our IT Managed Service? Service Team (Helpdesk) To ensure we are an IT helpdesk provider that is always easily accessible, we take log service requests via email, web portal or over the phone to ensure your IT issues are dealt with efficiently. Our hard-working helpdesk support and team of engineers work from our Service Desk. Our helpdesk support is there to conduct troubleshooting, resolve enquiries and ensure your complex IT issues are in the right hands. While our team of engineers is there to monitor critical systems via real-time monitoring dashboards and alerts and perform regular maintenance. Through monitoring and regular maintenance, like outlined below, we aim to prevent issues from occurring while also providing recommendations for any changes, updates or other work that should be performed to ensure the continued operation of the environment. Unlimited Service Desk Support Reactive Onsite Support System Maintenance Patch Management Proactive Review Health Checks Device Monitoring How our IT Managed Service works 1. Moves, Adds and Changes (MAC) Every business and organisation requires new users to be set up, departing users to be removed and changes made to user profiles, applications, email etc. Moves, Adds, and Changes is a major component of our daily operations, so we’re highly experienced at providing this service. 2. Break - Fix Support It’s an unfortunate reality that, at some point, technology breaks. Whether it’s an account locked out, hardware wearing out, application integration issues, operating system issues or pretty much anything that is either software or hardware-driven, our knowledgeable team can rapidly troubleshoot issues reducing your business’ downtime. 3. Proactive Maintenance Server Maintenance Includes maintaining current service and security patches and checking backups, server health, event viewers and hardware status and proactive fault finding. Desktop Maintenance Includes maintaining current service and security patches for desktops and checking desktop health, event viewers and hardware status and proactive fault finding. 4. IT Advice When you sign up for our IT Managed Service, our team becomes your trusted IT partner. We get to understand what drives your organisation, outline your goals for IT (i.e. improving security and governance, improving efficiency, reducing ongoing issues, etc.) and provide technical advice to achieve them. We’re proud to partner with our customers to provide the expertise of an enterprise-level IT department at a scaled cost. To discuss your IT Support requirements further, please get in touch. GET IN TOUCH to speak with an expert about your business needs Please complete the form and a team member will be in touch shortly. --- # IT Project Management URL: https://mercuryit.com.au/it-services/it-project-management/ Mercury IT has a dedicated Project Management Office as part of their Professional Services Department. The Project Management Office (PMO) ensures all projects undertaken by Mercury IT are delivered on time, within budget and to scope. Project Management significantly increases the successful completion of your project within time, quality and cost expectations and we recommend utilising our Project Management services as part of every project. Your Mercury IT Project Manager will oversee every aspect of your project. Being your primary contact they will plan, monitor and provide weekly status reports as well as implement and coordinate a risk management plan. We are experienced with the Project Management Lifecycle and utilise the PMBoK (Project Management Body of Knowledge) framework and methodology to ensure that projects are completed on time, on budget and within quality requirements. Our team follow a comprehensive planning process at the initiation of a project to significantly improve project success outcomes. Our planning process includes the establishment of clear expectations, a detailed and achievable project schedule and defined control mechanisms to control project changes. We control project scope creep through effective client engagement throughout the project. Our team provide continual communication updates to ensure that our clients are fully engaged in the project. FAQs What types of IT projects require professional management? Professional IT project management is essential for any complex, high-risk, or time-sensitive initiative. This includes cloud migrations (to Azure or Microsoft 365), new office or practice fit-outs or relocations, company-wide network infrastructure upgrades, complex cybersecurity implementations, and enterprise-wide software rollouts. How does IT project management reduce risk and cost overruns? It provides a clear plan, budget, and timeline from the very beginning. A dedicated Project Manager identifies risks before they become problems, manages all third-party vendors, and controls scope creep. This structured approach is the key to delivering your project on time and, most importantly, on budget. What’s the difference between IT project management and IT consulting IT Consulting is the strategic "what and why" phase. We act as advisors to help you assess your needs and decide on the best technological path forward. IT Project Management is the tactical "how and when" phase. We take that strategy and manage the end-to-end execution to make it a reality. Can Mercury IT manage large-scale, multi-site IT projects? Yes. We specialise in managing complex, multi-site projects for Australian businesses. With our teams strategically located across Australia, we have the experience and resources to coordinate installations, manage vendors, and ensure a smooth, consistent rollout for all your office locations. How does IT project management support digital transformation? Digital transformation is a major business goal, but it's achieved through a series of individual, technical projects. IT project management is the engine that drives those projects forward. It provides the structure, accountability, and technical leadership to ensure each step of your transformation is completed successfully, on time, and with minimal disruption. Contact us today to discuss your Project Reach out --- # IT Solutions URL: https://mercuryit.com.au/it-services/it-solutions/ About this service Mercury IT's Professional Services team is built around our Subject Matter Experts (SME) in their respective fields including Infrastructure, Networks, Design and Implementation. They provide both project services and escalation support for our service team. We partner with some of the best vendors in the world to provide outstanding outcomes for our clients, partners such as Cisco, Microsoft, HP, VmWare, Citrix Our IT solution services include: IT Infrastructure Data Centre Servers both physical and virtual Storage Migrations, On-Premise to Cloud, Cloud to On-Premise and Hybrid Migrations Workstations Backup Infrastructure Security Disaster Recovery (DR) design and implementation Find out more Networks Wide Area Network (WAN) connectivity solutions Local Area Network (LAN) design and implementation Wireless LAN Network Security Cabling Find out more Cloud Computing O365 implementation and migration Infrastructure as a Service (IaaS) design and implementation Desktop as a Service (DaaS) design and implementation Backup as a Service (BaaS) design and implementation Disaster Recovery as a Service (DRaaS) design and implementation Find out more Cybersecurity Mercury IT has a dedicated Cybersecurity Department to provide all Cybersecurity requirements, head to our Cybersecurity page here to find out more. Find out more IT Strategy and Planning Full IT Strategy planning and implementation Policy creation and implementation Consulting services to achieve specific parts, provide technological input, or complete all of the IT Strategy from start to finish Find out more Collaboration and Voice solutions Find out more Print and Scan solutions Find out more Procurement Find out more Other Services Find out more FAQs What IT solutions do Mercury IT offer for businesses? Mercury IT offers a comprehensive suite of IT solutions tailored for businesses across all industries. This includes our core Managed IT Services, Cybersecurity Solutions, Cloud Services (like Microsoft 365 and Azure), IT Project Management, strategic IT Consulting, and hardware/software Procurement. What’s the difference between IT solutions and managed IT services? An IT Solution is typically a specific product or a one-time project to solve a business problem (e.g., installing a new firewall or migrating you to the cloud). Managed IT Services is the ongoing, proactive partnership where we take full responsibility for managing, monitoring, and supporting your entire IT environment for a monthly fee. How do I choose the right IT solutions provider for my business? When choosing a provider, prioritise a partner with proven experience in your industry and with businesses of a similar size. Look for a provider that is proactive, not reactive, and has a dedicated cybersecurity department. Are Mercury IT’s IT solutions tailored to my business's needs? Absolutely. We don't offer "one-size-fits-all" packages. Our process begins with a thorough assessment of your current technology, business goals, and operational challenges. From there, we design and implement a set of IT solutions that are specifically tailored to improve your efficiency, security, and scalability. --- # Cloud Computing URL: https://mercuryit.com.au/it-services/it-solutions/cloud-computing/ Cloud Computing Cloud Computing The 'Cloud' has and continues to be a hot topic of conversation amongst both IT providers and businesses and the term 'Something as a Service' has been overused extensively. Cloud computing is simply utilising processing and storage systems that are not located within your site. The reality is that cloud computing is complex and includes multiple different offerings and technologies that are designed to achieve a number of outcomes, some of which include: leveraging economies of scale, provide enhanced resiliency, reduce capital costs and provide enhanced scalability. O365 is commonly touted by IT providers as 'The Cloud', O365 is a multi-faceted and comprehensive offering and includes a number of hosted components, for more information on 0365 click here. Cloud computing can be on public cloud infrastructure such as Azure, AWS, Google or private cloud infrastructure through bespoke cloud providers utilising data centres. At Mercury IT, we are highly experienced in delivering all of the variations of cloud services, which enables us to design the right solution for you. Our cloud services and capabilities include: Infrastructure as a Service (IaaS) - replaces on-premise infrastrucutre (such as servers) with hosted infrastructure. Software as a Service (SaaS) - moves applications from being locally installed to a delivery model utilising (often) a browser based software application. Common examples include O365, Salesforce, Xero etc. Desktop as a Service (DaaS) also sometimes referred to a Virtual Desktop Infrastructure (VDI) - provides a complete desktop experience (similar to your Windows desktop PC) that is cloud hosted, these sessions can be accessed via multiple different devices from anywhere that has a stable and reasonable internet connection Backup as a Service (BaaS) - provides an off-site repository for backup data. BaaS is one of the most important, yet under exposed cloud offerings. Having an off-site, up-to-date backup set in a secure location is one of the best and cheapest insurance policies that a business can have. There are many other services that utilise either full or partial cloud technology. Examplse include Disaster Recovery as a Service (DRaaS) and cloud managed network infrastructure, where there is a physical device installed onsite, however the management interface is provided via a cloud service, thus providing the best of both worlds At Mercury IT, we understand that one size does not fit all. Cloud computing is absolutely an important component of the technology environment, however, when we work with a client, we ascertain the right technology for them. This may be a public and/or a private cloud offering, an on-premise offering or a hybrid arrangement. We build our recommendations around the specific requirements, objectives, security and operational needs of our customers. There are many right reasons to move services to the Cloud--doing it because someone else has is definitely not one of them. When we work with a customer we get a comprehensive understanding of their organisational objectives, their operating environment, their users and their current and future technology requirements. We then look at the best solution for them and provide a complete solution that provides the best outcomes for them. For an honest appraisal of your Cloud needs, contact us. Microsoft 365 What is Microsoft 365? Microsoft Office 365 (O365) is a cloud based collaboration and productivity Software as a Service product suite. Without overdramatising it, with O365, Microsoft has fundamentally altered the business technology environment. O365 brings together the traditional office products (Outlook, Word, Excel, PowerPoint, etc.) that have become the ubiquitous productivity tools of almost every business, with collaboration tools such as Exchange, SharePoint, Teams, Yammer and Skype for Business, along with a whole raft of other productivity tools such as OneNote, OneDrive, Flow, Forms, Delve, Planner, PowerApps and Power BI , just to name a few! Quite simply, Microsoft have created one of the most powerful, integrated business application suites across multiple operating systems: Windows, Apple (MacOS and iOS) and Android. Leveraging some of the best components of cloud computing with the convenience of locally installed applications, O365 is a game changer. With such a powerful and comprehensive suite of products, inevitably, most businesses have not scratched the surface on the possibilities for increased productivity, efficiency and integration. Indeed most organisations don’t have the experience and skills to is a cloud-based solution allowing you to increase productivity and efficiency within your business whether your staff work in the office, from home or whist on the move. With a full suite of the latest Microsoft Office Applications, your team can create, edit, and share from their PC/Mac , iOS, Android™, or Windows Device with anyone in real time whilst allowing you to connect better with customers and colleagues using a range of communication tools, from email and IM to social networking and video conferencing. Mercury IT has the project management and technical requirements needed to seamlessly migrate to the cloud, we can manage the entire set-up and maintenance on your behalf, ensuring it continues to get results well into the future through - Office 365 Consulting Office 365 Training Mailbox Migration DirSync/SSO ADFS Configuration Data Migration Managed Services for Office 365 with 24 hour, 7 day a week support We start by scoping the Office 365 plan that is best suited to your business and then setup your Office 365 subscription. All Office 365 subscription charges are billed monthly to you, by Mercury IT, at no additional cost to purchasing directly from Microsoft. To discuss how O365 could work for your business, contact us. Infrastructure as a Service (IaaS) IaaS provides a highly effective and efficient alternative to hosting servers on site for clients. It can be used for both production and DR environments in both Hybrid or full cloud scenarios. It is particularly suited to clients that have a requirement for their own Active Directory or Exchange environment or more control over the Hyper Visor. Our IaaS solution is built on our infrastructure segregated into a private environment specifically for the client. Unless the client has an internal IT department, IaaS will have a MSA to some level included with it. For an appraisal of your Cloud needs, contact us. Backup as a Service (BaaS) Backup as a Service {BaaS} Data is the lifeblood of every business. Even a little unplanned downtime in your ability to access your data can cost you money and reputation. Lose the lot and you could face ruin, unless you have an effective recovery plan. Mercury IT’s comprehensive disaster recovery plan covers all your files, wherever they are stored, with a fast, reliable and secure online data backup service. KEY FEATURES INCLUDE: Spend less and get more: Our cloud-based data backup system means you won’t have to buy new hardware. Instead, you only pay for the resources you use, saving you money and reducing overheads. Reduced maintenance costs: By storing your important data off-site, you will save time and money on physical server maintenance. Speedy data recovery: If disaster strikes, we’ll have you back up and running in no time by restoring your data straight from the Cloud and onto your servers. Scalable and agile: Our cloud service gives you the flexibility to scale your resources to match the IT needs of your business at all times. Managed migration and continuous support: Mercury IT is expert at moving companies to the Cloud and our commitment to excellent and consistent IT support guarantees you the best service from start to finish, and beyond. Mercury IT’s online backup service, recovers more than your data – we recover your business. For an appraisal of your Cloud needs, contact us. Desktop as a Service (DaaS) Desktop as a Service, also referred to as Workspace as a Service (WaaS) is suited to deliver a cost effective, centrally managed and accessible cloud solution to provide a fully functional desktop or workspace. DaaS is endpoint and operating system agnostic and will operate on desktops, laptops, tablets and mobile devices. DaaS solutions can be either a shared infrastructure model which uses a multi-tenanted environment to leverage economies of scale, or a dedicated infrastructure model with dedicated resources for desktop workloads which connect to a secure shared backend for Active Directory, Exchange and backup. For an appraisal of your Cloud needs, contact us. Contact us today to discuss how we can help your business   Reach out --- # Collaboration and Voice solutions URL: https://mercuryit.com.au/it-services/it-solutions/collaboration-and-voice-solutions/ Collaboration tools are now an integral requirement for all businesses. They provide an effective platform to enable both employees and customers to engage in a meaningful and streamlined manner. Effective collaboration tools such as Microsoft Teams, Cisco Webex Teams and Cisco Webex Meetings, provide teams with the ability to work across diverse locations, cross functionality and support each other to achieve the best outcomes for the organisation. Despite the vast array of communication and collaboration methods available to us today, voice and the ability to talk to both your customers and staff is still not only an inherent requirement, it is fundamental to the success of any organisation. Voice however has evolved from the days of the onsite phone systems such as the PBX to cloud based options that provide flexibility, scalability and resilience at competitive prices. The next generation of voice communication is now here, Microsoft Teams calling combines both the collaboration features of text, video and internal voice with the option now to include full function external dialling, effectively replacing multiple disparate systems with one central point of collaboration. Improving efficiency, management and indeed the collaborative aspects of the daily operations and projects. Through our agnostic approach we are able to provide you with the right voice and collaboration solution for you: from onsite PBX's to cloud and Microsoft Teams, let us help you position your organisation for the future through our innovative and flexible arrangements. Contact us today to discuss your next Collaboration or Voice project. --- # IT Infrastructure URL: https://mercuryit.com.au/it-services/it-solutions/it-infrastructure/ Infrastructure Services With the emergence of cloud computing, virtualisation, and mobility, Mercury IT is well aligned with market trends and demands to create and support your IT infrastructure. We offer the technology, processes, and people needed to allow you to increase efficiencies and achieve strategic business outcomes. Our ethos is to provide the correct solutions for our clients, this requires a reasonably agnostic approach to product selection. Whilst we have the capability to work with almost any provider or vendor, experience has identified a core number of providers that represent increased return on investment and value proposition for our clients. Whilst in most scenarios we will lead with proven vendors, we understand that to push the boundaries of the possible and to contribute to strategy alignment of our clients, we continually look for new products to resolve both common and uncommon problems and to enhance our client’s organisations. Mercury IT's Professional Services team is built around our Subject Matter Experts (SME) in their respective fields including Infrastructure, Networks, Design and Implementation. They provide both project services and escalation support for our service team. IT infrastructure services include: IT Infrastructure Data Centre Servers both physical and virtual Storage Migrations, On-Premise to Cloud, Cloud to On-Premise and Hybrid Migrations Workstations Backup Infrastructure Security Disaster Recovery (DR) design and implementation Contact us today Contact us today to discuss your IT infrastructure needs. Reach out --- # Networks URL: https://mercuryit.com.au/it-services/it-solutions/networks/ About this service Just like the foundation of your building, your network is the foundation of your IT environment. Often, networks are an afterthought, rather than being the first layer of a business' IT stack. An effective, reliable, scalable and flexible network improves productivity, reduces downtime and enables growth. Data communication and connectivity is an integral part of every business IT environment. Without data connectivity, business operations are impeded, sales, orders, efficiency, almost every aspect of a business is impacted. Delivering a world class network environment within a viable price point is a reality today, at Mercury IT, our skilled and experienced Network Engineers can help you design a network that provides the right foundation for your IT infrastructure, contact us today to get a Network Assessment. --- # Other Services URL: https://mercuryit.com.au/it-services/it-solutions/other-services/ You can't be an expert at everything, so at Mercury IT we've developed a strong partner network to provide end-to-end IT services to our customers. Talk to us about your requirements and we can work with you and one of our selected partners to provide the solution you are looking for. Some of the other services we have partnered with include: Web Development Certified Document and Data Storage Destruction Software Development Software Implementation Asset Management Contact us today today to discuss your requirements. Reach out --- # Print and Scan Solutions URL: https://mercuryit.com.au/it-services/it-solutions/print-and-scan-solutions/ About this service Partnering exclusively with Lexmark Australia, we provide high quality machines that deliver performance, excellence and the reliability that your business demands. Our partnership enables us to install, service and support machines across Australia, managed by Mercury IT and serviced by Lexmark technicians. Minimal cost | Maximum efficiency | The way print should be No pressure sell, less complex contracts and less expensive than traditional managed print Security, an integral part of all Lexmark products, creating not just a safer but a more productive environment for your business Algorithm-based predictive support allows us to anticipate and prevent disruptions before they occur. Thanks to our IoT-enabled devices, we know when an issue will arise. We contact you to resolve the problem—often remotely—before you are aware it even exists Up to 80% of the carbon footprint associated with printing is a result of paper. By using our Print Management, you can reduce your organisation’s paper usage significantly With toner and other supplies, artificial intelligence (AI) enables automatic, just-in-time delivery based on actual usage and eliminates you having to manage inventory By conducting an in-depth analysis of your printing habits, processes and infrastructure Mercury IT can tailor-make a solution to your business needs, we are then able to monitor, manage and optimise your full print output. Contact us today to get a complimentary, no pressure print assessment. --- # Print and Scan Solutions URL: https://mercuryit.com.au/it-services/it-solutions/print-and-scan-solutions-draft/ About this service Print Management Services provide greater visibility and more control of printing and imaging, saving money, boosting productivity, improving document security and reducing your environmental footprint. Often printers, scanners and copiers are overlooked, some organisations do not have a clear idea of what they spend each year for paper, ink cartridges, toners, hardware and management overheads. Equipment is usually paid for from numerous department budgets, limiting effective oversight of the real costs. Without a central control point, print service costs go undocumented and result in unmanaged spending. By conducting an in-depth analysis of your printing habits, processes and infrastructure Mercury IT can tailor-make a solution to your business needs, we are then able to monitor, manage and optimise your full print output. We offer a free review of your printing needs and it rare that we are not able to find at least some savings, so contact us today to get a Print Assessment. --- # Procurement URL: https://mercuryit.com.au/it-services/it-solutions/procurement/ About this service: Mercury IT provides a full IT procurement service. We work with all of the largest distributers and vendors to ensure we get the best products at the best prices. From a monitor to an entire data centre refresh, our team can assist you with your requirements. We can source almost any hardware or software, so make sure you give us a call to discuss your needs. Laptops Tablets Thin Clients Mobile devices Computers and peripherals Server Hardware Network equipment Storage devices Software, licences and renewals Software, licences and renewals Miscellaneous hardware Hardware warranties, licences and renewals Printers Security Cameras Cables Almost anything IT, give us a call! Contact us today today to discuss your procurement needs. Reach out --- # IT Strategy and Planning URL: https://mercuryit.com.au/it-services/it-strategy-and-planning/ IT Strategy and Planning is one of the most important areas of Information Technology. Designing and implementing an IT Strategy that is seamlessly aligned with the Organisational Strategy, provides the technology foundation that enables the Organisation to expand, prosper and achieves its objectives. An IT Strategy provides a comprehensive and effective technology framework to ensure the business can respond effectively to both changing operational environments and unforeseen changes within both their own sector and more broadly across the ever evolving technology environment. Integral components of an IT Strategy include: The organisational strategy and technology's role in the organisation The organisation's technology roadmap to achieve both current and future operational objectives A comprehensive component on organisation IT Security, that includes the organisations Security Framework and Posture. The IT Security Strategy will also include a Risk Assessment and Risk Profile of the organisation The IT Governance and Compliance Framework - how the organisation will achieve all governance and compliance requirements Mercury IT, has extensive experience in IT Strategy, Planning, Risk Management and Compliance. We can provide: Full IT Strategy planning and implementation Policy creation and implementation Consulting services to achieve specific parts, provide technological input, or complete all of the IT Strategy from start to finish FAQs What is an IT strategy and roadmap? An IT strategy is a high-level plan that aligns your technology with your core business goals. The IT roadmap is the detailed, step-by-step document that outlines how and when to execute that strategy, including specific projects, budgets, and timelines. Why is IT strategy so important for business growth? A clear IT strategy is vital for growth because it turns your technology from a reactive cost centre into a proactive business driver. It stops you from wasting money on short-term fixes and provides a stable, secure, and scalable foundation, allowing you to focus on your core business, not on IT failures. What does an IT strategy and planning process involve? Our process begins with understanding your business objectives. We then conduct a comprehensive audit of your current technology, security, and processes. We identify key gaps and opportunities, and finally, we deliver a prioritised IT roadmap with clear actions and budgets. How often should I review my IT strategy? Your core IT strategy should be reviewed regularly based on your business requirements or whenever your business undergoes a major change (like an acquisition or new service offering). Your IT roadmap, however, is a living document that should be reviewed annually with your IT partner to adjust priorities based on new technologies and business performance. Contact us today to discuss your next IT Strategy and Planning Project Reach out --- # IT Support URL: https://mercuryit.com.au/it-services/it-support/ IT Support is a fundamental part of all business IT services. We can guarantee that at some point, some part of your technology is going to break. This is due to the highly complex IT environment that organisations operate within. When networks, hardware, operating systems, applications, communication links and users all have to work seamlessly together, at some point something will stop working. Or it may be just the addition or removal of a user from your system. IT Support, also known as IT Service, Helpdesk, Managed Services or just IT, is the frontline team that provide support for your IT business as usual requirements. We have a distributed team of Service Professionals across Australia providing IT Support: Brisbane, Gold Coast, Sydney, Melbourne, Perth, Adelaide and major regional centres around the country. For more information check out our Managed Services page. FAQs What is business IT support and how is it different from personal support? Business IT support is a professional service focused on your entire company's technology, not just one device. Unlike consumer support, it's designed to minimise business downtime and maximise productivity. What is an IT helpdesk service? An IT helpdesk is your team's single point of contact for all technology issues. Our helpdesk provides fast, expert support to resolve daily problems like password resets, software glitches, or connectivity issues. It acts as a dedicated, outsourced extension of your business, ensuring your staff aren't left troubleshooting problems on their own. Do you offer both remote and on-site IT support? Yes, a modern IT support model requires both. Most IT issues can be resolved via remote support, getting your team back to work faster. For issues that require a physical presence, like new hardware installations or complex network failures. --- # IT Support URL: https://mercuryit.com.au/it-services/it-support-2/ IT Support is a fundamental part of all business IT services. We can guarantee that at some point, some part of your technology is going to break. This is due to the highly complex IT environment that organisations operate within. When networks, hardware, operating systems, applications, communication links and users all have to work seamlessly together, at some point something will stop working. Or it may be just the addition or removal of a user from your system. IT Support, also known as IT Service, Helpdesk, Managed Services or just IT, is the frontline team that provide support for your IT business as usual requirements. We have a distributed team of Service Professionals across Australia providing IT Support: Brisbane, Gold Coast, Sydney, Melbourne, Perth, Adelaide and major regional centres around the country. All supported by our dual IT Support call centres located in Brisbane and the Gold Coast. We are proud of the fact that none of our services are off-shored, ensuring you get Australian based support for every call. For more information check out our Managed Services page. GET IN TOUCH to speak with an expert about your business needs Please complete the form and a team member will be in touch shortly. Or Call Us : 1300 684 844 --- # Managed IT Services Brisbane URL: https://mercuryit.com.au/it-services/managed-it-services-brisbane/ Mercury IT's Managed IT Services in Brisbane are an effective way to ensure your Brisbane business IT needs are met. In addition to our Brisbane based team, you get access to an entire team of skilled experts within a cost effective framework, allowing you to focus on your business and leave IT to your dedicated team of professionals. Break - Fix Helpdesk and Support are an integral part of our Managed IT Services in Brisbane, however Managed Services are so much more. It includes proactive maintenance and basic cyber security, and can be tailored to include IT planning and strategy, compliance, governance and advanced cyber security Managed IT Services Brisbane can include both Fully Managed, where the client has no in-house IT staff, or Partially Managed or Extension Services, where the client may have a small team of in-house IT staff and require specialised expertise in certain areas. Why Choose Mercury IT Managed IT Services Brisbane? We create solutions to our client's challenges using innovative and intelligent products and services We are brand agnostic and look for the right product and service to suit our client's requirements and strategy Flexible, scalable contracts, tailored to your requirements, longer term contracts can have locked in pricing agreements Trial periods can be arranged for new clients to allow us to demonstrate our capability and expertise No contract options available When project deliverables have been scoped and agreed, we give you a fixed price quote for your project and we will deliver the project as agreed, only changes to scope outside our control will change the billable price Learn more about our IT Services What is included in a monthly Managed Service Agreement: Service Team (Helpdesk) Firstly, everyone you deal with at Mercury IT is based in Australia, we do not off-shore any of our services and this includes our Service Team. Secondly, you can log service requests via email, web portal or talk to one of our helpful team by telephone, the choice is yours. Our Service Team are our hard working generalists that work tirelessly, completing move, add, change requests and fixing the day to day issues that occur. Our support and service desk capability allows end-users to have issues or complaints about their IT environment dealt with in an efficient manner. The helpdesk conducts troubleshooting and resolves end-user enquiries, escalates tickets to Senior Engineers as required and within SLA timeframes or, for tickets requiring specialised support (i.e. complex network support issues) assigns them to the appropriate team. We will provide helpdesk support and maintenance including triage and collaboration as required, this includes all fault finding and troubleshooting of hardware and software as necessary on all workstations as well as updating the system and application software. Unlimited Service Desk Support Reactive Onsite Support System Maintenance Patch Management Proactive Review Health Checks Device Monitoring We have a team of engineers operating from our Service Desk who monitor critical client systems via real-time monitoring dashboards and alerts as well as performing regular maintenance tasks scheduled in with your internal IT team. This team responds to server events based in a proactive and reactive manner; this means that through monitoring and regular maintenance we aim to prevent issues from occurring while also providing recommendations for any changes, updates or other work that should be performed to ensure the continued operation of the environment. There are four main components of an IT Managed Service: 1. Moves, Adds and Changes (MAC) Every business and organisation requires new users to be set up, departing users to be removed and changes made to users profiles, applications, email etc. Moves, Adds and Changes is a major component of what we do on a daily basis and our helpful team are highly experienced at providing this integral service. 2. Break - Fix Support It is an unfortunate reality, that at some point, technology will break. Whether it is an account locked out, hardware wearing out, application integration issues, operating system issues or pretty much anything that is either software or hardware driven, issues will occur. IT issues are frustrating and can cause downtime, inefficiency and can damage reputations so it's imperative that your IT team respond rapidly and resolve the issue quickly. Mercury IT has been providing Break - Fix support for over 14 years and our knowledgeable and skilled staff are adept at investigating and troubleshooting issues. When active current hardware warranties and support agreements are in place, we also manage the vendor escalation requirements as required. Where customers have a have a current active support agreement in place, we also manage software vendors when software issues occur. This assists with the rapid resolution of complex issues where there are multiple vendors by providing a single point of coordination and communication. 3. Proactive Maintenance Server Maintenance Includes maintaining current service and security patches as well as checking backups, server health, event viewers and hardware status and proactive fault finding. Desktop Maintenance Includes maintaining current service and security patches for desktops as well as checking desktop health, event viewers and hardware status and proactive fault finding. 4. IT Advice Our team becomes your trusted IT partner and we get to understand what drives your organisation and your goals for IT. Our team are then able to provide advice and recommendations on technology to achieve business objective, improve security and governance, improve efficiency and to reduce on-going issues. Our managed service agreements provide our customers with the expertise of an enterprise level IT department at a scaled cost to suit their business. Managed Services enable scalability within a cost effective partnership arrangement. To discuss your IT Support requirements, please contact us. --- # Managed IT Services Gold Coast URL: https://mercuryit.com.au/it-services/managed-it-services-goldcoast/ Mercury IT's Managed IT Services are an effective way to ensure your Gold Coast business IT needs are met. As a Managed IT Services client in Gold Coast, you get access to an entire team of skilled experts within a cost-effective framework, allowing you to focus on your business, leaving your IT to a dedicated team of professionals. Break-Fix Helpdesk and Support are an integral part of our Managed IT Services in Gold Coast, however Managed Services are so much more. It includes proactive maintenance and basic cybersecurity and can be tailored to include IT planning and strategy, compliance, governance, and advanced cybersecurity Managed IT Services Gold Coast can include both Fully Managed, where the client has no in-house IT staff, or Partially Managed or Extension Services, where the client may have a small team of in-house IT staff and require specialised expertise in certain areas. Why Choose Mercury IT Managed IT Services Gold Coast? We create solutions to our client's challenges using innovative and intelligent products and services We are brand agnostic and look for the right product and service to suit our client's requirements and strategy Flexible, scalable contracts, tailored to your requirements, longer term contracts can have locked in pricing agreements Trial periods can be arranged for new clients to allow us to demonstrate our capability and expertise No contract options available When project deliverables have been scoped and agreed, we give you a fixed price quote for your project and we will deliver the project as agreed, only changes to scope outside our control will change the billable price Learn more about our IT Services What is included in a monthly Managed Service Agreement: Service Team (Helpdesk) Firstly, everyone you deal with at Mercury IT is based in Australia, we do not off-shore any of our services and this includes our Service Team. Secondly, you can log service requests via email, web portal or talk to one of our helpful team by telephone, the choice is yours. Our Service Team are our hard working generalists that work tirelessly, completing move, add, change requests and fixing the day to day issues that occur. Our support and service desk capability allows end-users to have issues or complaints about their IT environment dealt with in an efficient manner. The helpdesk conducts troubleshooting and resolves end-user enquiries, escalates tickets to Senior Engineers as required and within SLA timeframes or, for tickets requiring specialised support (i.e. complex network support issues) assigns them to the appropriate team. We will provide helpdesk support and maintenance including triage and collaboration as required, this includes all fault finding and troubleshooting of hardware and software as necessary on all workstations as well as updating the system and application software. Unlimited Service Desk Support Reactive Onsite Support System Maintenance Patch Management Proactive Review Health Checks Device Monitoring We have a team of engineers operating from our Service Desk who monitor critical client systems via real-time monitoring dashboards and alerts as well as performing regular maintenance tasks scheduled in with your internal IT team. This team responds to server events based in a proactive and reactive manner; this means that through monitoring and regular maintenance we aim to prevent issues from occurring while also providing recommendations for any changes, updates or other work that should be performed to ensure the continued operation of the environment. There are four main components of an IT Managed Service: 1. Moves, Adds and Changes (MAC) Every business and organisation requires new users to be set up, departing users to be removed and changes made to users profiles, applications, email etc. Moves, Adds and Changes is a major component of what we do on a daily basis and our helpful team are highly experienced at providing this integral service. 2. Break - Fix Support It is an unfortunate reality, that at some point, technology will break. Whether it is an account locked out, hardware wearing out, application integration issues, operating system issues or pretty much anything that is either software or hardware driven, issues will occur. IT issues are frustrating and can cause downtime, inefficiency and can damage reputations so it's imperative that your IT team respond rapidly and resolve the issue quickly. Mercury IT has been providing Break - Fix support for over 14 years and our knowledgeable and skilled staff are adept at investigating and troubleshooting issues. When active current hardware warranties and support agreements are in place, we also manage the vendor escalation requirements as required. Where customers have a have a current active support agreement in place, we also manage software vendors when software issues occur. This assists with the rapid resolution of complex issues where there are multiple vendors by providing a single point of coordination and communication. 3. Proactive Maintenance Server Maintenance Includes maintaining current service and security patches as well as checking backups, server health, event viewers and hardware status and proactive fault finding. Desktop Maintenance Includes maintaining current service and security patches for desktops as well as checking desktop health, event viewers and hardware status and proactive fault finding. 4. IT Advice Our team becomes your trusted IT partner and we get to understand what drives your organisation and your goals for IT. Our team are then able to provide advice and recommendations on technology to achieve business objective, improve security and governance, improve efficiency and to reduce on-going issues. Our managed service agreements provide our customers with the expertise of an enterprise level IT department at a scaled cost to suit their business. Managed Services enable scalability within a cost effective partnership arrangement. To discuss your IT Support requirements, please contact us. --- # Managed IT Services Melbourne URL: https://mercuryit.com.au/it-services/managed-it-services-melbourne/ Mercury IT's Managed IT Services in Melbourne are an effective way to ensure your Melbourne business IT needs are met. In addition to our Melbourne based team, you get access to an entire team of skilled experts within a cost effective framework, allowing you to focus on your business and leave IT to your dedicated team of professionals. Break - Fix Helpdesk and Support are an integral part of our Managed IT Services in Melbourne, however Managed Services are so much more. It includes proactive maintenance and basic cyber security, and can be tailored to include IT planning and strategy, compliance, governance and advanced cybersecurity Managed IT Services Melbourne can include both Fully Managed, where the client has no in-house IT staff, or Partially Managed or Extension Services, where the client may have a small team of in-house IT staff and require specialised expertise in certain areas. Why Choose Mercury IT Managed IT Services Melbourne? We create solutions to our client's challenges using innovative and intelligent products and services We are brand agnostic and look for the right product and service to suit our client's requirements and strategy Flexible, scalable contracts, tailored to your requirements, longer term contracts can have locked in pricing agreements Trial periods can be arranged for new clients to allow us to demonstrate our capability and expertise No contract options available When project deliverables have been scoped and agreed, we give you a fixed price quote for your project and we will deliver the project as agreed, only changes to scope outside our control will change the billable price Learn more about our IT Services What is included in a monthly Managed Service Agreement: Service Team (Helpdesk) Firstly, everyone you deal with at Mercury IT is based in Australia, we do not off-shore any of our services and this includes our Service Team. Secondly, you can log service requests via email, web portal or talk to one of our helpful team by telephone, the choice is yours. Our Service Team are our hard working generalists that work tirelessly, completing move, add, change requests and fixing the day to day issues that occur. Our support and service desk capability allows end-users to have issues or complaints about their IT environment dealt with in an efficient manner. The helpdesk conducts troubleshooting and resolves end-user enquiries, escalates tickets to Senior Engineers as required and within SLA timeframes or, for tickets requiring specialised support (i.e. complex network support issues) assigns them to the appropriate team. We will provide helpdesk support and maintenance including triage and collaboration as required, this includes all fault finding and troubleshooting of hardware and software as necessary on all workstations as well as updating the system and application software. Unlimited Service Desk Support Reactive Onsite Support System Maintenance Patch Management Proactive Review Health Checks Device Monitoring We have a team of engineers operating from our Service Desk who monitor critical client systems via real-time monitoring dashboards and alerts as well as performing regular maintenance tasks scheduled in with your internal IT team. This team responds to server events based in a proactive and reactive manner; this means that through monitoring and regular maintenance we aim to prevent issues from occurring while also providing recommendations for any changes, updates or other work that should be performed to ensure the continued operation of the environment. There are four main components of an IT Managed Service: 1. Moves, Adds and Changes (MAC) Every business and organisation requires new users to be set up, departing users to be removed and changes made to users profiles, applications, email etc. Moves, Adds and Changes is a major component of what we do on a daily basis and our helpful team are highly experienced at providing this integral service. 2. Break - Fix Support It is an unfortunate reality, that at some point, technology will break. Whether it is an account locked out, hardware wearing out, application integration issues, operating system issues or pretty much anything that is either software or hardware driven, issues will occur. IT issues are frustrating and can cause downtime, inefficiency and can damage reputations so it's imperative that your IT team respond rapidly and resolve the issue quickly. Mercury IT has been providing Break - Fix support for over 14 years and our knowledgeable and skilled staff are adept at investigating and troubleshooting issues. When active current hardware warranties and support agreements are in place, we also manage the vendor escalation requirements as required. Where customers have a have a current active support agreement in place, we also manage software vendors when software issues occur. This assists with the rapid resolution of complex issues where there are multiple vendors by providing a single point of coordination and communication. 3. Proactive Maintenance Server Maintenance Includes maintaining current service and security patches as well as checking backups, server health, event viewers and hardware status and proactive fault finding. Desktop Maintenance Includes maintaining current service and security patches for desktops as well as checking desktop health, event viewers and hardware status and proactive fault finding. 4. IT Advice Our team becomes your trusted IT partner and we get to understand what drives your organisation and your goals for IT. Our team are then able to provide advice and recommendations on technology to achieve business objective, improve security and governance, improve efficiency and to reduce on-going issues. Our managed service agreements provide our customers with the expertise of an enterprise level IT department at a scaled cost to suit their business. Managed Services enable scalability within a cost effective partnership arrangement. To discuss your IT Support requirements, please contact us. --- # Managed IT Services Sydney URL: https://mercuryit.com.au/it-services/managed-it-services-sydney/ Mercury IT's Managed IT Services in Sydney are an effective way to ensure your Sydney business IT needs are met. As part of our IT Managed Services in Sydney, you get access to an entire team of skilled experts within a cost-effective framework, allowing you to focus on your business and leave IT to your dedicated team of professionals. Break-Fix Helpdesk and Support are an integral part of our Managed IT Services however Managed Services are so much more. It includes proactive maintenance and basic cyber security and can be tailored to include IT planning and strategy, compliance, governance, and advanced cyber security Managed IT Services can include both Fully Managed, where the client has no in-house IT staff, or Partially Managed or Extension Services, where the client may have a small team of in-house IT staff and require specialised expertise in certain areas. Why Choose Mercury IT Managed IT Services Sydney? We create solutions to our client's challenges using innovative and intelligent products and services We are brand agnostic and look for the right product and service to suit our client's requirements and strategy Flexible, scalable contracts, tailored to your requirements, longer term contracts can have locked in pricing agreements Trial periods can be arranged for new clients to allow us to demonstrate our capability and expertise No contract options available When project deliverables have been scoped and agreed, we give you a fixed price quote for your project and we will deliver the project as agreed, only changes to scope outside our control will change the billable price Learn more about our IT Services available to Sydney businesses. What is included in a monthly Managed Service Agreement: Service Team (Helpdesk) Firstly, everyone you deal with at Mercury IT is based in Australia, we do not off-shore any of our services and this includes our Service Team. Secondly, you can log service requests via email, web portal or talk to one of our helpful team by telephone, the choice is yours. Our Service Team are our hard working generalists that work tirelessly, completing move, add, change requests and fixing the day to day issues that occur. Our support and service desk capability allows end-users to have issues or complaints about their IT environment dealt with in an efficient manner. The helpdesk conducts troubleshooting and resolves end-user enquiries, escalates tickets to Senior Engineers as required and within SLA timeframes or, for tickets requiring specialised support (i.e. complex network support issues) assigns them to the appropriate team. We will provide helpdesk support and maintenance including triage and collaboration as required, this includes all fault finding and troubleshooting of hardware and software as necessary on all workstations as well as updating the system and application software. Unlimited Service Desk Support Reactive Onsite Support System Maintenance Patch Management Proactive Review Health Checks Device Monitoring We have a team of engineers operating from our Service Desk who monitor critical client systems via real-time monitoring dashboards and alerts as well as performing regular maintenance tasks scheduled in with your internal IT team. This team responds to server events based in a proactive and reactive manner; this means that through monitoring and regular maintenance we aim to prevent issues from occurring while also providing recommendations for any changes, updates or other work that should be performed to ensure the continued operation of the environment. There are four main components of an IT Managed Service: 1. Moves, Adds and Changes (MAC) Every business and organisation requires new users to be set up, departing users to be removed and changes made to users profiles, applications, email etc. Moves, Adds and Changes is a major component of what we do on a daily basis and our helpful team are highly experienced at providing this integral service. 2. Break - Fix Support It is an unfortunate reality, that at some point, technology will break. Whether it is an account locked out, hardware wearing out, application integration issues, operating system issues or pretty much anything that is either software or hardware driven, issues will occur. IT issues are frustrating and can cause downtime, inefficiency and can damage reputations so it's imperative that your IT team respond rapidly and resolve the issue quickly. Mercury IT has been providing Break - Fix support for over 14 years and our knowledgeable and skilled staff are adept at investigating and troubleshooting issues. When active current hardware warranties and support agreements are in place, we also manage the vendor escalation requirements as required. Where customers have a have a current active support agreement in place, we also manage software vendors when software issues occur. This assists with the rapid resolution of complex issues where there are multiple vendors by providing a single point of coordination and communication. 3. Proactive Maintenance Server Maintenance Includes maintaining current service and security patches as well as checking backups, server health, event viewers and hardware status and proactive fault finding. Desktop Maintenance Includes maintaining current service and security patches for desktops as well as checking desktop health, event viewers and hardware status and proactive fault finding. 4. IT Advice Our team becomes your trusted IT partner and we get to understand what drives your organisation and your goals for IT. Our team are then able to provide advice and recommendations on technology to achieve business objective, improve security and governance, improve efficiency and to reduce on-going issues. Our managed service agreements provide our customers with the expertise of an enterprise level IT department at a scaled cost to suit their business. Managed Services enable scalability within a cost effective partnership arrangement. To discuss your IT Support requirements, please contact us. --- # Cybersecurity Solutions URL: https://mercuryit.com.au/cyber-securities/cyber-security-solutions/ Mercury IT can assist you with your current and future cybersecurity projects. Our approach is a nine step roadmap that clearly lays out where your focus and budget is best invested. There are a multitude of attack vectors to consider: Multiple technology devices Home networks Applications Different cloud deployments Shadow IT Insider Threat Human Error Ransomware/malware We understand the pressures on IT departments, finding the right resources, what tools to use and budget constraints. Our proven cyber resilience roadmap that provides a simple step by step approach to improved cyber resilience, confidence and visibility without the complexity, confusion or loss of control. So whether you need to understand if you have everything covered or if you are trying to implement a cybersecurity awareness program we are here to help. We can help with these and many other solutions. Audit and gap analysis Basic cybersecurity hygiene Defense in depth analysis Cybersecurity awareness programs Simulated phishing training Measure staff cybersecurity proficiency and culture Alignment with standards such as NIST, ASD, ISO27001 Cybersecurity policies and documentation Security Operations Centre implementation (SIEM/SOAR) Vulnerability assessment and penetration testing (Red Team) Compliance management (Cyber Insurance, NIST, ISO27001) FAQs What are examples of cybersecurity solutions offered by Mercury IT? Mercury IT provides a defence-in-depth stack of security solutions aligned to the Essential Eight framework. This includes next-generation firewalls (NGFW) for network perimeter protection, Endpoint Detection and Response (EDR) for laptops and servers, secure email filtering to block phishing and malware, Multi-Factor Authentication (MFA) for identity protection, Security Information and Event Management (SIEM) for 24/7 threat monitoring, and backup solutions with ransomware protection. All solutions are managed by our certified security team. How do cybersecurity solutions integrate with existing IT systems? Modern security solutions are designed to work together as an integrated ecosystem. For example, your Microsoft 365 security policies integrate with your endpoint protection (EDR), which feeds alerts into a central SIEM for correlation and analysis. This integration allows systems to share threat intelligence—a threat detected on one device can instantly trigger protective actions across your entire network. Mercury IT designs and manages these integrations to ensure your security tools work as a unified defence rather than isolated point solutions. What is the best cybersecurity solution for mid-sized businesses? There is no single best solution—effective security requires a layered approach. For mid-sized Australian businesses, we recommend building on the Essential Eight framework: application control, regular patching, macro restrictions, user application hardening, administrative privilege restriction, multi-factor authentication, and tested backups. The ACSC designed these eight controls specifically because they mitigate the majority of real-world attacks targeting Australian organisations. Mercury IT helps mid-sized businesses implement these controls in a practical, budget-conscious manner. Are cybersecurity solutions the same as managed IT services? No, they serve different purposes. Cybersecurity solutions are the specific tools—antivirus, firewalls, SIEM platforms, backup systems. Managed IT services provide the 24/7 human expertise that configures, monitors, and maintains those tools. A sophisticated firewall is ineffective if it is not properly configured, regularly patched, and actively monitored. Mercury IT provides both the solutions and the managed services to operate them, ensuring your security investment delivers actual protection rather than a false sense of security. How do cybersecurity solutions help with regulatory compliance? Cybersecurity solutions provide the technical controls required to meet compliance obligations. When a regulation requires you to protect customer data, solutions like encryption, MFA, and access controls are how you implement that requirement. Critically, these solutions also generate the audit logs and reports that prove your compliance to regulators and auditors. Mercury IT selects and configures solutions that meet specific compliance requirements including Privacy Act obligations, Essential Eight controls, and industry-specific standards. What is SIEM/SOC and why do businesses need it? SIEM (Security Information and Event Management) is technology that collects and analyses security data from across your IT environment. A SOC (Security Operations Centre) is the team that monitors SIEM alerts and responds to threats 24/7. Together, they provide continuous visibility into your security posture and rapid detection of attacks. Mercury IT provides SIEM/SOC services as part of our managed security offerings, giving businesses enterprise-grade threat detection and response without building an internal security operations team. This capability can be added to your existing IT arrangements or delivered as part of a comprehensive managed security service. --- # Cybersecurity Consulting URL: https://mercuryit.com.au/cyber-securities/cybersecurity-consulting/ Cybersecurity is now at the forefront of most organisational strategic thinking. Cyber breaches pose a real and significant risk to every organisation & reputation, profitability, efficiency and in many cases to their continuing viability. Over 30% of all businesses that suffer a serious data breach are unable to recover and ultimately close down. Without effective expert advice, most organisations do not understand their risk or what to put in place to protect their data, operations and reputation. At Mercury IT, we have always had a security focus across every service we do, however in 2017 we created our dedicated IT Security department to provide an increased focus on Cyber Security. Utilising extensive experience backed by academic and industry certifications, our Security department has the capability to provide insightful consulting services to both existing and new clients. Our services include: Security Strategy and Planning, including Security Policy creation and implementation Risk and vulnerability assessments Security assessments and improvement plans Compliance check design and implementation Threat analysis and threat trends Incident Response and advanced investigation and analytics Cybersecurity training services Disaster Recover and Business Continuity Planning Security solution design such as mobile and cloud, pen testing, secure systems engineering, identity and access management, system test and evaluation and crypto management FAQs How does cybersecurity consulting improve risk management? Cybersecurity consulting is the foundation of effective risk management. A consultant identifies and assesses your specific cyber risks—data breach, ransomware, business email compromise, compliance failures—and quantifies their potential business impact. They then provide a prioritised plan with the exact policies, controls, and solutions needed to mitigate those risks. This moves your business from an unknown risk posture to a managed and insurable position. Mercury IT's consultants hold CISSP certification and specialise in translating technical risks into business terms for executives and boards. When should a business engage a cybersecurity consultant? You should engage a consultant when you need an expert, independent assessment of your business's cybersecurity. This is crucial if you need to achieve compliance with a standard like Essential Eight or ISO 27001, are unsure of your current risk level, need to develop an AI governance policy, have experienced a security incident and require expert-led response, or are preparing for a cyber insurance application or renewal. Mercury IT provides consulting engagements ranging from single assessments to ongoing virtual CISO services. What types of businesses benefit from Mercury IT's cybersecurity consulting services? Mercury IT specialises in cybersecurity consulting for regulated industries including healthcare practices, aged care facilities, legal firms, and financial services—sectors where data breaches carry severe penalties under the Privacy Act. We also protect manufacturing and construction businesses facing intellectual property theft risks, and not-for-profit organisations that are increasingly targeted due to limited security resources. Our consultants hold CISSP and CCIE certifications, our organisation is ISO 27001 certified, and our assessors have completed the official Essential Eight Assessment Course designed by the Australian Signals Directorate's Australian Cyber Security Centre. How do Mercury IT's cybersecurity consultants help with compliance and governance? Our consultants act as your expert guide through complex compliance requirements. They translate regulations like the Privacy Act, Essential Eight, or industry-specific standards into a clear, actionable plan for your business. They help you write the necessary policies, implement required technical controls, and establish governance frameworks including board reporting and AI steering committees. This creates the documentation and evidence required to demonstrate compliance and due diligence to auditors, insurers, and regulators. Can a cybersecurity consultant help prepare for regulatory audits? Yes, audit preparation is a core service Mercury IT offers. Our consultants perform a pre-audit gap analysis to identify and remediate compliance issues before the official auditors arrive. We help you gather all required documentation and technical evidence, prepare your team for auditor interviews, and ensure you can demonstrate your controls are operating effectively. This preparation dramatically improves audit outcomes and reduces the stress and disruption of the audit process. What is a virtual CISO and does Mercury IT offer this service? A virtual CISO (vCISO) provides strategic security leadership without the cost of a full-time executive hire. Mercury IT's vCISO service delivers ongoing security strategy, board-level reporting, policy development, vendor management oversight, incident response leadership, and compliance guidance. This can be a standalone engagement or combined with our managed security services. For organisations that already have an MSP or MSSP, our vCISO service provides the executive-level oversight and assurance that gives boards and leadership confidence in their security posture. --- # Cybersecurity Training URL: https://mercuryit.com.au/cyber-securities/cybersecurity-training/ Training is one of the most important aspects of IT system management and yet is one of the least implemented items across most organisations. Training improves security efficiency, productivity and compliance. With 76%* of Cybersecurity breaches caused by human factors, Cybersecurity training is not just a nice to have, it is absolutely essential to ensure your organisation's staff are able to identify, prevent and respond to criminal attempts to access your systems, or indeed, to just minimise the opportunity to make mistakes. Cybersecurity is everyone's job, not just the IT team and through ongoing training and testing, we can improve the skills of staff and reduce the organisations risk profile. Cybersecurity Training At Mercury IT, we recognise the difference that training can make to improving an organisation's Cybersecurity posture. We offer both Ad-Hoc tailored training packages as well as a structured testing and training program called Cyber Aware that we have partnered with a leading Australian Cybersecurity training provider to deliver an ongoing annual training and testing program. Ad-Hoc Training A great way to kick off your cyber security journey and ensure that staff understand the risks to the organisation and motivate them to implement changes to their day to day activities. Sessions are interactive and conversational. Topics covered can include: Overview of cybersecurity Overview of the organisation's specific risk factors Presentation of cybersecurity policy Best practices around passwords, spotting phishing attacks, safe web browsing and handling important information. What to do should you suspect malicious activity Training for the Management team is also available and include all of the above with the addition of: Management responsibilities Governance Compliance Legal implications *Source: Office of the Information Commissioner - Notifiable Data Breach results Quarter 2, 2018, 76% of all notifiable breaches caused by human factors. FAQs What is cybersecurity awareness training for employees? Cybersecurity awareness training is an educational program that teaches employees how to recognise and respond to common cyber risks such as phishing, unsafe links or attachments, weak passwords, and data handling mistakes. Effective training is tailored to your business, uses real-world examples, and is reinforced with simple policies and regular refreshers. Mercury IT delivers engaging, practical training designed for Australian businesses and the specific threats they face. Why is cybersecurity training so important for businesses? Training is essential because a significant proportion of cyber incidents involve human action—such as clicking a malicious link, sharing credentials, or mishandling sensitive data. The Verizon Data Breach Investigations Report consistently finds that the majority of breaches include a human element. Even the best technical controls can be bypassed if staff don't understand their role in security. Regular training builds a security-aware culture, reduces successful phishing and fraud attempts, and supports compliance and cyber insurance requirements. What is phishing simulation training? Phishing simulation is a practical test of your employee training effectiveness. Mercury IT sends realistic but harmless simulated phishing emails to your staff to measure who clicks, who enters credentials, and who correctly reports the suspicious email. This provides data-driven measurement of your human risk level and identifies individuals who need additional training. Simulations are conducted regularly to track improvement over time and keep staff vigilant against evolving phishing techniques. How often should employees do cybersecurity training? Cybersecurity training must be an ongoing process, not a one-time annual event. Effective programs combine foundational training for all new hires, regular brief refreshers (monthly or quarterly micro-learning modules), and practical phishing simulations throughout the year. This continuous approach keeps security awareness current, addresses emerging threats like AI-powered attacks, and maintains the behavioural change needed to reduce human risk. Mercury IT provides managed training programs that maintain engagement without overwhelming your team. What topics are covered in a good security training program? A comprehensive program covers the threats most likely to target your business. Core topics include phishing and social engineering (recognising malicious emails, texts, and calls), password and credential security (creating strong passwords and using MFA correctly), data handling (safely managing and disposing of sensitive information), remote work security (securing home networks and using VPNs), and AI use policies (understanding what company data is safe to use in AI tools). Mercury IT customises training content to your industry and specific risk profile. Contact us today to discuss your Cyber Security Training needs. Reach out --- # Dark Web Credential Monitoring URL: https://mercuryit.com.au/cyber-securities/dark-web-credential-monitoring/ Our Dark Web ID Credential Monitoring detects compromised credentials in real-time on the Dark Web and notifies you immediately when these critical assets are compromised, before they can be used for identity theft, data breaches, or other crime. Digital credentials such as usernames and passwords connect you and your employees to critical business applications, as well as online services. Unfortunately, criminals know this — and that’s why digital credentials are among the most valuable assets found on the Dark Web. Far too often, companies that have had their credentials compromised and sold on the Dark Web don’t know it until they have been informed by law enforcement — but by then, it’s too late. According to National Institute of Standards and Technology (NIST), small and medium-sized businesses may have more to lose than larger organisations, because cybersecurity events can be costly and threaten their survival. To help keep your critical business assets safe from the compromises that lead to breach and theft, we are offering a complimentary, one-time scan with Dark Web ID™ Credential Monitoring. --- # Essential Eight Cybersecurity Framework URL: https://mercuryit.com.au/cyber-securities/essential-eight-compliance/ Strengthen Your Cyber Defences with the ACSC's Essential Eight The Australian Cyber Security Centre (ACSC) recommends the Essential Eight as a baseline for organisations to mitigate cybersecurity incidents. Implementing these strategies makes it significantly harder for adversaries to compromise systems What is the Essential Eight? The Essential Eight comprises eight mitigation strategies designed to protect against a range of cyber threats: Application Control Prevent unapproved applications from executing on your systems. Patch Applications Ensure applications are up-to-date to mitigate vulnerabilities. Configure Microsoft Office Macro Settings Restrict macros to prevent malicious code execution. User Application Hardening Configure applications to reduce exploitable vulnerabilities. Restrict Administrative Privileges Limit admin privileges to reduce the impact of attacks. Patch Operating Systems Keep operating systems updated to protect against known threats. Multi-Factor Authentication Implement MFA to add an extra layer of security. Regular Backups Perform regular backups to ensure data recovery in case of incidents. Our Approach to Implementing the Essential Eight At Mercury IT, we tailor the implementation of the Essential Eight to your organisation's specific needs: Assessment: Our assessors will evaluate your current cybersecurity posture against the Essential Eight maturity model. Planning: Develop a roadmap to achieve the desired maturity level across all eight strategies. Implementation: Deploy necessary controls and configurations to align with the Essential Eight. Monitoring: Continuously monitor and adjust strategies to maintain compliance and effectiveness. Why Choose Mercury IT? Expertise: Our assessors have completed the ASD-designed Essential Eight Assessors course, and our team has extensive experience in cybersecurity consulting and implementation. Custom Solutions: We provide tailored strategies that align with your business objectives. Compliance Focused: Ensure your organisation meets industry standards and regulatory requirements. Get Started Enhance your cybersecurity posture by implementing the Australian Cyber Security Centre's Essential Eight. Contact us today to schedule a consultation. FAQs What is the Essential Eight security framework? The Essential Eight is a set of eight foundational cybersecurity strategies developed by the Australian Cyber Security Centre (ACSC). It is widely regarded as the most effective, prioritised baseline for Australian businesses to protect themselves from common cyber threats including ransomware and data breaches. The framework is mandatory for Australian federal government agencies under the Protective Security Policy Framework (PSPF) and is now considered best practice for all Australian organisations. Mercury IT specialises in Essential Eight implementation and assessment. What are the eight strategies in the Essential Eight? The Essential Eight framework comprises two groups of controls. The first group prevents attacks from succeeding: Application Control (only approved software can run), Patch Applications (keep software updated), Configure Microsoft Office Macros (block malicious macros), and User Application Hardening (disable risky features in browsers and Office). The second group limits the impact of attacks: Restrict Administrative Privileges (minimise admin access), Patch Operating Systems (keep Windows and other OS updated), Multi-Factor Authentication (require multiple forms of identity verification), and Regular Backups (maintain recoverable copies of data). Who needs to comply with the Essential Eight? Essential Eight is mandatory for all 98 Australian federal government non-corporate Commonwealth entities (NCCEs) under the Protective Security Policy Framework. Beyond government, Essential Eight has become the de facto security standard for Australian businesses. Implementing Essential Eight is critical for demonstrating due diligence, is often required for cyber insurance eligibility and favourable premiums, and is increasingly necessary for winning contracts with government agencies and large enterprises. Many industry regulators now reference Essential Eight as the expected security baseline. What are the Essential Eight Maturity Levels? The ACSC defines four maturity levels (0 to 3) to measure implementation effectiveness. Maturity Level 0 indicates controls are ineffective or non-existent. Maturity Level 1 represents partially implemented controls and is the minimum baseline. Maturity Level 2 indicates mostly implemented and effective controls—this is the mandatory target for Australian government entities and the recommended target for most organisations. Maturity Level 3 represents fully implemented, tested, and automated controls appropriate for high-risk environments. Mercury IT assesses your current maturity level and creates a roadmap to your target level. What are the benefits of implementing the Essential Eight? The primary benefit is a significant, measurable reduction in cyber risk. The ACSC designed these eight controls specifically because they mitigate the majority of real-world attacks targeting Australian organisations. Additional benefits include improved business resilience during security incidents, easier compliance with other frameworks that reference Essential Eight, potential for reduced cyber insurance premiums, and demonstrated security commitment to partners, customers, and regulators. Mercury IT delivers Essential Eight implementation that provides genuine protection, not just compliance checkboxes. How does Mercury IT assess Essential Eight maturity? Mercury IT has assessors who have completed the official Essential Eight Assessment Course designed by the Australian Signals Directorate's Australian Cyber Security Centre and delivered by TAFEcyber. Our assessments follow the Essential Eight Assessment Guidance Package and Maturity Model to accurately evaluate your current maturity level across all eight controls. We provide detailed findings for each control, identify gaps preventing you from reaching your target maturity level, and deliver a prioritised remediation roadmap with practical implementation guidance. --- # Security Compliance and Governance URL: https://mercuryit.com.au/cyber-securities/protect-your-business-i-security-compliance-experts-brisbane/ IT Governance & Compliance The use of ICT is intrinsic to business operations and vital to the prosperity of organisations. Ensuring your organisation is compliant with various industry and federal regulations (PCI, Sarbanes-Oxley, HIPAA, NDB) in order to keep sensitive customer data safe is becoming increasingly difficult as we work in a decentralised, mobile, app-filled world and failure to meet obligations set by compliance standards could mean penalties, fines and loss of trust. People play an important role in keeping corporate information safe. Snooping, phishing and social-engineering are common ways hackers gain unauthorised access to a company's sensitive data. Mercury IT can assist in educating staff and implementing security policies for laptops, mobile devices and third party apps all of which are crucial to protecting data and the business as a whole. The Notifiable Data Breaches scheme is an amendment to the Privacy Act 1998 and came into effect on the 22nd February 2018. It sets out mandatory requirements for entities in responding to data breaches. Entities have data breach notification obligations when a data breach is likely to result in serious harm to any individuals whose personal information is involved in the breach, more information can be found at https://www.oaic.gov.au/privacy-law/privacy-act/notifiable-data-breaches-scheme FAQs What is security compliance and governance? Governance is the high-level strategy, policies, and management framework that aligns your security program with business objectives—it defines who is responsible for security decisions and how they are made. Compliance is the tactical, evidence-based process of proving you adhere to specific external rules and regulations such as the Privacy Act, Essential Eight, or industry standards. Effective security requires both: governance ensures you are doing the right things, compliance proves you are doing them correctly. Why is security governance important for businesses? Good governance is the foundation of a mature security program. It ensures security decisions are proactive business decisions rather than reactive IT problems. Governance establishes clear accountability (who is responsible when something goes wrong), aligns security spending with business priorities, and creates a security-conscious culture from the board level down. For regulated industries, governance frameworks like AI steering committees and documented decision-making processes are increasingly required to demonstrate due diligence. What is the difference between governance, risk, and compliance (GRC)? GRC represents three interconnected disciplines. Governance is the overall strategy, rules, and policies—the 'what' and 'why' of security. Risk is the process of identifying and assessing threats to your business objectives—the 'what could go wrong.' Compliance is adhering to and proving you follow the rules—the 'proof' that you are doing what you say. An effective GRC strategy integrates all three: you are compliant because you are managing risk according to your governance framework. Mercury IT helps businesses build integrated GRC programs. How does Mercury IT help with security compliance? Mercury IT acts as your expert compliance partner. We begin with a gap analysis to identify where you fall short of your target standard—whether Essential Eight, ISO 27001, Privacy Act requirements, or industry-specific regulations. We then help you develop necessary policies, implement required technical controls, and establish the documentation and evidence collection processes needed to pass audits. Our ongoing compliance management services ensure you maintain your compliance status as requirements evolve. Can my business be secure but not compliant? Yes, and this is a risky position. You might have effective security tools, but without documentation, policies, and audit logs to prove it, you cannot demonstrate compliance to regulators, insurers, or clients. Conversely, you can be technically compliant with checkbox requirements while still being vulnerable to attacks not covered by the standard. The goal is to be both secure and compliant—with controls that actually protect you and documentation that proves it. Mercury IT helps businesses achieve genuine security that also satisfies compliance requirements. What board-level security reporting does Mercury IT provide? Mercury IT provides board-level cybersecurity reporting that translates technical security metrics into business terms directors and executives can act on. Our reporting covers your current security posture, progress against frameworks like Essential Eight, incident trends, emerging risks, and recommendations for security investment. This reporting can be delivered as part of a virtual CISO engagement, as a standalone assurance service, or as oversight of your existing MSP or MSSP's security activities. Clear board reporting demonstrates governance maturity and supports directors' due diligence obligations. Contact us today to discuss your Security Compliance and Governance requirements Reach out --- # Cybersecurity Assessment URL: https://mercuryit.com.au/cyber-securities/security-assessment/ A Cybersecurity Assessment is conducted to provide an informative state in time review of an organisation's Cybersecurity environment. We use analysis tools, policy and compliance review and staff interviews to build out a structured report. This is a highly specialised Cybersecurity consulting piece and provides an organisation with the information to make an informed assessment of the potential risks and recommendations to mitigate those risks. Our Cybersecurity team are experienced not only in the technical aspects, but also the management, governance and compliance aspects of IT. Overview The Mercury IT Cybersecurity assessment reviews the current cybersecurity posture by looking at: Policies Systems configuration Mercury IT will assess your policies specifically with a focus on the cybersecurity threat landscape to ensure your policies are meeting baseline requirements as set by your business requirements or by Mercury IT. Mercury IT will assess your network systems for baseline security against well-known industry best practises such as ISO27001, NIST and ASD Strategies to Mitigate Cybersecurity Incidents. Policy Review Mercury IT will interview the business policy owners about what policies are in place, what requirements exist and if any planned future projects exist. Existing policies will be assessed with a focus on cyber risk and if these policies meet the baseline requirements for the business. Mercury IT will recommend any policy changes and if any new policies need to be introduced to mitigate cybersecurity risks. Systems Configuration Review Mercury IT will review existing systems configuration against best practice as defined by the scope agreed between the business and Mercury IT. The scope is often Microsoft servers such as AD, File and Print and mail. Network equipment such as firewalls, routers and switches. FAQs What is a cybersecurity assessment? A cybersecurity assessment is a systematic review to identify, evaluate, and prioritise the cyber risks facing your organisation. It provides a snapshot of your current security posture that answers critical questions: Where are your most valuable assets? What are your biggest threats? Are your current defences adequate? What gaps need immediate attention? Mercury IT conducts assessments aligned to frameworks like Essential Eight and ISO 27001, providing actionable insights rather than generic checklists. What's the difference between a risk assessment, a vulnerability assessment, and a penetration test? These three assessments serve different purposes and provide different insights. A risk assessment is a high-level strategic review of what your risks are and their potential business impact—for example, identifying that your customer database faces high risk of breach. A vulnerability assessment is a technical scan that finds specific weaknesses in your systems—such as identifying missing critical patches. A penetration test is a simulated attack where an ethical hacker actively attempts to exploit those vulnerabilities to determine if they can actually breach your defences. Mercury IT provides all three assessment types. What does a typical cybersecurity assessment process involve? Mercury IT's assessment process begins with scoping—understanding your critical assets, business objectives, and compliance requirements. We then conduct identification of threats and vulnerabilities through technical scanning, configuration review, and policy analysis. Next is analysis and prioritisation, calculating the likelihood and impact of each risk in business terms. We conclude by delivering a comprehensive report with a prioritised, actionable roadmap for remediation, including effort and cost estimates for each recommendation. Why is a regular cybersecurity assessment necessary? Your business, technology, and the threat landscape change constantly. The ACSC responded to over 1,200 cyber security incidents in 2024-25, an 11% increase from the prior year. New vulnerabilities are discovered daily in the software you rely on—the ACSC proactively notified entities of potential malicious activity more than 1,700 times last year, an 83% increase. Regular assessments—typically annually or after significant business changes—keep your risk profile current and ensure your security investments remain effective against current threats. What is the main outcome of a cybersecurity assessment? The most valuable outcome is a prioritised action plan that guides your security investment decisions. Rather than an overwhelming list of problems, Mercury IT delivers a clear, business-focused roadmap that identifies what to fix first, second, and third based on risk and cost-effectiveness. This enables informed, budget-conscious decisions that maximise your risk reduction. The assessment also provides baseline documentation for compliance, insurance applications, and demonstrating due diligence to stakeholders. What happens during a cybersecurity assessment with Mercury IT? Our assessment process begins with a scoping call to understand your business, critical assets, compliance requirements, and concerns. We then conduct technical vulnerability scanning, configuration reviews against Essential Eight controls, and policy and procedure analysis. Within two weeks, you receive a prioritised report with specific recommendations ranked by risk severity and implementation cost. We then present findings to your leadership team in business terms and provide a clear roadmap for remediation with ongoing support options. Can Mercury IT conduct Essential Eight assessments? Yes. Mercury IT has assessors who have completed the official Essential Eight Assessment Course designed by the Australian Signals Directorate's Australian Cyber Security Centre and delivered by TAFEcyber. This course enables our assessors to understand and apply the Essential Eight Assessment Guidance Package and the Essential Eight Maturity Model accurately and effectively. We assess your current maturity level across all eight controls and provide a detailed roadmap to achieve your target maturity level, whether that's Maturity Level 1, 2, or 3. Contact us today to get a Security Assessment. Reach out --- # Agriculture URL: https://mercuryit.com.au/industries-list/agriculture/ Increasingly, agricultural businesses are utilising technology to improve production, forecasting and efficiency. Robotics, drones and machine learning analytics are becoming integral components of a modern agriculture business. Development in this space is changing so rapidly, it can be a real challenge to keep up with the possibilities. Working with a technology partner like Mercury IT allows you to focus on your core business, whilst getting expert advice, support and assistance from a professional in the field. Contact us today to discuss how we can help your Agricultural business Reach out --- # Education URL: https://mercuryit.com.au/industries-list/education/ It goes without saying that education is the cornerstone of a modern Australia and is a growing industry in itself. From the foundations of early childhood learning, through the important formative development years of primary and secondary schooling and the summative capstone of tertiary education, technology is an integral part of the education experience. Collabortive tools to enable effective team workspaces, student management systems, content delivery systems and ubiqitous access to learning material are just a few of the key requirements of all education organisations. At Mercury IT, we have extensive experience and skills within this space. Contact us today Contact us today to discuss how we can help your Education organisation. Reach out --- # Healthcare & Aged Care URL: https://mercuryit.com.au/industries-list/health-aged-care/ The Health sector can be a complicated industry for IT professionals, they have their own rules, their own strange lingo, extensive security requirements and enough of their own indecipherable acronyms to leave the average IT Professional (normally thrilled at the prospect of new acronyms to add to their repertoire) gibbering in apoplectic confusion. For those of us still willing to brave such waters there is no substitute for experience—something Mercury IT, after more than 20 years in the industry, wield deftly. This wealth of experience has provided a practical understanding of many of the complexities and challenges specific to working in areas such as Radiology, Dentistry, Aged Care and Medical. Some of this expertise includes: Working with Medical and Dental Practice Management Software (PMS) Working with Radiology information system (RIS) Working with Picture Archiving and Communication Systems (PACS) Configuration and integration of medical equipment and modalities (DICOM). An understanding of secure hl7 messaging and report delivery mechanisms Experience working with a diverse range of medical application and hardware vendors Familiarity and competence in working with common medical requirements such as Provider Numbers, HPOS, Eclipse Design and implementation of Health sector IT security environments Design and implementation of Health sector Networks and Infrastructure Support and service across entire Health sector organisations How our IT Support Works for Medical Practices & Allied Healthcare Clinics We understand the unique needs of practices in the ever-evolving healthcare and medical centre landscape. Whether you're launching a new clinic, practice or centre or managing an established one, we have tailored support options to meet your requirements. Comprehensive IT setup for healthcare clinics: Are you starting your own practice? Ensure a smooth beginning by leveraging our expertise in IT consultation. We'll work closely with you to map out your medical practice management software systems in advance, setting the foundation for efficient operations from day one. Managed IT services: Simplify your IT management and focus on patient care. Our team is proficient in troubleshooting medical equipment hardware and software issues, proactive antivirus monitoring, and seamless installation of security updates. By entrusting us with your IT needs, your practice can fully outsource its IT management. Secure your medical practice IT systems and data: We understand that protecting your patients' confidential medical records is paramount. Given the growing significance of compliance and data security, our cybersecurity team is well-equipped to assist your practice in aligning with industry standards. The Mercury IT Advantage Providing Healthcare IT Support Since 2004 Recognised IT Specialists in Healthcare Industry Dedicated Cybersecurity Team Highly Experienced And Skilled IT Professionals Contact us today to discuss how we can help your healthcare or aged care organisation. Reach out --- # Legal, Financial & Professional Services URL: https://mercuryit.com.au/industries-list/legal-financial-professional-services/ IT Services for Accountants, Lawyers and Professional Services Firms If Cybersecurity is not the first words spoken to a new IT provider, it needs to be! All businesses need to focus on cybersecurity, it is however, even more important within the legal, accounting and professional services sector due to the large volume of Personally Identifiable Information (PII) that your businesses handle. When your reputation and professionalism is the core of your business, a breach of sensitive client data would be catastrophic and your business may not be able to recover. At Mercury IT, we have a dedicated cybersecurity department that focuses solely on security for our clients. Many of them are leading legal and accounting firms, so we understand your unique requirements and provide practical and achievable security solutions to significantly reduce the risk of a cyber-breach. We also provide your everyday IT support services and are extensively familiar with the leading practice management systems that are commonly used, along with support for standard business applications. How Our IT Support for Accounting, Law and Professional Services Firms Works Unlock seamless productivity, peace of mind and rock-solid data protection for your accounting, legal, or professional services firm with Mercury IT's trusted IT Support and Cybersecurity solutions. IT Support Tailored to Your Industry: At Mercury IT, we understand the unique technology needs and IT challenges faced by accountants, lawyers, and various professional services firms. From proactive monitoring and rapid resolution to strategic IT consulting for new professional services firms, we ensure your IT systems remain reliable, efficient, and aligned with your business objectives. Cybersecurity Solutions to Safeguard Your Sensitive Data: As an accountant, lawyer, or professional services firm, you handle a vast amount of sensitive client data and confidential information. Protecting this data is paramount, which is why we offer leading-edge cybersecurity solutions designed to safeguard your business against ever-evolving threats. Seamless Business Continuity For Professional Services Firms: In the fast-paced world of professional services, downtime is not an option. With Mercury IT, you can achieve seamless business continuity even in the face of unforeseen events. We design and implement robust data backup and disaster recovery strategies to minimise downtime and ensure the integrity of your critical systems and data. Our services can cover Microsoft 365, WiFi and Local Area Networks, remote access, and connectivity. The Mercury IT Advantage Providing IT Support for Professional Services Firms Since 2004 IT Specialists in Accounting and Law Firms Dedicated Cybersecurity Team Department Highly Experienced and Skilled IT Professionals Contact us today to discuss how we can help your Law Firm, Accounting Firm, Financial Advisory or Professional Services Business Reach out --- # Mining, Manufacturing, Property & Construction URL: https://mercuryit.com.au/industries-list/mining-manufacturing-property-construction/ Ok, so this is a pretty broad sector, and no, they are not all the same, but they do all have a common IT requirement: they need their systems to work when they need them! Designing, implementing and supporting environments that are reliable, scalable, secure and flexible, is what we do each and every day. Every business is different, even when they are in the same industry, understanding these unique requirements and building the IT systems to achieve the organisation's strategic and operational objectives is our Business as Usual. With a large team of technical staff with specialisations across infrastructure, networking, virtualisation, collaboration, user support and importantly security, Mercury IT is able to support your business effectively and efficiently. Contact us today to discuss how we can help your business Reach out --- # Not-for-Profit URL: https://mercuryit.com.au/industries-list/not-for-profit/ Not only are Not-for-Profit organisations essential to our community, they achieve a lot, with a little. To ensure that the maximum benefit is available for the beneficiaries of the services, budgets for items such as IT are always tight. This creates significant challenges within the IT space for NFP's and Mercury has extensive experience helping navigate the competing priorities of security, operability, performance and budget. We have a number of NFP customers including Guide Dogs Queensland, The National Trust Queensland and Currumbin Wildlife Sanctuary. Our extensive experience and pragmatic approach, has enabled us to be flexible and agile, whilst delivering great solutions and service. Contact us today to discuss how we can help your Not-for-Profit. Reach out --- # Other Industry Sectors URL: https://mercuryit.com.au/industries-list/other-industry-sectors/ So your industry is not listed? Why? Well to be frank, there are just too many to list! This does not mean that your industry is not important, in fact it is the opposite. Your business is important to us and we love nothing more than helping businesses prosper through technology. All businesses have a common IT requirement: they need their systems to be reliable, scalable, secure and flexible. Designing, implementing and supporting these systems is what we do each and every day. Understanding the unique requirements of your business and building an IT system to achieve your organisation's strategic and operational objectives is what we do best. With a large team of technical staff with specialisations across infrastructure, networking, virtualisation, collaboration, user support and importantly security, Mercury IT is able to support your unique business effectively and efficiently. Contact us today to discuss how we can help your business Reach out --- # Real Estate URL: https://mercuryit.com.au/industries-list/real-estate-it-services/ Managed IT Services for Real Estate Agencies In an industry that relies on online connectivity and accessing information on the fly, staying ahead of the competition requires more than a strong sales strategy. It demands robust technology infrastructure and unwavering cybersecurity measures. You need to quickly and securely share files, access data while you are on the go, and stay connected to your team and clients anywhere and anytime. At Mercury IT, we understand that real estate businesses must navigate a complex web of data management, client confidentiality, and seamless connectivity. That's why our comprehensive managed IT services and leading-edge cybersecurity solutions are tailored specifically for the unique needs of the real estate industry. We can help you select and implement the right real estate application management solutions to keep you connected. With our team of IT and cybersecurity experts by your side, you can focus on closing deals, while we ensure your data is secure, your systems are optimised, and your business forges ahead in the online world. How Our Managed IT Services for Real Estate Businesses Works Tailored IT Solutions for Real Estate Professionals: We understand the unique technology and security needs of real estate professionals. Whether you're a real estate agency or property management firm, our team of IT experts will work closely with you to develop and implement customised IT strategies that enhance your operations, improve efficiency, and support your business growth. From robust network infrastructure to property management software integration, we've got you covered. Secure Data Management and Compliance: In the real estate industry, managing sensitive client information and maintaining compliance with data privacy regulations are critical. Mercury IT offers leading-edge cybersecurity solutions and data management practices to protect your client's confidential data. Seamless Connectivity and Collaboration: Seamless connectivity and efficient collaboration are vital for success in the real estate industry. Mercury IT provides solutions that enable real estate professionals to stay connected and collaborate effectively, whether you're working in the office or on the go. We offer cloud-based solutions, secure remote access, and collaborative tools that enhance communication, streamline workflows, and facilitate real-time collaboration with clients, colleagues, and partners. The Mercury IT Advantage Providing IT Support Real Estate Agencies Since 2004 IT Specialists in Real Estate Dedicated Cybersecurity Department Highly Experienced and Skilled IT Professionals Contact us today to discuss how we can help your Real Estate Agency. Reach out --- # Retail, Hospitality & Tourism URL: https://mercuryit.com.au/industries-list/retail-hospitality-tourism/ At Mercury IT, our diverse customer portfolio includes national retail chains, local retailers, online retailers, hotels and tourism operators. Point of Sale (POS), integrated backend systems for accounting and stock control and customer Wi-Fi are just a few of the requirements that this sector have a significant reliance upon. After-hours support is also a key requirement of these organisations, and Mercury IT have options for full 24 x 7 support to ensure your systems are working when you are busiest. Contact us today to discuss how we can help your business. Reach out --- # Transportation & Logistics URL: https://mercuryit.com.au/industries-list/transportation-logistics/ Road Transport and Logistics quite literally keep Australia moving. Manifests, warehouse management, passenger data, GPS systems, scheduling, tracking, reporting and analytics are just a few of the key areas where IT is an embedded component within the Transport and Logistics world. At Mercury IT, we have a number of clients within the passenger transport, warehousing, road freight and logistics industries. We understand the time priorities and the requirement for highly available seamless integrated systems. Contact us today to discuss how we can help your Transport and Logistics business. Reach out --- # Brisbane Head Office URL: https://mercuryit.com.au/location/brisbane-head-office/ --- # Gold Coast Head Office URL: https://mercuryit.com.au/location/gold-coast-head-office/ --- # Melbourne Head Office URL: https://mercuryit.com.au/location/melbourne-head-office/ --- # Perth Head Office URL: https://mercuryit.com.au/location/perth-head-office/ --- # Sydney Head Office URL: https://mercuryit.com.au/location/sydney-head-office/ --- # AJ Williams URL: https://mercuryit.com.au/team/aj-williams/ AJ has over 20 years experience in IT, across Technical, Sales, Consulting and Management roles. AJ is passionate about providing outsanding customer service and the best solutions for our clients. --- # Alan Foster URL: https://mercuryit.com.au/team/alan-foster/ 20 years experience in IT, pc repair, network setup and diagnostics, small business solutions --- # Alisha Christian URL: https://mercuryit.com.au/team/alisha-christian/ 20 years marketing experience in various industries including IT, Transport, Retail and Hospitality. --- # Andrew Corbett URL: https://mercuryit.com.au/team/andrew-corbett/ Seven years experience in IT specialising in Health Services administration, support and management. --- # Ashlee Clark URL: https://mercuryit.com.au/team/ashlee-clark/ Ashlee has joined the triage team and is currently gaining knowledge and certifications in the industry. --- # Brett Thomas URL: https://mercuryit.com.au/team/brett-thomas/ I have been working in IT for a number of years and have been with Mercury IT for 4 years. --- # Chris Eksteen URL: https://mercuryit.com.au/team/chris-eksteen/ Over 20 years IT services experience. Specialising in Microsoft Infrastructure and enterprise business services. --- # Chris Haigh URL: https://mercuryit.com.au/team/chris-haigh/ Over 20 years experience delivering technical security training and advising on cybersecurity strategy and implementation in Australia, Europe and South Africa. --- # Corey Murtagh URL: https://mercuryit.com.au/team/corey-murtagh/ 20 years experience in IT as software engineer, system administrator and technician. Focus on database development, APIs and automation. --- # Daniel Zajc URL: https://mercuryit.com.au/team/daniel-zajc/ Senior manager with 10+ years extensive experience in Consulting, Technical Presales, Solution Design, Project and Account Management, with a strong focus in the medical/radiology sector. --- # Emmanuel Mulenga URL: https://mercuryit.com.au/team/emmanuel-mulenga/ I started at Mercury as an Intern and was offered a more permanent role at the end of it. I enjoy working in IT because there is a great opportunity to positively impact the community around me and beyond. --- # Griffen E URL: https://mercuryit.com.au/team/griffen-e/ After a successful career within Commercial Real Estate, Griffen joins us as a Junior Triage Technician. Fervent about Cyber Security, Griffen seeks to continually develop his skills and amass industry certifications. --- # Hilary Bell URL: https://mercuryit.com.au/team/hilary-bell/ With over ten years' experience in accounting and administration, Hilary is committed to providing exceptional support to our clients and the team at Mercury IT. --- # James Heasman URL: https://mercuryit.com.au/team/james-heasman/ Microsoft Specialist with 15 years’ experience following the latest emerging technologies and keeping one step ahead whilst supporting a great team of engineers. --- # Jessica Stafford URL: https://mercuryit.com.au/team/jessica-stafford/ Over 12 years' administration experience within a corporate environment, Jess is dedicated to providing outstanding support to our clients and the team at Mercury IT. --- # Kevin Yi URL: https://mercuryit.com.au/team/kevin-yi/ A recent IT graduate from Griffith University, Kevin is excited to be starting his professional career with Mercury IT. --- # Martin O'Riordan URL: https://mercuryit.com.au/team/martin-oriordan/ 20 years experience in Executive Management and Leadership roles with responsibility for Strategy, Finance, Operations, Governance and Security within both the corporate and information technology spaces. --- # Mitch Bryant URL: https://mercuryit.com.au/team/mitch-bryant/ I love helping businesses solve their most painful problems through the implementation of appropriate technology solutions.As an ex-accountant with a passion for technology, I specialise in assisting SMB and mid-market companies to identify inefficiencies, vulnerabilities, and areas for cost reduction. I am committed to always sourcing the best solution for my customers and delivering honest, comprehensive, outcome-based technology solutions. Everyone has problems, especially in business, let’s see if I can help you solve them. --- # Neville MacAlister URL: https://mercuryit.com.au/team/neville-macalister/ Over 25 years experience in Systems Engineering. Neville is able to utilise current technologies such as Hyper-V / VMware / Cloud platforms and has solid experience in maintaining and improving all aspects of the desktop and server infrastructure. --- # Paul Walters URL: https://mercuryit.com.au/team/paul-walters/ 13 years experience across education, small, medium and large multi-nationals. Background in Microsoft and extensive history with Citrix. Paul believes in finding the right people for the right job, he does this by finding the individual motivations and working with people to acheive their goals and dreams. --- # Sally-Ann Bird URL: https://mercuryit.com.au/team/sally-ann-bird/ A results focused, performance driven manager and sales leader, with broad operational exposure that underpins an impressive 15+ years experience in Australia and previous experience in the UK, US and Asia. Expert in delivering both short and long range strategies and can demonstrate an impressive profitable growth track record, whilst aligning business plans to wider corporate strategy. --- # Sami Bastow URL: https://mercuryit.com.au/team/sami-bastow/ An accomplished Administration Manager, Finance and Executive Assistant with over 20 years of experience in a variety of arenas with a proven ability to initiate, nurture and extend business relationships on all levels. --- # Sanjeev Waghmare URL: https://mercuryit.com.au/team/sanjeev-waghmare/ Sanjeev has over 9 years’ experience delivering IT support in public and private firms. --- # Scott Winser URL: https://mercuryit.com.au/team/scott-winser/ 21 Years servicing clients needs throughout the Gold Coast and Brisbane regions. --- # Sean O'Riordan URL: https://mercuryit.com.au/team/sean-oriordan/ Sean started at Mercury in admin and is currently on the helpdesk going through certifications to widen his knowledge in IT. --- # Stephanie Burrell URL: https://mercuryit.com.au/team/stephanie-burrell/ With almost 10 years of solution selling experience both Australia wide and Internationally - Stephanie brings a client focused and results driven approach to the team. --- # Tim Rae URL: https://mercuryit.com.au/team/tim-rae/ Tim has extensive experience in the Education (K-12) sector, specialising in BYOD infrastructure, hardware deployments and service delivery along with 8 years experience in the Retail IT Support space, specialising in Desktop support, RF technology, Warehousing infrastructure and POS Systems. He also has experience in the MSP space , supporting SME infrastructure including the Health and Industrial sectors. --- # Trent Gribble URL: https://mercuryit.com.au/team/trent-gribble/ Recent University graduate with a keen interest in Networking & Security. --- # Do I need a local cybersecurity provider? URL: https://mercuryit.com.au/faq/5695/ For managed security services, location matters less than capability and response time. Modern cybersecurity—threat monitoring, endpoint protection, incident response—operates remotely through secure connections. What matters is your provider's certifications, response time, expertise, and track record. Mercury IT delivers enterprise-grade security to businesses across Australia from our Gold Coast base, with the ability to be on-site in South East Queensland within hours and in Sydney or Melbourne within 24 hours for critical incidents. --- # Are Mercury IT’s IT solutions tailored to my business's needs? URL: https://mercuryit.com.au/faq/are-mercury-its-it-solutions-tailored-to-my-businesss-needs/ Absolutely. We don't offer "one-size-fits-all" packages. Our process begins with a thorough assessment of your current technology, business goals, and operational challenges. From there, we design and implement a set of IT solutions that are specifically tailored to improve your efficiency, security, and scalability. --- # Can managed IT services scale as my business grows? URL: https://mercuryit.com.au/faq/can-managed-it-services-scale-as-my-business-grows/ Yes, managed services are designed to scale with your business. As you add new employees, open new offices or locations, or adopt new technologies, your IT plan can be adjusted. This is far more flexible and cost-effective than the slow and expensive process of hiring and training new full-time IT staff. --- # Can Mercury IT provide cybersecurity if I already have an MSP? URL: https://mercuryit.com.au/faq/can-mercury-it-provide-cybersecurity-if-i-already-have-an-msp/ Yes. Many organisations have an existing MSP handling their general IT operations but need specialist cybersecurity capabilities their MSP cannot provide. Mercury IT works collaboratively with your existing MSP, adding a dedicated security layer including SIEM/SOC monitoring, endpoint detection and response, vulnerability management, and security incident response. We also provide board-level security reporting and assurance that gives executives and directors visibility into your security posture. This collaborative model means you keep your trusted IT partner while gaining enterprise-grade security oversight. --- # Can Mercury IT provide cybersecurity services to Sydney businesses? URL: https://mercuryit.com.au/faq/can-mercury-it-provide-cybersecurity-services-to-sydney-businesses/ Mercury IT delivers managed security services to Sydney businesses through our 24/7 remote security operations combined with scheduled on-site presence. Our security monitoring, threat detection, and incident response operate identically regardless of location—your Sydney business receives the same protection as our Gold Coast clients. For assessments, strategy workshops, and major incidents, our consultants travel to Sydney regularly. This model provides enterprise-grade security without the enterprise price tag of Sydney-based providers. --- # Can Mercury IT provide independent security assurance if we already have an MSSP? URL: https://mercuryit.com.au/faq/can-mercury-it-provide-independent-security-assurance-if-we-already-have-an-mssp/ Yes. Some organisations require independent assurance over their existing security provider's work—particularly for board reporting, regulatory compliance, or internal governance requirements. Mercury IT provides independent cybersecurity assurance services, reviewing and validating your current MSSP's controls, reporting, and incident response capabilities. We deliver objective assessments and board-level reporting that gives executives and directors confidence in their security investments. This independent oversight model is increasingly requested by boards seeking assurance that security commitments are being met. --- # Can you guarantee that my IT systems will work 100% of the time? URL: https://mercuryit.com.au/faq/can-you-guarantee-that-my-it-systems-will-work-100-of-the-time/ No. In fact we can guarantee that at some point, at least some part of your IT system will break. Multi-million dollar IT budgets in multinational companies and governments, have system issues from time to time. Mercury IT's strength is our commitment to our customers and we will work tirelessly to get our customers back working. Customers with Managed Service Agreements are given priority to resolve issues, whereas customers on Ad Hoc arrangements are resolved on a 'best efforts' basis. We do however do everything we can to get all of our customers back working as soon as possible. --- # Can you help my business comply with the Notifiable Data Breaches (NDB) scheme? URL: https://mercuryit.com.au/faq/can-you-help-my-business-comply-with-the-notifiable-data-breaches-ndb-scheme/ Yes, at Mercury IT, Cyber Security is a part of everything we do. We offer a complete range of Cyber Security services, check out our Cyber Security pages for more information here --- # Do you offer both remote and on-site IT support? URL: https://mercuryit.com.au/faq/do-you-offer-both-remote-and-on-site-it-support/ Yes, a modern IT support model requires both. Most IT issues can be resolved via remote support, getting your team back to work faster. --- # Does Mercury IT provide cybersecurity services in Brisbane? URL: https://mercuryit.com.au/faq/does-mercury-it-provide-cybersecurity-services-in-brisbane/ Yes. Mercury IT serves Brisbane businesses from our Gold Coast headquarters, providing the same rapid response and hands-on service as our local Gold Coast clients. Brisbane clients benefit from our proximity—we are less than an hour away for on-site incident response, security assessments, and face-to-face strategy sessions. We currently protect businesses across Brisbane CBD, South Brisbane, and the greater Brisbane metropolitan area. --- # Does Mercury IT work with Melbourne businesses? URL: https://mercuryit.com.au/faq/does-mercury-it-work-with-melbourne-businesses/ Yes. Mercury IT provides managed cybersecurity services to Melbourne businesses through our remote-first delivery model. Our 24/7 security monitoring, endpoint protection, and incident response function seamlessly across any Australian location. Melbourne clients benefit from our competitive Queensland-based pricing while receiving the same certified expertise and response capabilities. We conduct on-site security assessments and executive briefings in Melbourne on a scheduled basis. --- # Does Mercury IT work with other IT providers? URL: https://mercuryit.com.au/faq/does-mercury-it-work-with-other-it-providers/ Yes. Mercury IT works collaboratively with other MSPs and MSSPs. We understand that many businesses have long-standing relationships with IT providers and don't want to disrupt what's working well. Whether you need us to add a security layer on top of your existing IT management, provide independent assurance over your current security provider, or deliver specialist services like Essential Eight assessments and board reporting, we integrate smoothly with your existing arrangements. Our focus is on improving your security outcomes, not replacing trusted relationships. --- # Everyone I talk to tells me I need to move to the Cloud, is that right? URL: https://mercuryit.com.au/faq/everyone-i-talk-to-tells-me-i-need-to-move-to-the-cloud-is-that-right/ There are many right reasons to move services to the Cloud, doing because someone else has, is definitely not one of them. When we work with a customer we get a comprehensive understanding of their organisational objectives, their operating environment, their users and their current and future technology requirements. We then look at the best solution for them and provide a complete solution that provides the best outcomes for them. For an honest appraisal of your Cloud needs, contact us. --- # How do I choose a cybersecurity provider in Australia? URL: https://mercuryit.com.au/faq/how-do-i-choose-a-cybersecurity-provider-in-australia/ When selecting a cybersecurity provider, evaluate their certifications (look for CISSP, CCIE, ISO 27001, or Microsoft security certifications), their local presence and response capability, whether they offer 24/7 monitoring, and their experience in your industry. Ask about their Essential Eight implementation and assessment experience and whether they can support your compliance requirements. Request references from businesses similar to yours. Mercury IT meets all these criteria as a certified MSSP with proven experience across healthcare, legal, finance, and not-for-profit sectors. --- # How do I choose the right IT solutions provider for my business? URL: https://mercuryit.com.au/faq/how-do-i-choose-the-right-it-solutions-provider-for-my-business/ When choosing a provider, prioritise a partner with proven experience in your industry and with businesses of a similar size. Look for a provider that is proactive, not reactive, and has a dedicated cybersecurity department. --- # How do I contact Mercury IT for cybersecurity services? URL: https://mercuryit.com.au/faq/how-do-i-contact-mercury-it-for-cybersecurity-services/ Mercury IT can be reached through our website at mercuryit.com.au, by phone, or by email. Our Gold Coast headquarters serves clients across Australia including Brisbane, Sydney, and Melbourne. For general enquiries, our business hours team can discuss your requirements and schedule an initial consultation. For urgent security incidents, managed security clients have access to our 24/7 incident response line. Visit mercuryit.com.au to get in touch or request a callback. --- # How do I get started with Mercury IT's cybersecurity services? URL: https://mercuryit.com.au/faq/how-do-i-get-started-with-mercury-its-cybersecurity-services/ The first step is a no-obligation discovery call where we understand your business, current security posture, and compliance requirements. From there, we recommend an appropriate starting point—whether that's a security assessment, Essential Eight gap analysis, or immediate managed security services. If you already have an MSP or MSSP, we can discuss how we add value through specialist security services or independent assurance. Most engagements begin with a baseline assessment so we can prioritise recommendations based on your specific risks and budget. Contact Mercury IT to schedule your initial consultation. --- # How do I know if my business needs a cybersecurity provider? URL: https://mercuryit.com.au/faq/how-do-i-know-if-my-business-needs-a-cybersecurity-provider/ You need a cybersecurity provider if your business handles sensitive customer or financial data, relies heavily on IT systems for operations, must meet regulatory or contractual security requirements, or lacks in-house capability to design and maintain strong security controls. The ACSC recorded over 84,700 cybercrime reports in FY2024–25 (around one report every six minutes), showing that cyber risk is a routine business issue, not a rare event. A specialist provider helps you reduce risk, respond faster to incidents, and demonstrate due diligence. --- # How do managed IT providers improve cybersecurity for SMBs? URL: https://mercuryit.com.au/faq/how-do-managed-it-providers-improve-cybersecurity-for-smbs/ Managed IT providers are the frontline defence for SMBs. We implement a layered security strategy that includes 24/7 threat monitoring, endpoint protection, firewalls, email filtering, and critical patch management. This multi-layered approach provides enterprise-grade security that is difficult for an SMB to implement and manage on its own. --- # How do managed IT services reduce IT downtime? URL: https://mercuryit.com.au/faq/how-do-managed-it-services-reduce-it-downtime/ Managed services reduce downtime by being proactive, not reactive. Through 24/7 monitoring, we identify and fix potential issues like hardware failures or security risks before they can cause an outage. Regular patch management and maintenance also prevent system crashes and security vulnerabilities, keeping your team productive. --- # How does cybersecurity protect business data? URL: https://mercuryit.com.au/faq/how-does-cybersecurity-protect-business-data/ Cybersecurity protects data using a defence-in-depth model with multiple layers of protection. This includes technical controls such as encryption (making data unreadable without authorisation), next-generation firewalls (blocking malicious traffic), endpoint detection and response (protecting laptops and servers), access controls (ensuring only authorised users can access sensitive data), and continuous monitoring for signs of a data breach. Mercury IT implements these layered defences aligned to the Essential Eight framework recommended by the Australian Cyber Security Centre. --- # How much does cybersecurity cost for a small business in Australia? URL: https://mercuryit.com.au/faq/how-much-does-cybersecurity-cost-for-a-small-business-in-australia/ Cybersecurity costs vary based on your business size, complexity, and compliance requirements. According to the ACSC, Australian businesses should expect cyber incidents to cost an average of $56,600 for small businesses and $97,200 for medium businesses when attacks succeed. Investing in preventative security is significantly more cost-effective than incident recovery. Mercury IT offers scalable security packages starting with essential protection (endpoint security, email filtering, MFA) through to comprehensive managed security with 24/7 monitoring. We provide transparent, fixed-monthly pricing so you can budget with certainty. --- # How quickly can Mercury IT respond to a cyber incident? URL: https://mercuryit.com.au/faq/how-quickly-can-mercury-it-respond-to-a-cyber-incident/ Mercury IT provides rapid incident response for businesses across Australia. Our security team begins remote triage within one hour of notification, containing the threat and assessing the scope of the incident. For Gold Coast and Brisbane clients, on-site response is available within four hours for critical incidents. Sydney and Melbourne clients receive on-site support within 24 hours when required. We follow established incident response procedures including containment, eradication, recovery, and post-incident reporting required for notifiable data breaches under Australian law. --- # How should businesses manage AI cybersecurity risks? URL: https://mercuryit.com.au/faq/how-should-businesses-manage-ai-cybersecurity-risks/ AI introduces new security risks including data leakage through public AI tools like ChatGPT, shadow AI usage by employees without IT oversight, and AI-powered social engineering attacks. The Mimecast State of Human Risk Report found 81% of organisations are concerned about sensitive data leaks via generative AI tools. Businesses need an AI governance policy that defines acceptable AI use, protects sensitive data from being entered into AI systems, and trains staff on AI-specific risks. Mercury IT provides AI governance consulting, helping organisations develop policies and technical controls that enable AI innovation while maintaining security and privacy compliance. --- # Is cybersecurity worth the investment for small businesses? URL: https://mercuryit.com.au/faq/is-cybersecurity-worth-the-investment-for-small-businesses/ According to the ACSC Annual Cyber Threat Report 2024-25, the average cost of a cyber incident for Australian small businesses is $56,600—a 14% increase from the prior year. For medium businesses, costs average $97,200 (up 55%). Cyber insurance claims are increasingly being denied for businesses without adequate controls like multi-factor authentication and endpoint protection. Investing in preventative cybersecurity is significantly cheaper than recovering from an attack. Mercury IT helps businesses implement cost-effective, Essential Eight-aligned security that satisfies insurers and protects your bottom line. --- # What are the biggest cybersecurity threats currently? URL: https://mercuryit.com.au/faq/what-are-the-biggest-cybersecurity-threats-currently/ Based on the ACSC Annual Cyber Threat Report 2024–25 and broader industry trends, the biggest cybersecurity threats remain ransomware and extortion, phishing and credential theft, business email compromise, and attacks targeting exposed edge or cloud services. Threat actors are increasingly using automation and AI-assisted techniques to scale social engineering and identify vulnerable systems. Maintaining the Essential Eight, strong identity security (MFA, conditional access, least privilege), and rapid patching are the most practical ways to reduce exposure. --- # What are the consequences of not having strong cybersecurity in place? URL: https://mercuryit.com.au/faq/what-are-the-consequences-of-not-having-strong-cybersecurity-in-place/ The consequences are severe and increasingly costly. According to the ACSC Annual Cyber Threat Report 2024-25, the average cost of a cyber incident for Australian small businesses is $56,600, rising to $97,200 for medium businesses and $202,700 for large businesses. These costs increased by 14%, 55%, and 219% respectively in just one year. Beyond direct costs, businesses face reputational damage, customer trust erosion, and potential legal penalties under the Privacy Act reaching up to $50 million for serious breaches. Mercury IT helps businesses avoid these consequences through proactive security management. --- # What are the most common cyber threats facing Australian businesses? URL: https://mercuryit.com.au/faq/what-are-the-most-common-cyber-threats-facing-australian-businesses/ According to the ACSC Annual Cyber Threat Report 2024–25, the most common cyber threats affecting Australian businesses include phishing and other social-engineering scams, ransomware and other forms of malware, business email compromise, and attacks that exploit unpatched or misconfigured internet-facing systems. The Essential Eight and layered security controls are designed to reduce the likelihood and impact of these threats. --- # What areas does Mercury IT service? URL: https://mercuryit.com.au/faq/what-areas-does-mercury-it-service/ Mercury IT provides managed IT and cybersecurity services across Australia. Our core service areas include Gold Coast and South East Queensland (same-day on-site support), Brisbane (rapid on-site response), and Sydney and Melbourne (remote-managed security with scheduled on-site consulting). Our 24/7 security monitoring and managed services operate identically across all locations through secure remote management technology. --- # What certifications does Mercury IT hold? URL: https://mercuryit.com.au/faq/what-certifications-does-mercury-it-hold/ Mercury IT holds ISO 27001 certification (information security management) and ISO 9001 certification (quality management), demonstrating our commitment to rigorous, audited processes. Our team members hold individual certifications including CISSP (Certified Information Systems Security Professional) and CCIE (Cisco Certified Internetwork Expert). We are a Microsoft Certified Partner. Our Essential Eight assessors have completed the official Essential Eight Assessment Course designed by the Australian Signals Directorate's Australian Cyber Security Centre and delivered by TAFEcyber, enabling us to accurately assess and improve organisations' Essential Eight maturity. --- # What certifications should a cybersecurity provider have? URL: https://mercuryit.com.au/faq/what-certifications-should-a-cybersecurity-provider-have/ Look for industry-recognised certifications that demonstrate verified expertise. Key individual certifications include CISSP (Certified Information Systems Security Professional) for strategic security leadership and CCIE (Cisco Certified Internetwork Expert) for network security. Organisation-level certifications like ISO 27001 (information security management) and ISO 9001 (quality management) demonstrate mature, audited processes. For Essential Eight assessments, look for assessors who have completed the official Essential Eight Assessment Course designed by the Australian Signals Directorate's Australian Cyber Security Centre. Mercury IT holds all of these certifications and qualifications. --- # What industries does Mercury IT specialise in? URL: https://mercuryit.com.au/faq/what-industries-does-mercury-it-specialise-in/ Mercury IT has deep experience in regulated industries where data protection is critical. We specialise in healthcare (with over 20 years of experience in radiology, dentistry, allied health, and private practice), legal services (matter confidentiality and trust account protection), aged care (quality standards compliance), financial services (APRA CPS 234), and not-for-profit organisations. We also serve manufacturing and construction businesses protecting intellectual property, and professional services firms managing sensitive client information. This industry focus means we understand your specific compliance requirements and threat landscape. --- # What is a Managed Service Provider? URL: https://mercuryit.com.au/faq/what-is-a-managed-service-provider/ A Managed Service Provider is an IT company that provides services to business customers. Services include: support, consulting, cyber security, project services, advice and guidance. They become the business customer's trusted IT partner utilising skilled staff to provide cost effective and scalable services. Our comprehensive managed IT service includes helpdesk support, proactive network monitoring, and a complete data backup and disaster recovery plan. It also covers vendor management, software patching, and strategic IT consulting to align your technology with your business goals. --- # What is a Managed Services Agreement? URL: https://mercuryit.com.au/faq/what-is-a-managed-services-agreement/ The most effective engagement model is provided through an on-going monthly support agreement. This is called a Managed Service Agreement. Managed Service Agreements are tailored to the client's specific needs including requirements for out of hours, on-site support or to augment existing IT staff. --- # What is a notifiable data breach and what are my obligations? URL: https://mercuryit.com.au/faq/what-is-a-notifiable-data-breach-and-what-are-my-obligations/ Under the Privacy Act 1988, Australian businesses must notify affected individuals and the Office of the Australian Information Commissioner (OAIC) when a data breach is likely to result in serious harm. This includes breaches involving personal information like names combined with financial details, health information, or identity documents. Notification must occur as soon as practicable after becoming aware of the breach. Penalties for serious privacy breaches can reach $50 million, three times the benefit obtained, or 30% of adjusted turnover—whichever is greater. Mercury IT helps businesses assess breach severity, meet notification obligations, and implement improvements to prevent future incidents. --- # What is an IT helpdesk service? URL: https://mercuryit.com.au/faq/what-is-an-it-helpdesk-service/ An IT helpdesk is your team's single point of contact for all technology issues. Our helpdesk provides fast, expert support to resolve daily problems like password resets, software glitches, or connectivity issues. It acts as a dedicated, outsourced extension of your business, ensuring your staff aren't left troubleshooting problems on their own. --- # What is business IT support and how is it different from personal support? URL: https://mercuryit.com.au/faq/what-is-business-it-support-and-how-is-it-different-from-personal-support/ Business IT support is a professional service focused on your entire company's technology, not just one device. Unlike consumer support, it's designed to minimise business downtime and maximise productivity. --- # What is cybersecurity and why is it important for businesses? URL: https://mercuryit.com.au/faq/what-is-cybersecurity-and-why-is-it-important-for-businesses/ Cybersecurity is the practice of protecting your company's networks, devices, and data from digital attacks, data theft, and unauthorised access. Mercury IT is a Gold Coast-headquartered managed security service provider delivering cybersecurity solutions to businesses across Australia, with dedicated focus on South East Queensland, Sydney, Melbourne, and Brisbane. With over 25 years of experience, ISO 27001 and ISO 9001 certifications, and Microsoft Certified Partner status, we help organisations protect customer data, maintain compliance with Australian privacy regulations, and prevent the financial and reputational damage that accompanies a breach. --- # What is 'The Cloud'? URL: https://mercuryit.com.au/faq/what-is-the-cloud/ The 'Cloud' has and continues to be a hot topic of conversation amongst both IT providers and businesses and the term 'Something as a Service' has been overused extensively. The short answer: cloud computing is simply utilising processing and storage systems that are not located within your site. The long answer: cloud computing is complex and includes multiple different offerings and technologies that are designed to achieve a number of outcomes, some of which include: leveraging economies of scale, provide enhanced resiliency, reduce capital costs and provide enhanced scalability. O365 is commonly touted by IT providers as 'The Cloud', O365 is a multi-faceted and comprehensive offering and includes a number of hosted components, for more information on 0365 click here. Cloud computing can be on public cloud infrastructure such as Azure, AWS, Google or private cloud infrastructure through bespoke cloud providers utilising data centres. Some of the most common Cloud offerings include: Infrastructure as a Service (IaaS) - replaces on-premise infrastrucutre (such as servers) with hosted infrastructure. Software as a Service (SaaS) - moves applications from being locally installed to a delivery model utilising (often) a browser based software application. Common examples include O365, Salesforce, Xero etc. Desktop as a Service (DaaS) also sometimes referred to a Virtual Desktop Infrastructure (VDI) - provides a complete desktop experience (similar to your Windows desktop PC) that is cloud hosted, these sessions can be accessed via multiple different devices from anywhere that has a stable and reasonable internet connection Backup as a Service (BaaS) - provides an off-site repository for backup data. BaaS is one of the most important, yet under exposed cloud offerings. Having an off-site, up-to-date backup set in a secure location is one of the best and cheapest insurance policies that a business can have. There are many other cloud services that utilise either full or partial cloud technology. An example of this is cloud managed network infrastructure, where there is a physical device installed onsite, however the management interface is provided via a cloud service, thus providing the best of both worlds At Mercury IT, we understand that one size does not fit all. Cloud computing is absolutely an important component of the technology environment, however, when we work with a client, we ascertain the righttechnology for them. This may be a public and/or a private cloud offering, an on-premise offering or a hybrid arrangement. We build our recommendations around the specific requirements, objectives, security and operational needs of our customers. --- # What is the difference between managed IT services and in-house IT teams? URL: https://mercuryit.com.au/faq/what-is-the-difference-between-managed-it-services-and-in-house-it-teams/ An in-house team consists of direct employees, which can be costly and may have skill gaps. Managed IT services give you on-demand access to an entire team of specialists such as (in cybersecurity, cloud, networking,) for a monthly fee. This is often more cost-effective and provides a much broader range of expertise than a small internal IT team. --- # What is the Notifiable Data Breaches (NDB) scheme? URL: https://mercuryit.com.au/faq/what-is-the-notifiable-data-breaches-ndb-scheme/ The Privacy Amendment (Notifiable Data Breaches) Act 2017, also known as Notifiable Data Breach (NDB) legislation is an amendment to the Privacy Act 1988 that came into effect on February 22, 2018. The legislation is regulated by the Office of the Australian Information Commissioner (OAIC). The NDB scheme requires organisations covered by the Australian Privacy Act 1988 (Privacy Act) to notify any individuals likely to be at risk of serious harm by a data breach. It affects a significant number of businesses including all those who have turned over $3million in revenue since 2001, it captures a number of other businesses regardless of turnover based on a number of different criteria Data breaches that cause serious harm to individuals are reportable In the event of non-compliance, the Office of the Information Commissioner (OAIC) can: Apply for civil penalty orders of up to $420,000 for individuals (such as directors and sole traders) and $2.1million for organisations and; The Commissioner can also make organisations pay compensation for damages and issue a public apology For more information regarding the NDB scheme click here --- # What is the ROI of cybersecurity investment? URL: https://mercuryit.com.au/faq/what-is-the-roi-of-cybersecurity-investment/ Cybersecurity ROI comes from multiple sources: avoided incident costs (averaging $56,600 for small and $97,200 for medium Australian businesses per the ACSC), reduced cyber insurance premiums with proper controls in place, maintained business continuity avoiding costly downtime, and protected reputation preventing customer loss. Additionally, strong security posture is increasingly required to win contracts with government and enterprise clients—the ACSC reports government tenders now commonly mandate Essential Eight compliance. Mercury IT helps businesses quantify their risk exposure and implement controls that deliver measurable return on security investment. --- # What IT solutions do Mercury IT offer for businesses? URL: https://mercuryit.com.au/faq/what-it-solutions-do-mercury-it-offer-for-businesses/ Mercury IT offers a comprehensive suite of IT solutions tailored for businesses across all industries. This includes our core Managed IT Services, Cybersecurity Solutions, Cloud Services (like Microsoft 365 and Azure), IT Project Management, strategic IT Consulting, and hardware/software Procurement. --- # What makes Mercury IT different from other cybersecurity providers? URL: https://mercuryit.com.au/faq/what-makes-mercury-it-different-from-other-cybersecurity-providers/ Mercury IT combines deep technical expertise with practical business understanding. Our consultants translate complex security requirements into clear business terms for executives and boards. We focus on genuine risk reduction rather than compliance checkboxes, implementing controls that actually protect your business. We also work collaboratively—if you have an existing MSP or MSSP, we can add specialist security capabilities or independent assurance without disrupting your current arrangements. As a local Queensland provider serving national clients, we offer responsive, relationship-based service with competitive pricing that makes enterprise security accessible to mid-market businesses. --- # What should I do if my business suffers a cyber attack? URL: https://mercuryit.com.au/faq/what-should-i-do-if-my-business-suffers-a-cyber-attack/ If you suspect a cyber attack, immediately isolate affected systems from the network to prevent spread, do not turn off computers as this may destroy forensic evidence, document everything you observe including times and symptoms, contact your IT security provider or Mercury IT's incident response team, and avoid paying any ransom demands before receiving expert advice. Time is critical—the faster you respond, the more options you have for recovery. Mercury IT provides 24/7 incident response support for managed security clients. --- # What's the difference between an MSP and an MSSP? URL: https://mercuryit.com.au/faq/whats-the-difference-between-an-msp-and-an-mssp/ A Managed Service Provider (MSP) handles general IT operations like helpdesk support, network management, and infrastructure maintenance. A Managed Security Service Provider (MSSP) specialises in cybersecurity—threat monitoring, incident response, vulnerability management, and compliance. Many businesses need both. Mercury IT operates as both MSP and MSSP, providing integrated IT and security services so your technology and protection work as one unified system rather than separate silos with gaps between them. --- # What’s the difference between IT solutions and managed IT services? URL: https://mercuryit.com.au/faq/whats-the-difference-between-it-solutions-and-managed-it-services/ An IT Solution is typically a specific product or a one-time project to solve a business problem (e.g., installing a new firewall or migrating you to the cloud). Managed IT Services is the ongoing, proactive partnership where we take full responsibility for managing, monitoring, and supporting your entire IT environment for a monthly fee. --- # Who is Mercury IT? URL: https://mercuryit.com.au/faq/who-is-mercury-it/ Mercury IT is a Gold Coast-headquartered managed IT and security services provider serving Australian businesses for over two decades. We operate as both an MSP (Managed Service Provider) and MSSP (Managed Security Service Provider), delivering integrated technology and cybersecurity services. With approximately 50 staff, ISO 27001 and ISO 9001 certifications, and Microsoft Certified Partner status, we provide enterprise-grade capabilities to small and medium businesses across Gold Coast, Brisbane, Sydney, and Melbourne. Our security team holds CISSP and CCIE certifications with over 25 years of combined cybersecurity experience, and our assessors have completed the official Essential Eight Assessment Course. --- # Who is the best cybersecurity provider on the Gold Coast? URL: https://mercuryit.com.au/faq/who-is-the-best-cybersecurity-provider-on-the-gold-coast/ Mercury IT is a Gold Coast-based managed security service provider with headquarters serving the Gold Coast region for over two decades. As a local Managed Security Service Provider (MSSP) with deep roots in the Gold Coast business community, we provide same-day on-site response, face-to-face consulting, and ongoing relationships with local businesses. Our team holds CISSP and CCIE certifications, and our organisation maintains ISO 27001 and ISO 9001 certifications. We specialise in protecting professional services, healthcare, and tourism businesses across the Gold Coast region. --- # Who provides cybersecurity services in Queensland? URL: https://mercuryit.com.au/faq/who-provides-cybersecurity-services-in-queensland/ Mercury IT is a Queensland-based managed security service provider headquartered on the Gold Coast. We serve businesses across South East Queensland including Gold Coast, Brisbane, Sunshine Coast, and Toowoomba, as well as regional Queensland businesses through remote-managed security services. As a Microsoft Certified Partner with ISO 27001 certification and CISSP and CCIE certified consultants, we bring enterprise security capabilities to Queensland's small and medium business market. --- # Why is everyone talking about Cyber Security? URL: https://mercuryit.com.au/faq/why-is-everyone-talking-about-cyber-security/ Cyber Security is quite topical for a number of reasons: increased cyber-criminal activity, increased monetisation of stolen data, increased focus on protecting data by governments (such as the Notifiable Data Breach Scheme in Australia and the GPDR in Europe) and large corporations (such as Facebook). Cyber Security is squarely in the spotlight and for good reason, protecting our business and personal information is more important than ever as the consequences for failure are continuing to grow exponentially. Recent studies have shown that 60% of small businesses and 30% of large business never recover from a significant data breach event. --- # Cyber Insights with Mercury IT- August 2026 URL: https://mercuryit.com.au/cyber-insights-august-2026/ Welcome to this month’s edition of Cyber Insights, covering a fake investment platform scam doing the rounds, plus a look at several recent Australian data breaches and why that browser extension you installed years ago might not be as harmless as it seems. Everything you need to stay a step ahead. In this scam, you come across a polished-looking advertisement or social media post promoting an exciting opportunity to invest in shares, cryptocurrency or foreign exchange trading. The website or app looks professional and legitimate, and sometimes even copies the branding of a well-known financial company. After you make contact, whether through the ad itself, a social media message or a direct message, you’re encouraged to set up an account and make a small initial payment to get started. Once you’re in, the platform shows you a dashboard with growing “returns” on your investment. It looks real, so you’re encouraged to invest more money to take advantage of your apparent success. This is the trap. When you try to withdraw your money, you run into problems, excuses, delays, or a demand that you pay extra “fees” before your funds can be released. In many cases, the platform simply disappears, taking your money with it. These scams are dangerous because they often run for weeks or months, slowly building your trust before asking for larger amounts. By the time you realise something is wrong, you may have handed over thousands of dollars, money that is almost never recoverable once it reaches a scammer. Investment scams were the most costly type of scam reported to Scamwatch in early 2026, with Australians losing $45.5 million in just three months. Around half of that came through fake websites, ads, social media and apps like these, and the National Anti-Scam Centre took down 5,834 scam websites in that same period. Follow these tips to avoid falling victim to this scam: Be cautious of any investment opportunity that comes through a social media ad, unsolicited message or online post, especially if it promises high, guaranteed returns. Before investing any money, check whether the company holds an Australian Financial Services Licence by searching the ASIC website. If a platform asks you to pay extra “fees” to withdraw your own money, stop immediately and send no further money. This is a clear sign of a scam. Origin Energy Origin Energy has revealed that an attacker gained access to a shared customer database called Kraken. This system is used by around a third of Australian energy retailers, and Origin holds a stake in the company that runs it. An attacker first contacted the company on 2 July 2026 claiming to have broken in, but Origin initially judged the report not credible. New information on 22 July confirmed a genuine breach had occurred, and Origin told the Australian Securities Exchange (ASX) and its customers on 28 July. Origin believes the attacker may have used the login details of a former employee that had never been switched off. This gave roughly three weeks of undetected access before its security team stepped in, though the company says the exact method is still being investigated. Around 900,000 current and former customers had personal information accessed, including names, addresses, dates of birth, phone numbers and account details. A small amount of partial financial information was also taken, such as the last four digits of a credit card or part of a bank account number. Origin says this information on its own cannot be used to commit fraud. A person claiming responsibility told a journalist that 2 million customer records had been stolen, a figure Origin has not confirmed. Origin has brought in outside security experts, reported the incident to the relevant authorities, and extended its customer support hours. It is contacting affected customers directly, and is urging them to watch for follow-up scam emails or calls. Read more here GO2 Health GO2 Health is a Brisbane medical clinic offering general practice and veteran care services. Its main email inbox was broken into around 24 April 2026, after a staff member was tricked by a fake email designed to look genuine. The clinic noticed the same day and told the Office of the Australian Information Commissioner (OAIC) on 18 May. It took until 16 July, almost three months after the breach, to work out exactly which patients were affected and tell them. The information taken was limited to whatever had been sent to that one email inbox over the previous 12 months. This included some patients’ Department of Veterans’ Affairs ID numbers and other personal details shared by email. GO2 Health says its main patient record systems were not affected, and it has found no evidence the stolen information has been published or misused. The clinic has brought in outside cyber security experts and notified affected patients. It has also reported the incident to the Australian Cyber Security Centre and the OAIC, and is inviting affected patients to contact it directly with any questions. The exact number of patients affected has not been made public. Read more here Key lessons for organisations Switch off user accounts the moment someone leaves your organisation. Origin’s breach shows how a single forgotten account can go unnoticed for weeks. Train staff to spot fake emails designed to trick them. Encourage a habit of double-checking requests before clicking links or replying with sensitive information, as seen in the GO2 Health breach. Keep a close eye on your domain and website settings. CubePilot’s attacker was able to redirect visitors to a fake site while browsers still showed a secure padlock, so familiar security signals are not always enough on their own. Not All Browser Extensions Are Your Friend You installed that handy little extension months, maybe years ago, to check your grammar, block ads, or save coupons at checkout. It has sat quietly in your browser toolbar ever since, and you’ve probably not thought about it since the day you added it. That’s exactly the problem. Security researchers have found that extensions which behaved perfectly normally for years can suddenly turn harmful after a hidden update. This often happens because the developer sold it to someone else, or the developer’s own account was hacked. Once that happens, the extension can read everything you type and capture your passwords and login details. It can also quietly send your browsing activity to a cybercriminal, all without any obvious warning sign on your screen. Because extensions run inside your browser with broad permissions, they can be one of the easiest ways for an attacker to get into your accounts and your organisation’s systems. Follow the tips below to keep your browser extensions from becoming a security risk: Open your browser’s extensions menu (in Chrome, Edge or Firefox this is usually under Settings, then Extensions) and review every extension installed. If you don’t recognise it or no longer use it, remove it. Only install extensions from official browser stores, and check the publisher name, review score and number of users before adding anything new. Avoid granting an extension permission to “read and change all your data on websites you visit” unless you genuinely need that level of access for the tool to work. Turn on automatic updates for your browser itself, and periodically recheck your extension list, since a trusted extension can turn harmful after an update you never noticed. If you use work accounts, such as email, HR systems or business banking, in the same browser as your personal browsing, consider keeping a separate browser profile. Use this extension-free profile just for sensitive logins. If you notice unexpected pop-ups, your homepage or search engine changing on its own, or unfamiliar login alerts, remove suspicious extensions immediately and change your passwords. If you would like to discuss your cybersecurity needs, book a complimentary consultation here How do investment scams on social media actually work? Scammers post polished ads or messages promoting shares, crypto or forex trading. Once you sign up and make a small payment, a dashboard shows fake returns to encourage you to invest more. When you try to withdraw, you hit delays, extra "fees" or the platform disappears altogether with your money. How can I check if an investment opportunity is legitimate? Search the ASIC website to see whether the company holds an Australian Financial Services Licence. Be wary of unsolicited offers through social media or online ads, especially ones promising high, guaranteed returns. If you're ever asked to pay a fee to withdraw your own money, that's a clear sign of a scam. What caused the Origin Energy data breach? An attacker is believed to have used login details belonging to a former employee that were never deactivated. This gave around three weeks of undetected access to a shared customer database before Origin's security team stepped in. Roughly 900,000 current and former customers had personal information accessed. What is DNS hijacking, and how did it affect CubePilot? DNS hijacking is when an attacker takes control of the settings that direct visitors to a website. In CubePilot's case, this let the attacker redirect users to a fake version of its site using fraudulent security certificates, so browsers still showed the normal "secure" padlock. This made the attack hard for users to spot. Why should businesses regularly review their browser extensions? An extension that's safe today can turn harmful after a hidden update, often because it's been sold to a new owner or the developer's account was hacked. Once compromised, it can read what you type and send your browsing activity to an attacker. Regularly checking your extensions and removing ones you don't use or recognise reduces this risk. --- # Tech Insights | Privacy Act Changes You Can't Ignore URL: https://mercuryit.com.au/privacy-act-changes-you-cant-ignore/ Privacy risk is no longer just a "big business" problem. Alisha sits down with Chris Haigh to unpack the Australian Privacy Act changes pulling thousands of small and medium businesses into scope including reforms linked to anti-money laundering changes, and the growing expectation that every organisation knows exactly what personal data it holds and why. We also cover what's coming around children's privacy protections and automated decision-making — and why the simplest first step is updating your privacy policy to reflect what you actually do, since regulators are now auditing policy against practice. From there, we get tactical: the first hour after a breach, why panic causes expensive delays, and how tabletop exercises expose gaps before a real incident hits. We also look at why cyber insurance only helps if your declared security measures are genuinely in place, plus supply chain risk — the due diligence questions to ask suppliers, and what security certifications like ISO 27001 and SOC 2 actually tell you. If you found this useful, subscribe, share it with a business owner who needs it, and leave us a review. Listen to the full episode on Apple, Spotify and YouTube. --- # Cyber Insights with Mercury IT- July 2026 URL: https://mercuryit.com.au/cyber-insights-july-2026/ Welcome to this month's edition of Cyber Insights. In this issue, we revisit the ATO scam doing the rounds this tax time, plus a look at recent data breaches and staying safe on public Wi-Fi while you travel. In this scam, you receive an email, text message or phone call that appears to come from the Australian Taxation Office (ATO) or myGov. With tax time in full swing, scammers are ramping up fake messages. These messages might warn you of an overdue payment, offer a tax refund waiting to be claimed, or claim there is an urgent need to “verify your identity”. Some of these fake emails even include screenshots of the myGovID app to make them look genuine. The message pressures you to act quickly, which is exactly the point. If you click the link, you are taken to a convincing fake myGov login page that asks for your personal information and banking details. Two of the biggest warning signs are a link that asks you to sign in to your myGov account, and sender details that don’t quite match a real government agency. Genuine government email addresses always end in .gov.au, and the ATO has confirmed it will never send an email or text message with a link to a login page. This scam is dangerous because your myGov and ATO login details unlock several linked government services at once, including Medicare, Centrelink and your tax records. Once scammers have this access, they can steal your identity, redirect your tax refund, or use your details for further fraud. Follow these tips to avoid falling victim to this scam: Don’t rush. Never click links in unexpected tax or myGov messages, and never share passwords, one-time codes or banking details by email or text. Check any message by contacting the ATO directly on 1800 008 540, or by logging in through the official app or ato.gov.au, not through a link in the message. If you have already shared your information, contact the ATO immediately on 1800 008 540. ALS Global ALS Global is a testing, inspection and laboratory services provider listed on the Australian Securities Exchange (ASX). The company disclosed a cyber incident to the ASX on 11 June 2026, after identifying the attack in May. ALS Global described it as “temporary disruption to parts of the group’s operations.” The Aur0ra group, a gang that uses ransomware (software that locks your files until you pay to get them back) and was first observed in April 2026, claimed responsibility. It published allegedly stolen data on its dark web leak site (a hidden part of the internet often used by criminals to sell stolen data) on 19 June 2026. The leaked data reportedly includes administrator passwords, a password manager emergency kit, banking details, salary documents and certificate files, along with the home directories of up to 500 employees. These directories are said to contain cached login details, personal information, passport scans, bank account details, payroll information and workplace injury records. Client laboratory results and internal research may also have been affected. ALS Global has engaged cybersecurity experts, strengthened its controls, increased monitoring, and notified the Australian Cyber Security Centre and regulators. Read more here Melbourne International Film Festival (via Ferve Ticketing) Attackers gained unauthorised access to the Melbourne International Film Festival’s (MIFF) third-party ticketing platform, run by Ferve (Vallez Pty Ltd). Initial access was identified on 29 May 2026, with further access identified the following day. Some customers then received unusual, unauthorised emails and text messages sent through the hacked system. This prompted MIFF to confirm the impact publicly on 1 June and take the ticketing system offline while it secured the platform. MIFF confirmed that 26,782 customer records were affected, including names, email addresses, phone numbers and customer ID numbers. The attacker behind the breach also claimed that residential addresses had been taken, though MIFF has not confirmed this as part of the impacted data. No payment card details or account passwords were exposed. MIFF mobilised an incident response team and notified the Australian Cyber Security Centre. Read more here Heading off for the winter school holidays or a work trip? Before you connect to the free Wi-Fi at the airport lounge, your hotel or the local cafe, it pays to stop and think. Public Wi-Fi networks are convenient, but they are often unsecured. This means anyone else on the same network, including a scammer sitting a few tables away, may be able to see what you are doing online. Cybercriminals also set up fake networks with names like “Free Airport Wi-Fi” to trick travellers into connecting. This gives them a direct line to your login details, emails and banking apps. You don’t need to avoid public Wi-Fi altogether. You just need a few simple habits to stay safe while you’re away from your usual home or office network. Staying Safe on Public Wi-Fi While You Travel Follow the tips below to protect your information while travelling: Confirm the exact network name with staff before connecting. Scammers often set up lookalike networks such as “Hotel_Guest_WiFi”, hoping you’ll connect to theirs instead. Avoid logging into your bank, checking your email or entering passwords while on public Wi-Fi. Use your phone’s mobile data for anything sensitive, or wait until you’re back on a trusted network. Turn off automatic Wi-Fi and Bluetooth connection on your phone and laptop before you travel, so your device doesn’t join unknown networks without you knowing. Turn on two-factor authentication (an extra security code sent to your phone or app) for your email, banking and cloud storage accounts. This means a stolen password alone isn’t enough to get in. Log out of accounts and forget the Wi-Fi network on your device once you’ve finished, rather than staying connected in the background. If you would like to discuss your cybersecurity needs, book a complimentary consultation here How do I know if a text or email from the ATO or myGov is a scam? Genuine government agencies only use email addresses ending in .gov.au, and the ATO has confirmed it will never send an email or text with a link to a login page. If a message pressures you to act urgently, asks you to "verify your identity," or includes a login link, treat it as a scam. Always check your ATO or myGov account by typing the address directly into your browser or using the official app, not by clicking a link in a message. What should I do if I've clicked a fake ATO or myGov link? Contact the ATO immediately on 1800 008 540 if you've entered your details on a suspicious page or shared a password, one-time code, or banking information. Acting quickly gives you the best chance of limiting the damage, since myGov and ATO logins can unlock several linked services at once, including Medicare and Centrelink. Are data breaches always caused by hackers? No. Not every breach involves a sophisticated attack. This month's confirmed cases show that simple administrative errors, such as accidentally exposed login credentials, can expose just as much sensitive information as a targeted cyberattack. It's a reminder that basic access controls and configuration checks matter just as much as defending against outside threats. Is it safe to use free Wi-Fi at airports, hotels or cafes? Public Wi-Fi is convenient but often unsecured, meaning others on the same network could potentially see your activity. Scammers also set up fake networks with genuine-sounding names to trick people into connecting. It's safest to confirm the exact network name with staff, avoid logging into banking or email while connected, and use mobile data for anything sensitive instead. What's the single best way to protect my accounts while travelling? Turn on two-factor authentication (2FA) for your email, banking and cloud storage accounts before you go. This means that even if a password is stolen over public Wi-Fi or through a scam, it isn't enough on its own for someone to get in. --- # Tech Insights | Passwords, MFA, and Passkeys URL: https://mercuryit.com.au/passwords-mfa-and-passkeys/ Most of us have been managing passwords for decades, and most of us are still getting it wrong. In this episode, Alisha Christian sits down with Mercury IT's cybersecurity expert Chris to cut through the noise on one of the most overlooked areas of business security. They cover why password length now matters more than complexity, why your browser is the worst place to store credentials, and how to choose a password manager that actually works for your team. Chris also explains how MFA can be bypassed, including the real attack methods that have caught businesses off guard, and what phishing-resistant MFA like passkeys and hardware security keys looks like in practice. Whether you're a sole trader or managing a team of fifty, this episode is worth your time. Listen to the full episode on Apple, Spotify and YouTube. --- # Cyber Insights with Mercury IT- May 2026 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-may-2026/ Welcome to this month’s edition of Cyber Insights! In this issue, we cover the latest Microsoft Teams scam, recent data breaches, and practical tips to help protect yourself against AI voice scams. In this scam, you receive an unexpected invitation to join a Microsoft Teams group. The group name reads like an urgent billing alert, suggesting something like a large subscription charge has just been processed or that a payment issue requires your immediate attention. Because the invitation is sent through Microsoft's own systems, the notification that lands in your inbox comes from a legitimate Microsoft email address. Many corporate email security filters will not flag it. When you open the invitation and see the alarming message, you also see a phone number to call. If you panic and dial that number, you reach a scammer posing as a billing support agent. They use pressure tactics to convince you to make a payment or, in more serious cases, to let them take remote control of your computer using a legitimate tool such as Quick Assist. Once they have that access, they can move through your organisation's systems, copy sensitive data, and install harmful software, including software that locks your files until you pay a ransom. This scam works so well in workplaces because Microsoft Teams feels like a trusted internal channel. Most people apply scepticism to suspicious emails, but an unexpected alert appearing inside a familiar workplace tool tends to bypass that caution. The urgency built into the message name does the rest of the work for the scammer. For businesses, the risks go beyond a single fraudulent payment. Remote access to a company's systems can lead to the theft of sensitive business and customer data, attacks that cripple operations, or a long-term presence that scammers use for future attacks. Follow these tips to avoid falling victim to this scam: Be suspicious of any unexpected Teams invitation from an external person, particularly one with an urgent or financial message in the group name. Treat it with the same scepticism you would apply to a suspicious email. Never call a phone number found in a Teams message from an unknown sender. If you have a genuine concern about a billing issue, contact your IT team or your software vendor directly using official contact details you already have. Never allow anyone to take remote control of your computer in response to an unsolicited contact, even if the request appears to come through a familiar or trusted platform. Report unexpected external Teams contacts to your IT or security team before taking any action. NSW Treasury On 19 April 2026, internal security monitoring at NSW Treasury detected a suspected large-scale transfer of government documents to an external server. This was not an external hack but an alleged insider theft, where a person inside the organisation misused their access to steal data. A 45-year-old staff member from Treasury's commercial team was arrested at his home in Homebush West, Sydney, after allegedly accessing and transferring more than 5,600 sensitive government documents. NSW Police established Strike Force Civic to investigate the matter. The stolen material spanned multiple NSW Government departments and projects, covering confidential commercial and financial information tied to current and previous government negotiations with the private sector. Police have indicated that all allegedly stolen data has since been located and secured. There is no evidence of any external compromise to NSW Treasury systems, and no impact on the delivery of government services. Read more here Instructure (Canvas Learning Platform) On 30 April 2026, Instructure detected unauthorised access to its Canvas learning platform by threat group ShinyHunters. The attackers claim to have exfiltrated data from approximately 9,000 institutions and up to 275 million users globally, with multiple Australian institutions confirmed affected, including Queensland state schools, UTS, the University of Melbourne, RMIT, and others. On 7 May, attackers escalated by defacing Canvas login pages with a ransom demand. Exposed data for Queensland students and staff enrolled since 2020 includes names, email addresses, school locations, and private messages. Instructure has stated there is no current evidence that passwords, financial information, or government identifiers were accessed. This ranks as one of the most significant breaches of an education platform in recent years. Read more here Key lessons for organisations Staff with legitimate access can pose as serious a risk as outside attackers. Monitoring for unusual data transfers, limiting access to sensitive documents based on role, and having a clear process for investigating suspected misuse are essential controls. Supply chain attacks, where criminals target your partners or suppliers to reach you indirectly, are increasingly common. Verify the security practices of any third party that handles your customer data. Small and community organisations hold sensitive data too, and criminal extortion groups know it. Having regular backups, a basic incident response plan, and cyber security support available before an incident occurs can make the difference between recovery and permanent loss. Imagine you get a frantic phone call from your child, a close friend, or a colleague. They are in trouble, they need money urgently, and they sound exactly like themselves. But what if it was not them at all? Scammers are now using artificial intelligence to clone real voices from short audio clips found on social media, voicemails, or online videos. They then use those cloned voices to call family members, colleagues, or employees and demand money or sensitive information. These calls are frighteningly convincing. Research published by Commonwealth Bank in January 2026 found that while 89% of Australians believe they can spot an AI-generated scam, they correctly identified AI-generated content only 42% of the time. Knowing what to look for, and having a simple plan ready, can stop a scam before any damage is done. How to Protect Yourself from AI Voice Scams Follow the tips below to protect yourself and your family from AI voice scams: Agree on a safe word with people you trust. Pick a word or phrase that only you and your close contacts know. If someone calls claiming to be a family member or colleague in an emergency, ask for the safe word before you take any action. Hang up and call back on a number you already have. If you receive an unexpected urgent call, end it and dial the person back using a number saved in your phone or on their business card. Do not use a number the caller gives you. Be suspicious of any call that demands fast action. Scammers rely on panic to cloud your judgement. If a caller pressures you to transfer money, share a code, or act immediately, treat that urgency as a warning sign, not a reason to rush. Limit the voice and video content you share publicly. AI voice cloning needs only a few seconds of clear audio. Review your social media privacy settings and consider whether your public video posts give scammers enough material to work with. Report it to Scamwatch. If you receive a suspicious call or have fallen victim to one, report it at scamwatch.gov.au. Your report helps warn other Australians and contributes to national scam intelligence. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Tech Insights | Dial-Up Modems and Big Dreams URL: https://mercuryit.com.au/dial-up-modems-and-big-dreams/ Before the team of 50, before two ISO certifications, before two decades of client relationships — there were just two young guys in IT who believed they could do things better. And they had the courage to actually try. In this episode, host Alisha Christian sits down with Mercury IT co-founder AJ to hear the story behind the company. AJ was 27 when he and business partner Luke, just 21 at the time, left the security of stable jobs and built something from scratch. It was a bold call at any age, let alone in their twenties. No safety net, no big client list — just a genuine belief that small businesses deserved better IT support than they were getting. We go back to the early days: dial-up modems, on-site visits for every little issue, and paper job ticket books that tracked every call by hand. AJ talks about the mentors who guided them, the early clients who took a chance on two young operators, and the win that changed everything. But the conversation isn't just about milestones. It's about the culture AJ and Luke built from day one — one where people come first, where staff have stayed for nearly 20 years, and where the founding belief still holds: good IT isn't really about technology. It's about service, trust, and showing up for the people who count on you. A genuine story about backing yourself, building something that lasts, and never losing sight of why you started. Listen to the full episode on Apple, Spotify and YouTube. --- # Most Cyber Attacks Target People, Not Systems URL: https://mercuryit.com.au/blog-security-awareness-training/ Most Cyber Attacks Don't Hack Your Systems. They Trick Your People. When most business owners think about cyber security, they picture hackers typing furiously at a screen, probing firewalls and cracking passwords. The reality is far less dramatic — and far more dangerous. The vast majority of successful attacks don't start with sophisticated technology. They start with a convincing email, a well-timed phone call, or a moment of distraction on a busy Tuesday afternoon. The Weakest Link Isn't Your Software — It's Human Nature Picture this. Your accounts payable person gets an email from what looks like your regular supplier. The logo is right, the tone is familiar, and the message is simple: "We've updated our bank account details, please use these for your next payment." She's processed dozens of invoices this week. She updates the details and moves on. Two weeks later, you find out the email wasn't from your supplier at all. This is Business Email Compromise — one of the most common and costly attacks targeting Australian businesses right now. No malware. No hacking. Just a carefully crafted message designed to look routine. The same principle applies to fake IT support calls, where someone rings a staff member claiming to be from your software vendor and asks them to "verify their login details." Or the Microsoft 365 sign-in page that looks completely legitimate but captures every credential entered into it. These attacks work because they're built around human behaviour — trust, busyness, a desire to be helpful, and the fact that most of us are processing dozens of requests a day. Your firewall can't defend against a staff member who genuinely believes they're doing the right thing. What a Single Mistake Can Actually Cost Your Business The immediate instinct is to think about money and yes, fraudulent transfers and ransomware payments are real outcomes. But the full cost of a breach goes well beyond the bank account. Think about the operational disruption. If ransomware locks your systems, how long can your business actually function? For most organisations, even a day of downtime means missed deadlines, frustrated clients, and a team that can't do their jobs. Then there's the question of client trust. If client data is exposed — contact details, financial records, sensitive correspondence — you have an obligation to tell them. That conversation is uncomfortable at best. At worst, it ends relationships you've spent years building. Under Australia's Privacy Act and the Notifiable Data Breaches scheme, organisations that hold personal information may be legally required to notify affected individuals and the OAIC when a breach occurs. Demonstrating that you took reasonable precautions — including ongoing security awareness training for staff — can affect how regulators view your response. What Security Awareness Training Actually Looks Like Here's what it isn't: a 45-minute induction video that staff click through during their first week and never think about again. Effective security awareness training is short, regular, and practical. Think five-minute modules delivered monthly — this week, how to spot a phishing email; next month, why MFA matters; the month after, what to do if something looks wrong. A well-run program typically includes: Phishing awareness training — simulated test emails that redirect anyone who clicks to a brief learning moment, not a reprimand Micro-lessons on real, current threats Incident debriefs when near-misses happen A clear escalation path so every staff member knows exactly who to call when something feels off Good cyber security training for staff doesn't require your team to become IT experts. It just requires them to recognise the most common warning signs and know what to do next. It's Not About Blame — It's About Building Good Habits If your team believes that clicking the wrong link means a reprimand or a story repeated around the office, they will not report it. They'll close the tab, hope for the best, and say nothing. That silence is where breaches become disasters. A no-blame approach doesn't mean there are no standards. It means the culture actively encourages people to speak up, ask questions, and flag concerns without fear. A staff member who raises their hand the moment something seems wrong gives your team time to respond. One who waits three days gives attackers three days of undetected access. Essential Eight Compliance and Security Awareness Training If your business is working towards — or required to meet — the Australian Signals Directorate's Essential Eight framework, security awareness training isn't a nice-to-have. It's a core component of a mature security posture. The Essential Eight is the ASD's baseline set of mitigation strategies for Australian organisations. While several of the eight strategies are technical controls (patching, application control, MFA), they all depend on people applying them correctly. A staff member who shares credentials, disables MFA because it's inconvenient, or clicks a malicious attachment can undermine even the most carefully configured technical controls. Essential Eight Maturity Level 1 requires that staff are aware of cyber threats relevant to their role. Documented, ongoing training is the most straightforward way to demonstrate this. Maturity Level 2 requires that security awareness training is delivered and records are kept. Ad hoc awareness isn't sufficient — you need a structured program with evidence. The Notifiable Data Breaches scheme runs alongside Essential Eight obligations. If a breach does occur, the OAIC will consider whether reasonable steps were taken to prevent it. A documented training program matters here. Mercury IT helps Australian businesses implement security awareness training programs that align with Essential Eight requirements — with the documentation and reporting to back it up. The Compliance Angle If you operate within a framework like the Essential Eight or ISO 27001, documented and ongoing security awareness training isn't optional — it's a requirement at Maturity Level 2 and above. For businesses that hold personal data, the Notifiable Data Breaches scheme adds another layer of responsibility. If a breach occurs, one of the questions you'll face is what reasonable steps you had in place to prevent it. A documented, ongoing security awareness training program is a concrete answer to that question. Ready to Strengthen Your Team's Defences? Your people are already your greatest asset. With the right support, they can also be one of your strongest lines of defence. Mercury IT works with Australian businesses to build practical, people-first security awareness training programmes — designed for real workplaces, not IT departments. Whether you're starting from scratch or looking to make your existing cyber security training for staff more effective, we'd love to have a conversation. Reach out to us to learn more. --- # Disinformation Is Now a Cyber Threat — Here's what you need to know URL: https://mercuryit.com.au/disinformation-cyber-attacks/ What is the Difference Between Misinformation and Disinformation? Misinformation is false or inaccurate information shared without any intent to deceive — the person spreading it genuinely believes it is true. Disinformation is false information created and distributed deliberately, with the specific intent to mislead, confuse, manipulate, or profit. The difference is not the content — it is the intent behind it. Why Both Are a Problem for Australian Businesses In Australia, the volume of false information circulating online is rising. Social media algorithms are built to amplify content that generates strong reactions, which means sensational or alarming claims spread faster than corrections. People skim rather than read deeply, and they share before they verify. Even traditional media contributes to the problem by repeating what is already trending online — often before claims have been checked. The result is a public that is increasingly uncertain about what to trust, and that uncertainty is exactly what cybercriminals exploit. For your business, this is not just a social issue. It is a practical security risk, and it is growing. How Disinformation Amplifies Phishing and Social Engineering Phishing attacks in Australia are not always blunt instruments. Sophisticated attackers do not just send a suspicious email and hope for the best. They build context first — using disinformation to make a later attack feel believable. Here is a straightforward example: a cybercriminal spreads a rumour that a major software vendor is pushing an urgent security patch. They seed it through social media posts, tech forums, and fake news articles. A few days later, your staff receive an email telling them to install that patch immediately. Because they have already heard about the "issue", they are far less likely to question the email — and far more likely to click, download, or enter their credentials. This is social engineering at its most effective. The technical payload is almost secondary. The real work happens in priming the target to lower their guard. What Is "Phishing 2.0" and Why Does It Work? "Phishing 2.0" is the term used to describe this layered approach — combining social proof, urgency, and a believable backstory to make a phishing message feel legitimate. It works because it exploits how humans naturally process information: when something fits a story we already believe, we stop questioning it. Even a small improvement in click rates — a few percentage points — can turn a low-yield campaign into a serious breach. Business email compromise is one of the most financially damaging forms of cyber-crime in Australia, and disinformation is increasingly part of how it begins. Cyber awareness training that teaches staff to recognise these patterns is one of the strongest defences a business can build. How AI Is Making Disinformation-Driven Attacks More Dangerous AI has not created this problem, but it has made it significantly worse. What once took time, skill, and resources can now be done cheaply, quickly, and at scale. AI-generated content — summaries, articles, social posts — can confidently repeat misinformation sourced elsewhere. Search engines increasingly surface AI-generated answers rather than linking directly to original sources, and many people treat that output as authoritative. If the underlying source is wrong or manipulated, the AI output will be too, and it will appear polished and credible. Cybercriminals are also buying search advertisements, so their fake or malicious sites appear at the top of results for common searches — "WhatsApp desktop download", for example. A lookalike page captures login credentials before the user realises anything is wrong. Deepfakes, Fake Search Results, and CEO Fraud Deepfake technology raises the stakes considerably for Australian businesses. It is now possible to generate a convincing video or audio clip of a CEO, CFO, or other executive — announcing a merger, confirming a transfer, or issuing an "urgent confidential" instruction. The cost and technical skill required to do this has dropped dramatically. CEO fraud in Australia is a recognised and growing threat. A finance team that receives a video message from what appears to be their CEO, followed by a confirming email, is operating under a very different risk profile than one relying on text alone. Deepfakes remove one of the most instinctive checks staff have historically used: recognising a familiar voice or face. The combination of fake search results, AI-generated content, and deepfake media means that digital content can no longer be taken at face value. Your business processes need to account for that. How to Protect Your Business from Disinformation-Enabled Attacks The most effective defence is not a single security product. It is a combination of practical habits, clear processes, and a culture of healthy scepticism — applied consistently across your team. Out-of-Band Verification and Zero Trust Principles Out-of-band verification means confirming a request through a completely separate channel from the one it arrived on. If a supplier emails to advise new bank details, you call them — not on a number provided in the email, but on a number you already have on record or can independently verify. The request and the verification never travel through the same channel. This aligns directly with zero trust security principles: do not automatically trust a message, identity, or device simply because it looks familiar. Verify, regardless of how legitimate it appears. The higher the value or risk of an action, the more rigorous the verification should be. For high-risk transactions — fund transfers, credential resets, vendor changes — a two-person authorisation rule adds another layer of protection that is difficult for an attacker to circumvent. The Role of Remote Work in Increasing Exposure Remote and hybrid work arrangements have removed many of the informal checks that used to exist in offices. A quick desk-side conversation — "did you really send this?" —is no longer the default. Teams working across different locations need deliberate verification steps built into their processes, not just assumed. Multi-factor authentication (MFA) is important and should be in place, but it cannot stop a staff member who has already been convinced that an action is legitimate. Human manipulation requires a human-centred response: clear escalation procedures and a team culture where questioning requests is encouraged, not penalised. Cyber security for small business often underestimates this layer of risk. The technology matters, but the people and processes around it matter just as much. Why Cyber Awareness Training Is Your Most Important Defence Technology controls can be bypassed. Policies can be ignored under pressure. But a team that genuinely understands how these attacks work — and why they work — is far harder to compromise. Effective cyber awareness training does not happen once a year. It works best as regular, practical nudges: short examples, real scenarios, current threats. Show staff how quickly an AI can generate a convincing fake. Walk through what a phishing 2.0 campaign looks like from start to finish. Make the threat concrete and familiar, not abstract and distant. Education needs to extend beyond the office too. Staff who consume news primarily through social media feeds are more likely to encounter and share disinformation without recognising it — and more likely to be primed for a later attack that references it. Digital literacy is a genuine business risk, and awareness programs that treat it seriously make a measurable difference. Building long-term resilience against social engineering attacks means investing in your people, not just your systems How to Verify a Suspicious Message or Request When something feels off — or even when it does not — follow these steps before acting: Pause. Do not act on urgency alone. Urgency combined with secrecy is a significant red flag. Legitimate requests can withstand a short delay. Check the source independently. Do not use contact details provided in the message itself. Look the sender up through a channel you already trust — your own records, the organisation's official website, or a number you have used before. Call the sender on a known number. A direct phone call to a verified contact is the simplest and most effective verification step available. Do not reply to the original message to ask whether it is real. Escalate for high-value requests. Any request involving a financial transaction, credential change, or vendor detail update should require sign-off from a second person, regardless of how confident the first person feels. Report the message regardless of outcome. Whether you acted on it or not, report suspicious messages to your IT team or security provider. Patterns across a team often reveal an active attack campaign that no single person would spot alone. Talk to Mercury IT About Protecting Your Business If you are unsure whether your team would recognise a disinformation-enabled attack, that is worth exploring. Mercury IT's cybersecurity team works with Australian businesses to assess real-world risk, build practical defences, and deliver awareness training that actually sticks. We are not here to alarm you — we are here to help you make informed decisions about your security. If you would like to have a straightforward conversation about where your business stands, we would be glad to help. --- # Tech Insights | Phishing 2.0 URL: https://mercuryit.com.au/phishing-2-0-when-misinformation-becomes-a-cyber-weapon/ A single believable story can do more damage than a thousand dodgy emails. We sit down to untangle misinformation vs disinformation and why that difference matters when you’re trying to protect people, money and reputation. From clickbait headlines to “credible” reposts, we talk about how false information spreads across digital platforms in Australia, and why even well-meaning sharing can create real harm. Then we get practical about cyber security. Think “phishing 2.0”: attackers soften the target with rumours, social proof and urgency, so the later link or attachment feels safe. We walk through scenarios like fake merger news, “highly confidential” PDFs that deliver malware, and the very real risk of deepfake video or audio being used to pressure finance teams into making transfers. We also dig into everyday traps like paid search ads that sit at the top of Google, QR codes that hand over account access, and AI-generated summaries that confidently repeat the same misinformation you were trying to fact-check. The big takeaway is behavioural and process-driven: don’t trust by default, verify by design. We share clear steps like out-of-band confirmation, risk-based checks, and building a culture of healthy scepticism without turning work into a paranoia fest. Tune in on Apple, Spotify, or YouTube --- # The Real Risk of AI Isn’t Automation — It’s Authenticity URL: https://mercuryit.com.au/the-real-risk-of-ai-isnt-automation-its-authenticity/ AI has changed the look and feel of cyber risk—not by inventing new crimes, but by making old ones painfully believable. Phishing emails no longer give themselves away with bad grammar. They read like your accountant wrote them—because sometimes your accountant did, after their mailbox was compromised. The result is more successful credential theft and account takeovers that feel legitimate from the very first click. That realism now stretches across channels. Messages arrive in Teams or Slack that appear to come from a colleague or supplier when defaults aren’t locked down, and the cross‑channel “echo” builds false confidence. When urgency, authority and money enter the thread, people move fast and skip checks. Deepfake mimicry pushes that believability even further. With a single headshot from a team page and a few seconds of audio scraped from a public interview, it’s now possible to synthesise a convincing video or voicemail from a CFO. Tools that once fumbled hands and lip‑sync can generate full‑body motion from a reference clip and switch languages while keeping the same voice. These capabilities have clear upside for training and localisation. But they also dramatically lower the cost for threat actors to stage persuasive fraud. The right defence starts with doubt: pause when a request is new, rushed or secretive, and verify through a separate, trusted channel that you initiate. Even small choices—like posting only low‑resolution staff photos—can raise the bar against cloning attempts without killing team pages. Culture either amplifies or dampens risk. In organisations where no one questions leadership, a spoofed “approve this payment now” message is genuinely dangerous. Healthy friction helps. Celebrate verification; don’t punish it. Formalise that mindset with zero‑trust principles: verify the user, the device and the context before granting access. Extend phishing awareness beyond email to every workplace channel. Expect pretexting built from your public footprint—LinkedIn activity, conference mentions, website phone numbers. Attackers layer familiarity, then switch mediums to cement trust. Anticipate that pattern and slow it down with policy and process, such as mandatory callbacks to known numbers and dual approval for sensitive actions. Adopting AI safely is as important as defending against it. An AI readiness assessment can surface gaps you didn’t know you had: shadow use of free tools, missing guidance on customer data, or unclear ownership of model outputs. Policies must live in practice; an unenforced rule is theatre. Choose vendors who can clearly explain how they isolate, retain and secure uploaded data. Ask direct questions about encryption, training data reuse and regional storage. Train teams quarterly using fresh, local examples—including voicemail deepfakes and internal chat lures. People want to help and move quickly. Give them simple, repeatable checks so that instinct doesn’t leak credentials or cash. AI is a force multiplier on both sides—pair curiosity with caution, and you gain leverage without handing it to an attacker. Adopting AI safely takes more than policy. Want to learn more? Get your AI Readiness Starter Pack here and understand where AI is already impacting your business — and where controls need to catch up. --- # Tech Insights | AI’s New Tricks, Old Scams URL: https://mercuryit.com.au/ais-new-tricks-old-scams/ AI has removed the obvious tells from fraud. Perfect phishing emails, realistic internal messages, and even voice clones of executives are now easy and affordable for attackers. In this episode, we break down how AI is scaling familiar scams—from supplier account takeovers to deepfakes built from public photos and audio. More importantly, we share practical defences you can apply today: tightening collaboration tools, verifying unusual requests, adding healthy friction to financial actions, and building a culture where questioning urgency is encouraged. We also cover how to adopt AI safely—setting clear policies, assessing readiness, and holding vendors accountable for data protection. AI is a force multiplier on both sides. Learn how to use it to your advantage—without handing attackers the keys. Tune in on Apple, Spotify, or YouTube --- # Cyber Insights with Mercury IT- February 2026 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-february-2026/ Welcome to this month’s edition of Cyber Insights! In this issue, we cover the latest myGov and ATO phishing scams, examine recent data breaches, and outline simple steps to reduce the risk of AI‑driven cyber threats. Latest Scams You receive an email or text message that appears to be from myGov or the Australian Taxation Office (ATO). The message claims your taxable income has been recalculated and you are owed a refund, or that there is an issue with your account that needs urgent attention. It includes a link for you to click so you can log in and resolve the issue. However, the message is actually a phishing scam. The link takes you to a fake myGov sign-in page that looks almost identical to the real one. If you enter your login details, cybercriminals will steal them and use them to access your real myGov account. Once inside, they can lodge fraudulent tax returns in your name and change your bank details so that any refunds or government payments are redirected to their accounts. These scams are extremely common right now. The ATO reports that fake myGov emails account for roughly 75% of all email scams reported to them over the past six months. Scammers are also using AI tools to make their messages more convincing, with fewer spelling mistakes and more realistic-looking layouts. Some victims have reported receiving phone calls from scammers pretending to be ATO officers, pressuring them to share personal details or make payments immediately. Follow these tips to avoid falling victim to this scam: Never click links in emails or text messages claiming to be from the ATO or myGov. Instead, open a new browser window and go directly to my.gov.au to log in. Remember that the ATO will never send you an unsolicited message asking you to share personal information, passwords, or bank details by email or text. If you receive a suspicious message, report it to the ATO by forwarding the email to ReportEmailFraud@ato.gov.au or by calling the ATO scam hotline on 1800 008 540. Latest Breaches Nissan Motor Corporation Incident Overview: On 10 January 2026, the Everest ransomware group claimed it had broken into Nissan’s internal systems and stolen approximately 900GB of data. The group posted samples of the stolen files on a dark web leak site and gave Nissan five days to respond before threatening to publish the full dataset. This is not Nissan’s first breach. In 2024, a separate ransomware attack affected 100,000 customers in Australia and New Zealand, and in December 2025, another incident exposed the details of 21,000 customers. Impact Analysis: The stolen data reportedly includes dealership records, employee information, internal business documents, and confidential program files. While Nissan has not publicly confirmed the full extent of the breach, the exposure of dealer and employee information creates risks of identity theft and targeted phishing for those affected. For Australian Nissan customers, the repeated breaches highlight the ongoing risk that personal data shared with large organisations can be accessed by cybercriminals. Read more here Victorian Department of Education Incident Overview: On 14 January 2026, the Victorian Department of Education confirmed that an unauthorised third party had breached a school’s network and gained access to a department database. The attack impacted all 1,700 Victorian government schools, affecting hundreds of thousands of current and former students. The department temporarily disabled systems to prevent further access and reset all student passwords as a precaution, just weeks before the start of the 2026 school year. Impact Analysis: The accessed data included student names, school-issued email addresses, encrypted passwords, school names, and year levels. More sensitive information such as dates of birth, home addresses, and phone numbers were not compromised. While there was no evidence that the data had been publicly released, the exposure of student email addresses creates a significant risk of targeted phishing attacks aimed at young people and their families. Read more here Could you tell the difference between a real video call with your boss, and one created by artificial intelligence? AI-powered deepfake technology is making it harder than ever to trust what you see and hear online. Cybercriminals are now using AI to create realistic fake videos, voice recordings, and even live video calls to trick people into transferring money or sharing sensitive information. In one recent case in Australia, a bank had to step in to stop a customer from transferring $100,000 to someone who appeared, on a video call, to be a famous actor. How to Protect Yourself from AI and Deepfake Scams Follow the tips below to stay safe: Verify unexpected requests through a separate channel. If someone asks you for money or sensitive information, even on a video call, hang up and contact them directly using a phone number or email address you already have on file. Be suspicious of urgency. Scammers using AI-generated content will often pressure you to act quickly, saying things like “this needs to happen right now” or “don’t tell anyone about this.” Legitimate requests can wait for you to verify them. Watch for subtle signs of fakes. AI-generated videos may have unnatural eye movements, odd lighting, lips that don’t quite sync with the audio, or a slightly robotic tone. While these signs are becoming harder to spot, they can still be a clue that something isn’t right. Limit what you share publicly. Cybercriminals can use photos, videos, and audio clips you’ve posted on social media to create deepfakes of you or people you know. Think carefully about what personal content you share online. Talk to your team about this threat. Make sure your colleagues know that AI-generated scams exist. If your organisation handles financial transactions or sensitive data, establish a process for verifying unusual requests that doesn’t rely solely on email or video calls. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Tech Insights | AI, Sales, and the Human Touch URL: https://mercuryit.com.au/ai-sales-and-the-human-touch/ AI can supercharge prospecting and polish your outreach, but it won’t replace the handshake that earns real trust. We sit down with Mercury IT’s Chief Sales Officer, Sally-Ann, to unpack how sales and marketing teams can move faster with ChatGPT, Copilot, and chatbots while keeping relationships at the centre of every deal. We start with the practical wins: speeding up lead identification, drafting clearer emails under pressure, and using paid AI tiers to protect sensitive data. From there, we dig into what machines still miss. Sally-Ann explains why in-person meetings and live events outperform online calls, how a buzzing room lets you bring specialists into conversations on the spot, and why that depth builds confidence you simply can’t manufacture through a screen. We also talk readiness. Many companies assume staff aren’t using AI when they already are. We share how to set policy, secure data, and train teams on ethics so AI enhances judgement instead of eroding trust. You’ll hear a rapid myth-versus-fact segment on chatbots, forecasting, and whether AI will replace sellers (spoiler: no), plus guidance on when to use automation for triage and when to switch to a human voice. If you care about pipeline quality, realistic forecasts, and relationships that last beyond the signature, this conversation will help you balance efficiency with empathy. Subscribe, share with a colleague who lives in their CRM, and leave a review telling us: what part of your sales process should never be automated? Tune in on Apple, Spotify, or YouTube --- # Tech Insights | Cyber Risk at the Top URL: https://mercuryit.com.au/cyber-risk-at-the-top/ A landmark privacy ruling just raised the bar for every Australian organisation handling personal data. We walk through the Australian Clinical Labs case—from the Medlab acquisition and the rapid breach that followed to the court‑affirmed penalties—and spell out what “reasonable steps” now look like when sensitive health and financial records are involved. The lesson is not abstract: legacy systems, weak MFA, poor patching, and unencrypted data turned a containable incident into a costly, harmful event. We share how ransomware evolved into double extortion, why backups are necessary but not sufficient, and how delayed investigation and notification magnify legal and reputational damage. You’ll hear practical guidance on reporting within 30 days, engaging the Australian Cyber Security Centre early, and using their support without fear of self‑incrimination. We also break down the $5.8m fine components, what the court prioritised, and why this outcome sets a floor for future actions under Australia’s privacy regime. Directors and boards are front and centre. Outsourcing cyber does not outsource accountability. We outline the questions every board should ask, draw on the Australian Institute of Company Directors’ guidance and the ASD’s new prompts for directors, and explain how the Essential Eight baseline would have cut several risk pathways. Beyond controls, we champion small data: keep only what you need, collect it through secure portals rather than email, set retention with automated destruction, and verify supplier security because liability follows your data. If you own risk in your organisation—CEO, director, CIO, CISO, or practice manager—this conversation will sharpen your priorities and your plan. Subscribe, share with your leadership team, and leave a review with the one change you’ll make this quarter. Tune in on Apple, Spotify, or YouTube --- # Cyber Insights with Mercury IT- January 2026 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-january-2026/ Welcome to this month’s edition of Cyber Insights! In this issue, we’re breaking down the latest social media restriction scams, highlighting recent security breaches, and sharing practical tips on how to tell legitimate communications from scams. LATEST SCAMS New laws took effect in December 2025 requiring social media platforms to restrict access to people aged 16 and over. While these laws aim to protect young Australians, criminals are already exploiting the confusion around age verification to steal personal information and money. Scammers are using several tactics. Some pretend to be social media companies like Facebook, Instagram, or TikTok, sending emails or messages claiming your account is at risk unless you verify your age immediately. They'll ask you to click a link to a fake website that looks legitimate, where they'll try to steal your username, password, and even ask you to upload identity documents like your driver's license or passport. Other scammers pretend to be from the government or police, claiming you've violated the new social media age laws. They'll threaten fines or legal action unless you provide proof of age or pay a penalty. Some criminals are even targeting young people directly, offering to sell fake IDs or access to 'age-verified' accounts so they can bypass the ban, but these operators rarely deliver what they promise and may try to develop inappropriate relationships with teenagers. How to avoid this scam: Social media companies will never ask you to verify your age through email links or direct messages. If you receive such a message, go directly to the platform's official website or app instead of clicking any links. Government agencies and police don't send threatening messages about social media violations demanding immediate payment. These are always scams. Never upload copies of your driver's license, passport, or other identity documents to websites you reach through email or text message links. These documents can be used to steal your identity. LATEST BREACHES University of Sydney The University of Sydney discovered in mid-December that hackers had accessed one of their internal code storage systems. While the system was primarily used by IT teams for software development, it also contained old data files from a retired system. The breach exposed personal details of around 20,500 current and former staff members, including names, dates of birth, phone numbers, home addresses, and job-related information from September 2018. Additionally, historical records from 2010-2019 containing information on about 5,000 students and alumni were also compromised. The university acted quickly to secure their systems and is monitoring for any signs that the stolen data has been published or misused online. Read more here ThinkMarkets Melbourne-based online trading broker ThinkMarkets was hit by the Chaos ransomware group on December 8. The attackers claimed to have stolen 512 gigabytes of company data and published it online after ransom negotiations failed. The stolen data is extensive and includes human resources information, details of customer disputes and complaints, internal legal advice, company policies, and confidential trading information. Most concerning are the scanned copies of employee passports and customer identity verification documents. ThinkMarkets operates globally with offices in Australia, the Middle East, South Africa, Europe, and the United States, so the breach potentially affects clients worldwide. Read more here How to Spot Legitimate Communications from Scams With scammers increasingly impersonating banks, government agencies, and legitimate companies, knowing how to identify genuine communications is crucial. Criminals have become sophisticated at creating emails, text messages, and phone calls that look and sound authentic. Here's how to protect yourself and your organisation. Legitimate organisations never create urgency around account security. If a message claims your account will be closed, suspended, or penalized unless you act immediately, it's almost certainly a scam. Real companies give you time to respond and provide multiple ways to contact them. Don't trust caller ID or email addresses alone. Scammers can fake both. If someone calls claiming to be from your bank or a government agency, hang up and call back using the official number from the company's website. Never use phone numbers provided in suspicious emails or texts. Hover over links before clicking (on desktop computers) to see the actual web address. Scammers often disguise malicious links with legitimate-sounding text. If you're unsure, don't click, go directly to the company's website by typing the address yourself. Watch for generic greetings. Legitimate emails from your bank or service providers typically address you by name. Messages that start with 'Dear customer' or 'Dear member' are red flags, especially if they ask you to verify account details or click links. Real companies will never ask for sensitive information via email or text. Your bank will never ask you to confirm your password, PIN, or full credit card number through these channels. If you receive such a request, it's a scam, report it immediately. When in doubt, verify independently. Before taking any action on a suspicious message, contact the organisation directly using contact information from their official website, not from the message you received. It takes an extra minute but could save you from identity theft or financial loss. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Tech Insights | Building A Cyber Career URL: https://mercuryit.com.au/ransomware-mfa-ai-risks-2/ Curiosity, clear thinking, and a calm plan can beat even the smartest phishing email. In this Tech Insights Podcast episode, Alisha Christian sits down with Trent Gribble, a Cybersecurity Analyst at Mercury IT, to explore how real-world experience, mentorship, and daily learning shape a successful security career. Trent shares how starting at the help desk gave him a hidden advantage: understanding systems, people, and overlooked vulnerabilities. We unpack phishing simulations, internal training, and the human side of security—where empathy and trust matter more than fear. Tune in to learn: ▶️Why small businesses aren’t invisible to cyber threats ▶️How to break into cybersecurity with one cert and hands-on practice ▶️What makes phishing simulations actually work ▶️How AI is reshaping both offense and defence Listen to the full episode on Apple, Spotify or YouTube. --- # Cyber Insights with Mercury IT- October 2025 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-october-2025/ Welcome to this month’s edition of Cyber Insights! This issue is packed with highlights: from celebrating Cybersecurity Awareness Month and exposing the Apple iCloud calendar scam to breaking down recent breaches and exploring how to stay safe from the growing threats of AI art and deepfakes. Latest Scam In this scam, you receive an email for an Apple iCloud Calendar invitation. The invitation is sent from a genuine Apple email address and appears to be related to a purchase invoice. When you look at the invitation’s notes, you see an alarming message about a large charge to your PayPal account. The message includes a phone number and directs you to call to speak to a support team. However, this is actually a clever phishing scam. Cybercriminals created a real calendar invitation, but put a phony purchase message in the notes, hoping to scare you. The phone number in the message doesn't connect to a real support team but instead goes directly to a scammer. If you call the number, the scammer will try to trick you into giving them full control of your computer so they can steal your money and personal information! Follow these tips to avoid falling victim to this phishing scam: Be suspicious of any calendar invitation you weren't expecting, especially if it contains an urgent message about a purchase. Never call a phone number listed in an unexpected email. If you’re concerned about a purchase, log in to your account directly on the official website or app to check your transaction history. Don’t accept or decline suspicious calendar invitations, as this can confirm to scammers that your email address is active. Instead, simply delete the email. Security Breach NSW Health (South Eastern Sydney & Illawarra Shoalhaven) Accidental data exposure- 10 September 2025 Incident Overview Confidential credentialing documents for nearly 600 medical staff, including 67 senior doctors, were inadvertently published on health district websites. Exposed items reportedly included passports, driver’s licences, Medicare cards and professional qualifications. NSW Health removed the files and commenced a forensic investigation. Impact Analysis While not a malicious intrusion, the exposure significantly elevates identity theft and fraud risk for affected clinicians, and creates downstream trust, compliance and regulatory issues for the districts. NSW Health is funding ID replacement and providing IDCARE support, but long-lived credentials may circulate if copied prior to takedown. Read more here The Property Business (Sydney) Kairos ransomware exfiltration- mid-September 2025 Incident Overview A Sydney real estate agency disclosed unauthorised access to an archive server; threat actors (Kairos) claim 164 GB of stolen data covering landlords, tenants and agents. The company says it secured systems and notified authorities; multiple outlets reported dark-web leak threats. Impact Analysis If verified, compromise of rental applications, IDs and contact details creates acute fraud risk for individuals and business-email compromise risk for property transactions. Real-estate workflows routinely hold passports, bank details and employment records, magnifying privacy harm and OAIC notification obligations. Read more here The Dangers of AI Art and Deepfakes What are AI Art and Deepfakes? AI art is generated using billions of images and examples of art. When you enter a prompt, the AI art generator builds an image for you by combining many of these examples into a single image. Deepfake technology is similar, but it involves manipulating real photographs and videos of people and places. This technology can make it look like a person did or said something that they never did. Both of these technologies can be used in a harmless way, but cybercriminals have learned to use them maliciously. Deepfake Scams Scammers can use deepfake technology to impersonate celebrities or other public figures. This type of scam can make it seem like a celebrity has endorsed a product even though they have not. Scammers use this technique to trick people into purchasing a fake product, and they will steal consumers’ personal or financial information. Deepfakes can be used for political figures as well. A deepfake video can make it appear that a government official said or did something that they didn’t say or do. These types of videos can be used to lure people into visiting fake websites or clicking on fake news articles. AI-Generated Art and Photograph Scams Cybercriminals commonly use AI in online romance scams. They can generate fake photographs to use in dating profiles to try and steal money or information from their victims. The cybercriminals will also use current events as the subject of their scams. They use AI to create realistic photographs of tragedies and other events. They post the photographs on fake websites to coerce people into donating money to a charity organization. The organisation is fake, of course, and the cybercriminals will keep any donated money. What Can I Do to Stay Safe? Follow the tips below to keep yourself safe from AI art scams: AI-generated images often have subtle differences or mistakes. Keep an eye out for anything in the photograph that appears to be unusual. A hand with more than five fingers or a photograph with strange lighting or shadows are common signs that an image was created with AI. Always stop and think before clicking or taking action. If a photograph or image seems bizarre or too good to be true, it could be a scam. When possible, verify the claim in a different location. For example, if you see a video with a celebrity endorsement, check that person’s official website for proof that they are actually involved with the product. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Tech Insights | Ransomware, MFA & AI Risks URL: https://mercuryit.com.au/ransomware-mfa-ai-risks/ Think backups will save you from ransomware? Think again. In this episode, we uncover the truth about modern cyber threats and what leaders must do to stay ahead: Ransomware Reality Check – Why downtime lasts weeks, how reputational damage multiplies costs, and the legal obligations that linger long after recovery. The MFA Gap – How fatigue attacks, token theft, and adversary-in-the-middle kits bypass traditional MFA—and why phishing-resistant MFA is the fix. Shadow IT & SaaS Sprawl – Discover hidden risks in your tech stack and learn how to standardise tools without slowing your team down. AI in the Enterprise – Practical policies, training tips, and why enterprise-grade AI matters for privacy and productivity. Regulatory Pressure – From the Notifiable Data Breach scheme to SOCI Act compliance, learn what a “defensible position” really means for directors. Listen to the full episode on Apple, Spotify or YouTube. --- # Cyber Insights with Mercury IT- September 2025 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-september-2025/ In this issue, we spotlight the latest scam, unpack recent data breaches, and share practical cybersecurity tips you can use every day. Plus, tune into our latest podcast episode for expert insights and actionable advice. SCAM ALERT Cybercriminals are using a clever trick to target Instagram users. You receive an email that looks like an official security alert from Instagram that claims that someone tried to log in to your account. The email contains instructions to “Report this user” and provides a link for you to select. This situation seems urgent, and you may be tempted to act quickly. But the link in the email doesn’t lead to a website. If you select it, the link will automatically open your email app and even load a new email that is ready for you to send. The new email is already addressed and contains text that says “Report this user to secure your account.” If you send the email, it won’t go to Instagram’s support team, but a cybercriminal will receive it instead. They will then reply to your email and pretend to be an official support agent so they can try to trick you into sharing your password or other personal information! Follow these tips to avoid falling victim to a phishing scam: Be suspicious of any security alert that asks you to send an email. Legitimate organisations such as Instagram will not ask you to secure your account by starting an email conversation. You should never send information like passwords, account details, or other personal information over email. Instagram support would never ask you to provide this information to them. If you receive what appears to be an urgent message about your account, stop and think first! Scammers often create a sense of urgency to get you to act impulsively. SECURITY BREACHES iiNet (TPG Telecom) Order Management System Compromise (16–19 Aug 2025) Incident Overview: Attackers used stolen employee credentials to access iiNet’s order management system, extracting about 280,000 active email addresses, ~20,000 landline numbers, and ~10,000 customer usernames with street addresses; ~1,700 modem setup passwords were also accessed. TPG says no ID or banking data was in the impacted system. Impact Analysis: High phishing and scamming risk from exposed contact data; legacy records mean former customers may also be targeted. No evidence of core network impact, but reputational risk and regulatory scrutiny are material. Read more here Loyola College (VIC) INTERLOCK Ransomware Claim & Data Leak (29 Aug 2025) Incident Overview: Ransomware group “Interlock” claimed ~591 GB exfiltration (student/staff records and financial docs). The college confirmed a cyber incident and reset credentials; Catholic education authorities notified police and urged caution as students reportedly accessed leaked material. Impact Analysis: If claims are accurate, high privacy impact for minors and staff, potential identity fraud, and long-tail harm from sensitive documents circulating online. Incident confirmation exists; specific leak contents are primarily from threat-actor posts and trackers. Read more here Key Lessons for IT Managers Credential theft is still the easiest door in. Treat employee accounts as high-value targets; prioritise phishing-resistant MFA, PAM, and continuous session risk evaluation. Password stores and reset flows are crown jewels. Strengthen password-handling, monitor for abnormal reset patterns, and use SSO with passkeys to reduce password exposure. Education sector targeting is rising. Ransomware groups increasingly hit schools; ensure data-minimisation, DLP, and child-safety-aware response plans. Assume contact data will be abused. After contact-detail leaks, pre-emptively warn users about phishing, rotate shared secrets (like device setup passwords), and throttle high-risk workflows. CYBERSECURITY TIPS How many internet-connected devices do you have in your home? While these devices make our lives easier, they also make us easy targets for cybercriminals. So, whether you are connecting to the internet through social media, online shopping, or listening to music on a smart speaker, here are some cybersecurity tips for everyday use: Social Media Safety We recommend keeping your social media profile set to private and only connecting with people who you know and trust. Don’t share anything online that you wouldn’t want to be made public. No matter how cautious you are, any information posted on social media can still fall into the wrong hands. Watch out for posts that trick you into oversharing. For example, you may have seen a post that gives you a silly nickname based on random personal details. Personal details such as your first pet’s name or the year you were born, can be used by cybercriminals to guess passwords, answer security questions, or even impersonate you on social media. Online Shopping Safety Only shop on well-known, reputable websites. Only pay using a credit or debit card. Never agree to send cash or wire money to a seller. Shop for the safest deal and not the cheapest. Remember, if a deal seems too good to be true, it probably is. Smart Device Safety Smart speakers and some smartphones have an “always listening” setting that allows you to speak to it at any time. We recommend turning off this setting or muting the microphone while working from home or while discussing sensitive information. Much like a web browser, smart devices track your activity history. Review your history periodically to check for unusual activity. We also recommend clearing your device history on a regular basis. Keep your devices up-to-date. Smart devices receive important security patches through software updates. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Tech Insights | The Hidden Business Impact of AI URL: https://mercuryit.com.au/when-algorithms-meet-shadows-the-hidden-business-impact-of-ai/ The AI revolution is already here—and it’s changing business faster than most leaders realise. In this episode, Alisha chats with cybersecurity expert Chris about the rise of “shadow AI,” where 70% of employees are using AI tools without company approval. They explore the risks of sensitive data being exposed, how AI can both fuel cyber threats and strengthen security, and what leaders need to do now to prepare. From data governance to AI strategy, Chris shares practical steps every business should take before year-end. Don’t wait until it’s too late. Tune in and stay ahead of the threats before they find a way in. Listen to the full episode on Apple, Spotify or YouTube. --- # AI Readiness: Why Australian Directors Must Act Now URL: https://mercuryit.com.au/ai-readiness-why-australian-directors-must-act-now/ You may think that AI is just another buzz word, the fact is that it is fast becoming one of the most disruptive technologies since the invention of the steam engine. Envision a competitor integrating generative artificial intelligence (gen AI) into operations, decision-making, and customer interactions. Within a year, they achieve double-digit cost reductions, enhanced productivity, and increased market share. Meanwhile, your board is still either blissfully unaware or suffering decision paralysis on an AI strategy. The State of AI in IT 2025 report reveals that 51% of organisations identify governance and compliance as the primary barrier to AI adoption, rather than the technology itself.[1] Furthermore, 71% of employees are experimenting with tools like ChatGPT at work, often without oversight, heightening risks.[2] The imperative is evident: gen AI is a governance challenge, a risk management exercise, and a strategic opportunity. Without board oversight, "shadow AI" proliferates, risking data leakage, legal exposure, and reputational harm. A maturity model for AI adoption, spanning strategy, value, organisation, people and culture, governance, engineering, and data, provides a roadmap. Initial stages involve defining vision, prioritising use cases, and establishing policies. Analysis includes external trends and pilot trials. Communication fosters adoption goals and internal partnerships. Priority identification measures success and manages portfolios. Advanced activities refine strategies, monitor value, and embed ethical governance. Australian directors face compelling drivers: Regulatory momentum is accelerating. The Australian Government's AI Ethics Framework and impending mandates on privacy, security, and ethics necessitate compliance, as emphasised in the AICD's Directors' Guide to AI Governance. Workforce adoption is rampant and unregulated, with 71% using unsanctioned tools, amplifying security vulnerabilities.[3] ROI correlates with trust: Organisations establishing robust frameworks report positive returns; those without face negatives.[4] Join Mercury IT for a free informational webinar "AI Readiness: A Boardroom Briefing", where Chief Information Security Officer, Chris Haigh and General Manager and Head of Cybersecurity, Martin O’Riordan host an exclusive session for Australian directors and executives. This briefing distils insights from Harvard Business Review, Gartner, and the State of AI in IT 2025, delivering board-level strategies to: Define your AI risk appetite aligned with Australian regulations. Build governance structures, leveraging AICD best practices. Enhance staff literacy via training and guidelines to curb shadow AI. Scale pilots into secure, value-driven initiatives. [1] Atomicwork, ITSM.tools, & ITIL by PeopleCert. (2025). State of AI in IT 2025 [2] Atomicwork, ITSM.tools, & ITIL by PeopleCert. (2025). State of AI in IT 2025 [3] Atomicwork, ITSM.tools, & ITIL by PeopleCert. (2025). State of AI in IT 2025 [4] Harvard Business Review Analytic Services. (2024). Realizing the Generative AI Opportunity: Embracing Change to Create Business Value. --- # Tech Insights | Deepfakes & Zero-Days URL: https://mercuryit.com.au/stop-deepfakes-zero-day-attacks-mercury-it-experts/ Deepfakes & Zero-Days: Cybersecurity’s Darkest Threats The cyber threat landscape is shifting fast — and the stakes are higher than ever. In this episode of Tech Insights, host Alisha Christian is joined once again by cybersecurity expert Chris Haigh from Mercury IT to explore three of the most pressing threats shaping 2025. From the devastating SharePoint zero-day attack to the rise of AI-powered deepfakes and phishing scams, Chris breaks down what every business needs to know now — and how to prepare. We’ll uncover: How zero-day vulnerabilities bypass even the best defences The rise of deepfakes and how criminals are using voice clones to trick teams Why your vendors might be your weakest security link Practical steps to boost your cyber resilience Don’t wait until it’s too late. Tune in and stay ahead of the threats before they find a way in. Listen to the full episode on Apple, Spotify or YouTube. --- # Cyber Insights with Mercury IT- July 2025 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-july-2025/ Welcome to this month's edition of Cyber Insights! In this issue, we explore the newest scam targeting financial aid schemes, reveal recent security breaches, and delve into AI-driven attacks. SCAM ALERT Scammers are increasingly targeting Australians experiencing financial hardship by impersonating legitimate charities and government assistance programs. These fraudsters use emails, text messages, or phone calls to offer fake financial aid schemes, often claiming to provide grants or emergency relief funds. They request personal details such as bank account information or identification documents under the guise of processing applications. Once obtained, this data is used for identity theft or further fraudulent transactions. In a related trend, phishing campaigns are circulating via SMS, purporting to be from banks like CommBank, notifying recipients of "awards" or rewards points that require urgent claiming through a provided link. These messages lead to fake websites designed to capture login credentials and financial details. To protect yourself from these scams: Verify any unsolicited offers of assistance by contacting the organisation directly using official contact details from their website, not those provided in the message. Avoid clicking links in unexpected texts or emails; instead, log in to your accounts through official apps or websites. Report suspicious activity to Scamwatch or your financial institution immediately to prevent wider exploitation. SECURITY BREACHES Qantas Exploit: Hacking Industry: Transportation Australia's Qantas airline confirmed a significant cyber incident affecting one of its third-party contact centres, resulting in unauthorised access to approximately 6 million customer accounts. The breach exposed personal information, including names, email addresses, phone numbers, and Frequent Flyer details. The airline stated that no financial data or passwords were compromised, but it has notified affected customers and is offering credit monitoring services. Investigations are ongoing with cybersecurity experts, marking one of the largest breaches in Australia this year and highlighting vulnerabilities in third-party vendors. Read more here Disney Exploit: Data Theft Industry: Entertainment Entertainment giant Disney suffered a data breach where proprietary information, including internal documents and intellectual property, was stolen. The incident also impacted 19 other companies through a compromised business services provider. Disney has engaged forensic teams to investigate, but the breach underscores the risks of interconnected supply chains in the media industry. No customer data was reportedly affected, though the full scope remains under review. Read more here CYBERSECURITY TIPS As artificial intelligence (AI) becomes more integrated into daily operations, cybercriminals are leveraging it to create sophisticated threats, such as automated phishing emails and adaptive malware that evades detection. These AI-powered attacks can scale rapidly, making them more efficient and harder to identify. Key Concerns: Automated scaling allows attackers to target thousands simultaneously. Convincing phishing uses AI to personalise messages based on stolen data. Malware that evolves in real-time to bypass security protocols. To safeguard against these emerging risks: Implement AI-driven security tools for real-time threat detection and response. Stay updated on AI advancements through reliable sources and training programs. Foster collaboration within your organisation and the broader cybersecurity community to share intelligence on new threats. Conduct regular risk assessments and simulate AI-based attack scenarios to strengthen defences. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Tech Insights | Women in Tech, Breaking Barriers URL: https://mercuryit.com.au/women-in-tech-breaking-barriers-building-careers/ Women in Tech: Breaking Barriers, Building Careers Sally-Ann Bird, Chief Sales Officer at Mercury IT, joins host Alisha Christian on the Tech Insights Podcast to share her career journey — from late 1980s London to a key leadership role at Mercury IT. As the first female guest on the podcast, she reflects on breaking barriers in a male-dominated industry, the power of mentorship, and how she and the team at Mercury IT help businesses scale and succeed through strategic managed services. Tune in to learn more! Listen to the full episode on Apple, Spotify or YouTube. --- # Tech Insights | SMB 1001 for Your Business URL: https://mercuryit.com.au/smb-1001-for-your-business/ Cybersecurity Made Simple: SMB 1001 for Your Business Cybersecurity doesn't have to be complicated or expensive for small businesses anymore. Chris Haigh, our cybersecurity expert discusses the game-changing SMB 1001 certification with Alisha Christian and breaks down what this really means for businesses. This Australian-developed standard offers affordable, progressive security levels, making it accessible for all. 💡 Plus, until the end of July, Cyber Wardens and CyberCert have joined forces to bring free Bronze cyber certification to businesses. Reach out to us to learn more or for guidance on how to get started. Tune in to learn more! Listen to the full episode on Apple, Spotify or YouTube. --- # Cyber Insights with Mercury IT- June 2025 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-june-2025/ Welcome to this month's edition of Cyber Insights! In this issue, we dive into the latest scam targeting Amazon Prime customers, uncover recent security breaches, and explore vishing—what it is and how to avoid it. SCAM ALERT Cybercriminals are targeting Amazon Prime customers. You receive an email stating that your Amazon Prime subscription will automatically renew. The email contains your name and address, making it appear convincing. It claims your subscription will automatically renew, but at a very expensive cost. Since the high subscription cost seems alarming, you’ll likely want to use the “cancel subscription” button in the email. If you click it, you will be taken to what appears to be an Amazon Prime login page so that you can access your account. But if you enter your user credentials, you won’t be taken to the real Amazon website. The login page is fake, and the cybercriminals who created it can steal any information you enter here! Follow these tips to avoid falling victim to a phishing scam: If you're concerned about your Amazon Prime subscription, contact Amazon's official customer service directly instead of clicking a link in an email. Always think before you click. This phishing scam is designed to scare you into clicking impulsively. SECURITY BREACHES Australia – MKA Accountants Exploit: Ransomware Industry: Business Services Moonee Ponds-based MKA Accountants was named a victim of the Qilin ransomware gang. The group published 12 stolen documents on its darknet site on May 14, including internal emails, financial statements and insurance records. The firm has notified clients and reported the incident to the Australian Cyber Security Centre and the Office of the Australian Information Commissioner. MKA says it is aware of the claims and is working to verify the extent of the breach. Read more here UK- Harrods Exploit: Hacking Industry: Retail Harrods has been hit by a cyberattack. The DragonForce cybercrime group, sometimes called “ScatteredSpider,” claimed responsibility. The luxury department store admitted it was forced to shut down some unnamed systems but said its website and all its stores, including the Knightsbridge flagship, H Beauty and its airport outlets, continue to operate. The retailer disclosed that it first realised it was being targeted last week. The retailer said it is engaging experts to investigate the issue. Read more here CYBERSECURITY TIPS Cybercriminals not only use the internet and email to gain access to sensitive information, they use telephones to their unlawful advantage. Vishing is the term for criminal attempts to influence action or gain confidential information over the phone using social engineering. How it Works: Criminals have the ability to call from a blocked, “spoofed,” or private number, making it easier to pose as a fellow employee, an authority figure, or any person or organization that you would commonly interact with. Any information regarding the processes or technologies a company uses would assist in a breach of an organisation. Information that you may not consider very sensitive, such as employee names, titles, or ID numbers, could certainly help these criminals. Don’t Fall for These Phony Attempts Think twice about giving out personal information to someone who claims to be from a different organisation, or within your organisation, unless you initiated the call yourself and you are certain the number called was valid. If someone contacts you requesting sensitive information, always verify that the source is legitimate before providing the information. If the caller claims they are from a different organisation, you can compare the caller's phone number to the phone number listed on the organisation's official website. If the caller claims they are from your organisation, you can compare the caller's phone number to the phone number listed in your organisation's internal directory. Vishing is not limited to gaining data from your organisation, as vishers are also known to prey on your personal information. Remember to stop, look, and think before answering unfamiliar numbers, or before calling phone numbers you see in emails, internet ads, or pop-ups. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # IT Foundations for a Successful Dental Practice URL: https://mercuryit.com.au/it-foundations-for-a-successful-dental-practice/ Mercury IT has been partnering with dental practices for over 20 years, gaining a deep understanding of the intricacies involved in building a successful practice. Starting a dental practice requires more than clinical expertise; it demands a robust IT infrastructure and efficient systems. As your practice grows, having scalable systems in place from the start will allow you to expand seamlessly and more economically, whether that means opening additional locations or even franchising your business. This forward-thinking approach ensures that your practice can adapt to changing demands and continue to thrive. Although it may seem daunting, you can establish your practice’s IT infrastructure for as little as $5000. Here are some key elements to keep in mind when starting your own practice and choosing suitable IT support for your dental practice: Choosing the right IT partner Selecting an IT partner who is well-connected and familiar with the dental industry is crucial. This partner should understand the specific needs and challenges of dental practices, such as managing patient records, ensuring data security and integrating various dental software systems. They should also have a proven track record of working with dental practices and be able to provide references from other dental clients. Ideally, your provider should offer managed IT services for your dental practice that scale with your needs, providing proactive support and minimising downtime. IT Infrastructure A reliable IT infrastructure is the backbone of any modern dental practice. This includes having a high-speed internet connection to support online services such as cloud-based software. Secure Wi-Fi is essential for both staff and patients, ensuring that sensitive data is protected. A local area network (LAN) should be set up to connect all devices within the practice, allowing for seamless communication and data sharing between computers, printers, and other equipment. A strong IT foundation also supports your practice’s use of digital imaging, patient communications, and remote access solutions, which are all essential parts of dental practice IT solutions. Quality Hardware Investing in quality hardware is essential to prevent downtime and data loss. This includes purchasing reliable computers, servers, and backup systems. High-performance computers are necessary for running dental software and managing patient records efficiently. A professional provider of IT services for dental practices will also help ensure all hardware integrates seamlessly with your practice management systems. Cybersecurity Implementing strong cybersecurity measures is vital to protect sensitive patient data. This includes using firewalls to block unauthorised access to your network, antivirus software to detect and remove malware, and encryption to protect data both in transit and at rest. Regularly updating software and systems is also important to protect against new threats. Patient Management System A robust patient management system is necessary for streamlining appointments, billing, and patient records. This system should be user-friendly and integrate seamlessly with other software used in the practice. A good patient management system can help improve efficiency, reduce administrative workload, and enhance the patient experience by providing easy access to their information and appointment history. When paired with reliable dental IT support, these systems can operate at peak efficiency, allowing your team to focus on delivering excellent care to your patients. Data Backup Establishing a reliable data backup system is key for safeguarding patient information. It’s important to make certain that backups are encrypted and that the backup process is automated to reduce the risk of human error. Regularly testing backups to confirm they can be successfully restored is also important to ensure data can be recovered in the event of a loss. By considering these elements and investing in a solid IT foundation, your dental practice will be well-equipped to provide exceptional care. Planning for future growth ensures that your practice can adapt to the ever-evolving demands of the industry. With managed IT services for dental practices, you can build a scalable, secure, and future-ready practice that supports both your patients and your team. Contact Mercury IT to find out more about their Managed IT solutions. --- # Tech Insights | Building Cyber Resilience URL: https://mercuryit.com.au/beyond-prevention-building-cyber-resilience/ In our latest episode, Chris Haig, our Chief Information Security Officer, shares essential cybersecurity strategies for small to medium businesses, illuminating the path to better protection and faster recovery from cyber incidents. Chris explains why preventative measures are crucial and how they can save significant costs compared to post-incident responses. He also discusses the importance of a robust incident response plan and how cyber insurance can provide extra protection. Tune in to learn practical steps to safeguard your business and ensure compliance with cybersecurity regulations. Tune in to learn more! Listen to the full episode on Apple, Spotify or YouTube. --- # Cyber Insights with Mercury IT- May 2025 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-may-2025/ Welcome to this month's edition of Cyber Insights! In this issue, we delve into the latest online scam, uncover recent security breaches, and provide essential tips on ensuring the HTTPS website you're visiting is secure. SCAM ALERT Online gaming continues to draw in millions of players, but not everything in the digital playground is safe—this latest phishing scam is proof. The newest con making the rounds involves Discord, the widely used app that supports voice, video, and text chatting. Here’s how it plays out: A message pops up on Discord, inviting you to try out a brand-new game. It appears to be from a legitimate game developer, making it easy to believe. If you take the bait and respond, the scammer sends over a link and a password, supposedly giving you access to download the game. But instead of launching a game, that link installs malware on your device. This malicious software doesn’t just sit quietly in the background. It goes to work stealing your data and can even hijack your account to send the same scam message to your friends. If any of them fall for it, their systems get infected too. So, instead of testing a new release, you’re left with a compromised account, and your contacts could be at risk as well. SECURITY BREACHES A breach exposed the personal data of 16,000 subscribers to Nine newspapers, including the Sydney Morning Herald, The Age and The Financial Review. The breach, linked to a third-party supplier, resulted in names, postal addresses and email addresses being left accessible online due to a third-party supplier’s security lapse. Nine confirmed payment details and passwords were not compromised and is working to secure affected systems, although the exposure’s duration and potential access by malicious actors remain unclear. Read more here The British Museum was forced to close several galleries and temporary exhibitions after a former employee allegedly disrupted its IT system. The incident occurred when a contractor who had been fired entered the museum and gained access to its IT network before being apprehended. London’s Metropolitan Police confirmed the arrest of a man in his fifties. The museum has not disclosed the extent of the IT breach but stated it is working to resolve the disruption. Investigations are ongoing. Read more here CYBERSECURITY TIPS When signing in to a website such as Facebook or Amazon, have you ever seen the beginning of the URL change from “HTTP” to “HTTPS”? How about a small lock icon at the top of your browser? The “S” in “HTTPS” stands for “secure” and indicates that your web browser is accessing the website through a secure connection that is encrypted and protected from unauthorised access. The lock icon also indicates that the website is secured with a digital certificate. However, a website is not necessarily secure just because “HTTPS” is included in the URL. A website using HTTPS can be safer than a website using HTTP, but cybercriminals can get HTTPS certificates, too. Cybercriminals often use HTTPS URLs to trick unsuspecting victims into clicking phishing links. HTTPS websites can offer a false sense of security, so you may be tempted to automatically trust them. However, it’s important to remember that even legitimate HTTPS websites may have vulnerabilities that cybercriminals can exploit. You should never rely on an HTTPS URL or even the lock icon at the top of your browser for security. Tips to Stay Safe Follow the tips below to make sure the website you're visiting is secure: Watch out for misspelled domains. For example, a link may contain the word “Annazon” instead of “Amazon.” Some misspellings are easier to catch than others, so make sure to look closely! If you receive a login link through email or text message that you weren’t expecting, don’t click it. Cybercriminals can send you malicious links that look legitimate. Always navigate directly to the website. Remember to look for the “S” in “HTTPS” before you enter any sensitive information into a web browser. Even then, remain cautious. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Tech Insights | Data Hygiene: Essential Tips URL: https://mercuryit.com.au/data-hygience-essential-tips-for-business-security/ In our latest episode, Martin, our Head of Cybersecurity, shares why implementing proper data hygiene practices is crucial for every business's security posture. Some tips to remember: • Don't collect unnecessary information like dates of birth unless absolutely required • Have processes in place to dispose of obsolete data properly • Implement strong policies so staff understand the value of data protection • Physical documents containing personal information should be shredded, not just thrown away • Old data increases your risk profile for attackers • Review your legal requirements for data retention in your specific industry • Clean data is increasingly important for AI implementation • Get in the habit of deleting temporary export files immediately after use • Review your data hygiene practices at least annually Reach out to us for more information or assistance with your data hygiene practices. Tune in to learn more! Listen to the full episode on Apple, Spotify or YouTube. --- # Tech Insights | Your Data Is More Valuable Than You Think URL: https://mercuryit.com.au/your-data-is-more-valuable-than-you-think/ In this episode, cybersecurity experts, Chris Haigh and Martin O'Riordan dive into the Essential Eight, explaining its importance for business, and providing insights on how to get an assessment to kickstart your cybersecurity journey. Key Topics Covered: Introduction to the Essential Eight Breakdown of the eight essential categories of controls The importance of customised solutions for businesses Common misconceptions about cybersecurity and the importance of prevention Real-life examples and case studies highlighting the impact of the Essential Eight Practical advice for businesses starting their cybersecurity journey Tune in to learn more! Listen to the full episode on Apple, Spotify or YouTube. --- # Cyber Insights with Mercury IT- February 2025 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-february-2025/ Welcome to this month’s edition of Cyber Insights! In this issue, we explore Business Email Compromise, cover the latest security breaches, and share tips on protecting your privacy around always-listening devices. SCAM ALERT Understanding Business Email Compromise (BEC) Business Email Compromise (BEC) is a growing threat to companies of all sizes. One common tactic involves manipulating invoices, which can lead to significant financial losses. Here's how it typically works: A criminal hacks into your supplier's email account. They send you an invoice that looks legitimate but with altered bank details. If you pay without verifying, the money goes to the criminal instead of your supplier. The Tricky Part The email comes from your actual supplier's address, making it hard to spot the fraud. The only suspicious element is the change in bank account details. A Real-World Example Our Chief Information Security Officer, Chris Haigh recently shared a post on LinkedIn about this issue, read full post here Legal Implications A recent court case ruled that the invoice recipient has a duty to verify the authenticity of invoices and their details. This means your business could be held responsible, even if it wasn't your email that was hacked. Protecting Your Business To safeguard against BEC and invoice fraud, consider these steps: Implement a verification process for any changes to bank account details, such as a phone call to confirm. Train your staff on the importance of following this process without exception. Consider cyber insurance as an additional layer of protection against cybersecurity attacks. By following these guidelines, you can significantly reduce your risk of being a victim of BEC and other cyber threats. SECURITY BREACHES Cybersecurity researchers at Wiz Research revealed on January 29 that DeepSeek, a Chinese AI-driven data analytics company, suffered a significant data leak, exposing over one million sensitive records. Researchers discovered that the company had a misconfigured cloud storage instance containing a large database that was left publicly accessible without proper authentication and access controls. The database contained a variety of sensitive information including chat logs, system details, operational metadata, API secrets and log streams. Read more here The British Museum was forced to close several galleries and temporary exhibitions after a former employee allegedly disrupted its IT system. The incident occurred when a contractor who had been fired entered the museum and gained access to its IT network before being apprehended. London’s Metropolitan Police confirmed the arrest of a man in his fifties. The museum has not disclosed the extent of the IT breach but stated it is working to resolve the disruption. Investigations are ongoing. Read more here CYBERSECURITY TIPS Staying Safe Around Always-Listening Devices With the overwhelming popularity of always-listening devices such as Alexa, Google Home, and smartphones, you’ve probably heard stories of these devices joining in on conversations without being prompted. Perhaps it’s even happened to you! While this idea can be alarming and unsettling, there are ways to protect your private information, and conversations, from these always-listening devices. To help you stay safe from these devices, here are some tips: Review and delete voice recordings: Your device will store your search and activity history to create a customised experience for you. However, you can review and delete these recordings from the device of your choice in order to protect your privacy. Mute the microphone: You can mute your microphone to ensure that your device is not listening and recording when you are not using it. The recording capabilities will remain off until you turn them back on. Don’t link accounts with sensitive information to your device: If you have any accounts containing your sensitive information in them, it is best not to link those accounts to your device. This will keep your sensitive information secure from potential data breaches. Change the settings to automatically manage data stored by the device: Personally, managing what data is linked with your account will give you more control over the information stored by your device and will save you time when deleting your history. Turn off your device when you’re away: When in doubt, turn it off. If your device does not have a power button, simply unplug it. By making a habit of unplugging and deleting voice recordings from these always-listening devices, you can help ensure that there is an extra layer of protection between them and your private information. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Tech Insights | 2025 Tech Trends URL: https://mercuryit.com.au/2025-tech-trends-from-agentic-ai-to-quantum-computing/ Tech experts, Chris Haigh and Martin O'Riordan discuss 2025 trends, focusing on agentic AI as virtual assistants for business tasks. They explore quantum computing advancements, spatial computing applications in healthcare, polyfunctional robots for automation, and biological enhancements. The discussion emphasises security considerations and business impacts. What makes agentic AI different from traditional artificial intelligence systems? How will quantum computing transform cybersecurity measures? What business applications exist for spatial computing technologies? Tune in to learn more! You can listen to the full episode on Apple, Spotify or YouTube --- # Cyber Insights with Mercury IT- January 2025 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-january-2025/ Welcome to this month’s edition of Cyber Insights! In this issue, we explore common scams to watch out for, report on the latest security breaches, and spotlight a new campaign recently launched by Scamwatch. SCAMS Scam text messages often mimic government agencies, businesses, or even family and friends to deceive you. They appear urgent, include links to fake websites, and aim to steal personal information for fraud or theft. Scammers use spoofing to copy sender IDs, making these messages seem genuine—even appearing in the same thread as real ones. Scam emails look like the real thing, but watch out for links and attachments designed to steal your money or information. Scammers send 'urgent' emails pretending to be from the government, law enforcement and businesses. They use the same logo and a similar email address as the real organisation. Scammers can also copy or 'spoof' the email address of an organisation or business to make the scam email look more real. SECURITY BREACHES Australian Banking Apps Targeted by Global Malware Attack. In December 2024, a sophisticated malware campaign targeted Android users of major Australian banks, including the big four, Suncorp, Bank of Queensland, Bendigo Bank, ING Australia, and PayPal. Attackers impersonated recruiters, prompting victims to download a fake CRM app that installed the Antidot Banker malware, designed to steal credentials from banking and other critical applications. Retailer Payment Portal Breach Exposes Customer Data! In December 2024, Australian retailer Stan Cash revealed that its payment portal had been compromised for an entire year, exposing sensitive customer information. One customer reported $6,000 in fraudulent transactions after purchasing a kettle. The breach affected customers' credit card information, names, email addresses, and addresses. CYBERSECURITY TIPS Stop. Check. Protect. to keep us safe from scammers! Scams are getting harder to spot. Scammers increasingly take advantage of new technology, new products or services and major events to create believable but deceptive stories. That’s why Scamwatch are tackling the threat of scams with the launch of their Stop. Check. Protect. campaign. The campaign will spread awareness of sophisticated scam tactics, remind people that anyone can lose money, financial or personal details to a scam, and encourage everyone to report scams to Scamwatch. The ads feature everyday people speaking to mini versions of themselves, which represent their inner voices and remind them to Stop. Check. Protect. These 3 simple steps can help keep you safe from scams. When we all take these steps together, we build community resilience to scams. View advertisement here Stay protected! To avoid being scammed: STOP- Don't give money or personal information to anyone if unsure. CHECK- Consider who you're dealing with and ask yourself: could the message or call be fake? PROTECT- Act quickly if something feels wrong and report scams to Scamwatch. Your report will help us protect others. If you’ve been affected Don't be embarrassed about being scammed.If you have shared financial information or transferred money, contact your bank immediately. If you have given away your personal information, you can call IDCARE for help on 1800 595 160. When you report the scam, the people who read your report understand how you are feeling. You are not alone. Contacting support services can help you understand what happened but also tells authorities about scam activities so they can work on making it harder for scams to succeed. Help others by reporting scams to Scamwatch. Who is the National Anti-Scam Centre? The National Anti-Scam Centre is where government and industry work together to protect Australians from scams. They are harnessing shared resources and smarter analytics to identify blind spots, strengthen weak links and use data to react faster, stopping scams before they happen. They aim to make Australia a harder target for scammers. For more information about how to avoid or report a scam, visit Scamwatch Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Tech Insights | Unlocking Business Potential with Copilot URL: https://mercuryit.com.au/unlocking-business-potential-with-microsoft-copilot/ Ever wondered how a school-network-hacking enthusiast becomes a Solutions Architect? Dive into the interesting journey of James from Mercury IT, as he sheds light on Copilot, the game-changing virtual assistant that's revolutionising business operations. We explore how Copilot, with its integration into business systems, isn't just another AI tool but a strategic partner in streamlining tasks like managing calendars and crafting documents. Discover how Copilot's unique capabilities—powered by Microsoft Graph and large language models—can transform tender preparations, significantly slashing the time and effort involved. In our conversation, we also weigh the broader implications of AI tools in the business world, from boosting efficiency to navigating potential pitfalls like security risks and financial costs. James shares invaluable insights on maintaining data integrity and making smart investment decisions when adopting AI technologies. The promise of AI is not just about automation; it's about unlocking creative potential and opening new revenue streams. Don't miss this chance to rethink how your business can thrive on technology—reach out to Mercury IT for a tailored assessment and let Copilot redefine your daily operations. You can listen to the full episode on Apple, Spotify or YouTube --- # Cyber Insights with Mercury IT- October 2024 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-october-2024/ Welcome to the latest edition of Cyber Insights! This month is Cybersecurity Awareness Month, so we're taking a break from our usual format to explore the key initiatives, why they matter, and how they can help protect you, your family, and your business. Cybersecurity Awareness Month: Protecting Yourself and Your Business with Four Key Initiatives October is Cybersecurity Awareness Month, a time dedicated to helping individuals and businesses improve their online safety. With cyber threats constantly evolving, it's more important than ever to take simple but effective steps to protect sensitive data and digital assets. Turn on Multi-Factor Authentication (MFA) MFA adds an extra layer of security by requiring a second form of verification, like a text code or fingerprint, along with your password. Why it matters If a hacker steals your password, they can't access your account without the second verification. How it protects MFA greatly reduces the risk of unauthorised access, especially for accounts with sensitive data, keeping both personal and business information secure. Keep Devices and Software Up to Date Updates fix security vulnerabilities, protecting your devices from hackers. Why it matters Outdated systems are easy targets for cybercriminals, and updates close these security gaps. How it protects Regular updates prevent data breaches and downtime, helping your business avoid costly attacks. Use Strong and Unique Passwords A strong password is hard to guess. Using a passphrase, like "BlueSky#DancingTree$2024!", adds even more security. Why it matters Weak passwords make it easy for hackers to access multiple accounts if one is compromised. How it protects Strong, unique passwords or passphrases protect your accounts. A password manager can help store them securely. Recognise and Report Phishing Phishing scams use fake emails or websites to steal personal information or install malware. Why it matters Phishing is a common way cybercriminals trick people into sharing sensitive data. How it protects Spotting phishing attempts and reporting them can prevent data theft and protect your business from further attacks. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Cyber Insights with Mercury IT- September 2024 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-september-2024/ Welcome to the latest issue of Cyber Insights! In this edition, we showcase some scam statistics, review the latest security breaches, and offer tips on privacy policies. SCAM ALERT In this scam, cybercriminals are using Google search results to try to trick you into calling a phone number that they control. If you search for an organisation on Google, scammers can manipulate the search results to display a fake phone number for the organisation. Don't take a chance of losing your investments on a risky phone call. If you search on Google and call the fake number from one of these manipulated search results, you will be connected to a scammer. They will attempt to trick you out of your money by saying that your account needs updates or you need to transfer funds. They may ask you for your login information so that they can access your account. Once they gain access to your account, they can quickly transfer your funds to accounts that they control. This is one investment that you don’t want to risk! Follow these tips to avoid falling victim to a phone number scam: Confirm that you are on the organisation’s official website if you are going to buy one of their products or use one of their services. Double-check that the listed phone number is the same one on the organisation’s official website. Report any fake listings, ads, or any other type of disinformation through Google’s Report services. Latest Security Breaches Exploit: Ransomware The Washington Times: Newspaper Risk to Business: MODERATE The Washington Times, an influential U.S. newspaper, was reportedly compromised by the Rhysida ransomware group, which listed the paper as a victim on its dark web blog. The group claims to be auctioning the Washington Times’ “exclusive” data, including corporate files and employee documents, for 5 bitcoins (approximately $304,518) with a seven-day deadline to start the auction. Read more here Exploit: Third Party (Misconfiguration) Toyota: Carmaker Risk to Business: MODERATE Toyota revealed that a misconfigured cloud bucket exposed over 2.15 million customer records to the open internet for over 10 years, from November 2013 to April 2023. The breach affects customers of Toyota’s Connected services in Japan. Additionally, the ZeroSevenGroup cybercrime gang claims to have stolen data “from a U.S. branch”, potentially a Toyota dealer, including employee and customer details, but the provenance of the data they published has not been confirmed. Toyota says that none of its internal systems were breached, pointing to an unnamed third party as the source of the data. Read more here Cybersecurity Tips What are AI Art and Deepfakes? AI art is generated using billions of images and examples of art. When you enter a prompt, the AI art generator builds an image for you by combining many of these examples into a single image. Deepfake technology is similar, but it involves manipulating real photographs and videos of people and places. This technology can make it look like a person did or said something that they never did. Both of these technologies can be used in a harmless way, but cybercriminals have learned to use them maliciously. Deepfake Scams Scammers can use deepfake technology to impersonate celebrities or other public figures. This type of scam can make it seem like a celebrity has endorsed a product even though they have not. Scammers use this technique to trick people into purchasing a fake product, and they will steal consumers’ personal or financial information. Deepfakes can be used for political figures as well. A deepfake video can make it appear that a government official said or did something that they didn’t say or do. These types of videos can be used to lure people into visiting fake websites or clicking on fake news articles. AI-Generated Art and Photograph Scams Cybercriminals commonly use AI in online romance scams. They can generate fake photographs to use in dating profiles to try and steal money or information from their victims. The cybercriminals will also use current events as the subject of their scams. They use AI to create realistic photographs of tragedies and other events. They post the photographs on fake websites to coerce people into donating money to a charity organisation. The organisation is fake, of course, and the cybercriminals will keep any donated money. What Can I Do to Stay Safe? Follow the tips below to keep yourself safe from AI art scams: AI-generated images often have subtle differences or mistakes. Keep an eye out for anything in the photograph that appears to be unusual. A hand with more than five fingers or a photograph with strange lighting or shadows are common signs that an image was created with AI Always stop and think before clicking or taking action. If a photograph or image seems bizarre or too good to be true, it could be a scam. When possible, verify the claim in a different location. For example, if you see a video with a celebrity endorsement, check that person’s official website for proof that they are actually involved with the product. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Tech Insights | The True Cost of a Cyber Breach URL: https://mercuryit.com.au/tech-insights-the-true-cost-of-a-cyber-breach/ What is the true cost of a cyber breach? In this episode, we uncover the financial and emotional tolls that ransomware attacks can inflict on businesses. Join cybersecurity expert Chris Haigh as he shares compelling real-life examples, like the Robin Hood ransomware attack, and clears up common misconceptions about cyber insurance. Chris also provides practical, immediately actionable cybersecurity measures to protect both personal and business interests. Navigating the nuances of cybersecurity vulnerabilities and ransomware attacks can be overwhelming. Chris shares invaluable insights into the challenges of timely software patching and recounts a cautionary tale of a business breached despite being patched—a stark reminder of the complexity of cyber threats. The discussion also explores the decision-making process around involving insurance, the extensive time commitments, and costs of managing a ransomware incident, making it clear why assessing the full impact before taking action is crucial. Effective communication is pivotal during a cyber crisis. Learn from Chris why having a well-prepared and practiced communication strategy can save your business from chaos. Understand the importance of cyber resilience through regular practice and the implementation of cybersecurity frameworks like the Essential Eight. You can listen to the full episode on Apple, Spotify or YouTube --- # Unlock the Full Potential of Copilot Prompting URL: https://mercuryit.com.au/unlock-the-full-potential-of-copilot-prompting/ When writing prompts for Copilot for Microsoft 365, it’s important to be clear and specific. Provide specific instructions, such as the topic, purpose, tone, and required length. Keep it conversational and give feedback to Copilot based on the quality of its responses to help the AI learn and match your preferences. Use clear and specific keywords or phrases when asking Copilot to write a piece of text for you. This helps it generate more relevant and creative copy. Don’t forget to ask for feedback from Copilot, as this helps it to understand your needs and preferences, and to provide you with more relevant, helpful responses. It’s also important to write legibly, using correct punctuation, capitalisation, and grammar when writing prompts. This will help the AI produce better quality text and responses. And always check Copilot’s responses for accuracy, grammar, and style, and watch out for irrelevant or inappropriate content. Check out our fact sheet >> Copilot- Prompt Do's and Don'ts As your Microsoft partner, we can help you optimise your Copilot for Microsoft 365 experience. Our team has the skills and knowledge to implement and customise Microsoft solutions for your needs. Contact us to get started with Copilot today and boost your productivity! --- # Cyber Insights with Mercury IT- June 2024 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-june-2024/ Welcome to the latest issue of Cyber Insights! In this edition, we showcase some scam statistics, review the latest security breaches, and offer tips on privacy policies. Current Scams Today, we thought we would do something a little different and look at some scam statistics for the first four months of the year, courtesy of scamwatch.gov.au Age is an interesting factor, as the amount lost increases for those aged 55 and older. Therefore, it’s important to speak with family and friends about scams. Latest Security Breaches Exploit: Ransomware MediSecure: Prescription Platform Risk to Business: SEVERE MediSecure, an Australian provider of a digital prescription platform, has disclosed that it has experienced a ransomware attack on May 16. Bad actors gained access to the personal and health information of individuals in its systems. The company did not offer specifics. The company’s website and phone lines were also knocked offline. Officials from the office of the National Cyber Security Coordinator (NCSC) reassured the public that no current e-prescriptions have been impacted or accessed. Update: Medisecure has gone into administration since this event. Read more here. Exploit: Hacking Dropbox: Technology Company Risk to Business: SEVERE Dropbox has admitted that hackers gained access to its company systems on April 24, 2024. The company said it discovered that hackers initially gained access to the production environment of Dropbox Sign. The bad actors were able to access information related to users of Dropbox Sign, including account settings, names and emails. For some users, phone numbers, hashed passwords and authentication information like API keys, OAuth tokens and multi-factor authentication methods were also exposed. Dropbox said that there is no evidence that the threat actor accessed the contents of users’ accounts, such as their agreements or templates, or their payment information. Dropbox was quick to reassure users that this incident was limited to Dropbox Sign users. Read more here Cybersecurity Tips If you create an account on an organisation’s website, you may be prompted to read and accept a privacy policy. A privacy policy outlines the ways that the organisation can access and use your personal information. It’s important to read the privacy policy so that you are aware of how the organisation may use your personal information. Before you accept the terms of the privacy policy, ask yourself the following questions: Who Can Access Your Information? The privacy policy should tell you who will be able to access your information. The organisation may just use your information to improve service, or they may plan to share your information with other third-party organisations. If the privacy policy informs you that other third-party organisations will be able to access your information, research these organisations and find out why your information will be shared with them. What Information Will the Organisation Collect? The privacy policy should also tell you what information the organisation will collect and why they will collect this information. The organisation may want to collect many types of personal information, such as your internet activity or purchase history. Be suspicious of any organisation that asks for information that isn’t necessary to operate. For example, don’t give an organisation permission to track your location if they don’t need your location to perform a specific task. How Will the Organisation Collect Your Information? How Can You Change Your Privacy Settings? Lastly, the privacy policy should tell you how the organisation will collect your information and how you can change your privacy settings in the future. If you know how the organisation collects your information, you may be able to figure out when the organisation will collect your information. For example, an organisation may collect information about you whenever you access their website so that they can remember your device in the future. You also need to know how you can change your privacy settings. If you decide you no longer want to share specific information with the organisation, you may have to change your privacy settings. The next time you have to read a privacy policy, ask yourself the questions above. It’s important to know how organisations access and use your personal information so that you can protect your privacy. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Bridging the Cybersecurity Gap: Essential Eight for SMEs URL: https://mercuryit.com.au/bridging-the-cybersecurity-gap/ It is hard to believe that it has been almost seven years since the Australian Signals Directorate’s Essential Eight was published. Establishing mitigation strategies for patching applications and operating systems, multi-factor authentication, restricting administration privileges, application control, restricting macros, hardening user applications and back-ups, the Essential Eight is a great foundation set of controls that organisations should have in place. Mercury IT had seen adoption of the Essential Eight progressing at only a modest pace amongst its clients. However, following the high-profile, impact breaches — Optus, Medibank and DP World — demand to implement the Essential Eight controls has significantly increased for both new and existing clients. In 2017, implementing the Essential Eight was a colossal task. Today, the tools available to assist with its application are legion. However, many of the required tools — such as a Security Information and Event Management (SIEM) platform and Application Control — are enterprise-grade products with an associated price tag. This is not to mention the generally unpalatable cost of operating an eyes-on-glass, 24-hour/seven-day security operations centre (SECOPS). The major problem is that while many of the effective tools are enterprise-grade, the malicious threat actors don’t limit their attacks to the big end of town. In fact, small to medium-sized enterprises (SMEs) can make far better targets as their cybersecurity environment is generally not as robust. SME enterprise-grade protection with an affordable price tag. This is why Mercury IT has worked for over five years to make scalable enterprise-grade cybersecurity solutions accessible to SMEs. The Mercury IT set of cybersecurity products includes eXtended Detection and Response (XDR), URL filtering, Darkweb monitoring, SIEM, patch management, SECOPS and Application Control. By using economies of scale, Mercury IT has been able to build out a cybersecurity offering that provides enterprise-grade protections at SME prices. Enabling SME customers to benefit from enterprise-grade protection has been a game changer. Mercury IT’s cybersecurity expertise has brought Essential Eight compliance within reach of every organisation, regardless of their size. As the threat landscape continues to provide increasing challenges for both organisations and cybersecurity professionals alike, it’s more important than ever to implement the Essential Eight to minimise the likelihood of a breach. --- # Cyber Insights with Mercury IT- March 2024 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-march-2024/ Welcome to the latest issue of Cyber Insights! In this edition, we highlight a current internet search scam, discuss the latest security breaches, and share some tips on protecting your organisation against insider threats. Current Scams Search engines, like Google, are so popular that many people use the search feature instead of typing a URL. For instance, people may quickly search for their electricity provider's name to find the online payment portal. For this scam, that's precisely what cybercriminals want you to do. This scam tries to trick you into clicking on a fake ad instead of the billing portal you’re trying to find. The scammers purchase a variety of counterfeit utility payment advertisements, and you see those ads during your searches. They know that they can trick you more efficiently if you contact them instead of them reaching out to you. If you click on one of these ads, you will be prompted to dial a phone number. Dialing the number puts you directly in contact with a scammer. They may try to scare you by saying your bill must be paid immediately. Or they may tempt you with an offer to help you save money—but only if you act now. Neither the advertisement nor the person you are talking to is legitimate. Paying them won’t help with your utility bills, but the scammer might use you to help pay them! Follow these tips to avoid falling victim to a utility bill scam: Remember, anyone can purchase an advertisement. Be cautious when clicking on ads, even if they seem relevant. Scammers often ask you to make payments using unusual methods, such as gift cards or money transfers. If something seems strange about a financial transaction, stop immediately! If an offer seems too good to be true, it probably is. Always stop and think before taking action. Latest Security Breaches Exploit: Ransomware Hyundai: Carmaker Risk to Business: SEVERE The Black Basta ransomware group claims that it has stolen 3TB of data from Hyundai Motor Europe. The carmaker confirmed that it is investigating a cybersecurity incident in which an unauthorised third party accessed a limited part of its network. As proof of the supposed hack, the group shared images of folders related to various departments at the company, including legal, sales, human resources, accounting, IT and management. No extortion demand was made public, and the incident remains under investigation. Read more here Exploit: Third-Party Risk Tangerine: Telecom Risk to Business: MODERATE Officials at Tangerine say that the compromise of a contractor’s credentials is to blame for a cyberattack that has resulted in a data breach. The incident came to light last Tuesday. Approximately 232,000 customers have been affected. Exposed customer data includes names, birthdates, mobile numbers, email addresses, postal addresses and Tangerine account numbers. The telecom said that no credit or debit card numbers, driver’s license numbers, ID documentation details, banking details or passwords have been exposed due to this incident. Read more here Cybersecurity Tips What is an “insider threat”? An insider threat is a security threat from within the company or organisation targeted for an attack. It could be a present or former employee, a board member, or anyone with access to the office building or confidential company information. Insider threats are more challenging to prevent, and your organisation needs your help to keep your network safe and secure. Follow the tips below to help protect your organisation and prevent insider threats: Report any suspicious behaviour from employees, contractors, or anyone inside the building. If you see something that looks suspicious, tell your manager immediately. Examples of suspicious behaviour can include: A disgruntled or angry employee wanting to retaliate against the organisation. An employee who often works outside business hours for no specific reason. People bringing unauthorised devices into the workspace. A contractor or inspector wandering outside the area they should be attending to. Keep your desk free of any confidential information. Securely lock confidential information in a filing cabinet when not in use. No passwords on Post-its, period! Lock your computer every time you step away. This is important to prevent those passing by from seeing confidential information on your screen. Be aware of the threat of shoulder-surfing. Watch out for people hanging around your desk acting suspiciously, looking at your screen or items on your desk. They might be looking for confidential information or watching you enter passwords. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Cyber Insights with Mercury IT- July 2023 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-july-2023/ Welcome to the latest issue of Cyber Insights! In this edition we unpack the latest phishing scam, discuss the most recent security breaches and share a checklist for email security. Current Scams Recently, cybercriminals have taken advantage of Cybercriminals use images in phishing emails to impersonate real organisations. Cybercriminals hope to trick you into thinking the email is legitimate using images like official logos and promotional materials. In a recent scam, cybercriminals have spoofed Delta Airlines to steal sensitive information. The body of the email consists of one large image. The image includes Delta's logo, a photograph of one of their planes, and an image of a gift card. The email has a message promising a gift card if you act fast and click the image. After clicking the image, you'll be redirected to a malicious website with a login page. If you enter your login credentials, cybercriminals can access your sensitive information. Remember that cybercriminals can impersonate any legitimate business. Follow the tips below to spot similar scams: Before you click a link, always hover your mouse over it. Ensure that the link leads to a legitimate, safe website that corresponds with the content in the email. If an offer sounds too good to be true, it probably is. Verify any offers of discounts or promotions by contacting the organisation directly. Remember that this type of attack isn't exclusive to Delta Airlines. Cybercriminals could use this technique to exploit any airline in any country. Latest Security Breaches Exploit: Ransomware FIIG Securities: Bond Brokerage Risk to Business : SEVERE A cyberattack on Australian bond broker FIIG Securities late last week was the work of the notorious cybercrime gang BlackCat. The group said that they snatched 385 gigabytes of data. FIIG Securities contacted clients to inform them that the attack might have compromised their personal data including their names, addresses, birth dates, driver's license information, passport scans, bank accounts and tax file numbers. No ransom information was available at press time. The incident has been reported to the Office of the Australian Information Commissioner. Read more here Exploit: Ransomware Shell: Fuel Company Risk to Business : SEVERE Oil and gas behemoth Shell has announced that it too, is a victim of Cl0p's cybercrime spree using the MOVEit exploit. The company says there was no damage to its internal systems but that a small amount of employee data was stolen. Shell is among the hundreds of companies added to Cl0p's dark web leak site. Those companies have been given a deadline of June 21 to pay a ransom or have their data exposed. However, Cl0p posted that Shell refused to negotiate. Read more here Cybersecurity Tips The prevalence of phishing scams is at an all-time high. Because you are the key to preventing a cyberattack within your organisation, it is vital to question the legitimacy of every email you receive. Below is a list of questions about any links or attachments on the email that may help you realise that you are being phished. Are there hyperlinks in the email? Hover over any links and check the link address. Does it match the website for the sender exactly? Did you receive a blank email with long hyperlinks and no further information or context? Does the email contain a hyperlink with a misspelling of a well-known website? (Such as Micorsoft) Is the sender's email from a suspicious external domain? (like micorsoft-support.com rather than microsoft.com) What about attachments? Did the sender include an email attachment that you were not expecting or that makes no sense concerning the email's context? Does the sender ordinarily send you these types of attachments? Did the sender send an email with a possibly dangerous file type? Files with a .TXT extension are typically safe, but beware, files can be disguised with a different file extension. If you notice anything about the email that alarms you, do not click links, open attachments, or reply. You are the last line of defence to prevent cyber criminals from succeeding and making you or your company susceptible. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Boosting Business Efficiency: The Power of Managed IT Services in Brisbane URL: https://mercuryit.com.au/boosting-business-efficiency-the-power-of-managed-it-services-in-brisbane/ In today's fast-paced digital landscape, businesses in Brisbane are increasingly relying on technology to streamline operations, enhance productivity, and gain a competitive edge. However, managing complex IT infrastructure and ensuring its smooth operation can be a daunting task for organisations, diverting their focus from core business activities. This is where managed IT services come into play. This article will explore the benefits and significance of managed IT services in Brisbane, empowering businesses to stay ahead in the digital race. What is Managed IT Services? Managed IT services refer to the practice of outsourcing the management, support, and maintenance of an organisation's IT infrastructure to a specialised service provider. These services are designed to proactively monitor, maintain, and optimise an array of IT systems, such as networks, servers, databases, cloud platforms, cybersecurity, and more. Streamlined Operations and Increased Productivity By partnering with a reputable managed IT services provider in Brisbane, businesses can offload the burden of day-to-day IT management, allowing their internal teams to focus on strategic initiatives and core competencies. With professionals handling routine tasks, system updates, backups, and troubleshooting, organisations experience enhanced operational efficiency, reduced downtime, and increased employee productivity. Proactive IT Support and Issue Resolution Managed IT service providers leverage advanced monitoring tools and proactive approaches to identify potential IT issues before they escalate into major problems. With 24/7 monitoring, rapid response times, and skilled technicians, these services ensure swift resolution of technical glitches, minimising the impact on business operations. By addressing issues promptly, businesses can maintain a seamless IT environment and avoid costly downtime. Scalability and Flexibility Brisbane businesses often face fluctuating IT requirements due to growth, seasonal demand, or project-based needs. Managed IT services offer the flexibility to scale up or down IT resources based on business requirements. Whether it's adding new users, expanding storage, or deploying additional servers, service providers can quickly adapt to the changing needs of organizations, ensuring optimal performance and cost efficiency. Enhanced Cybersecurity As the threat landscape continues to evolve, businesses in Brisbane must prioritise cybersecurity to protect their valuable data and sensitive information. Managed IT service providers specialise in cybersecurity measures such as network monitoring, vulnerability assessments, intrusion detection, threat intelligence, and incident response. These services help businesses stay ahead of potential cyber threats, safeguarding their digital assets and maintaining compliance with data protection regulations. Access to Specialised Expertise Keeping up with the latest technological advancements and maintaining an in-house IT team with diverse skill sets can be costly and challenging for many organisations. Managed IT services provide access to a team of highly skilled professionals who possess extensive knowledge and experience across various IT domains. These experts stay updated with the latest trends, best practices, and emerging technologies, ensuring that businesses in Brisbane leverage the most suitable solutions to drive growth and innovation. Cost Savings Opting for managed IT services in Brisbane offers significant cost advantages compared to maintaining an in-house IT infrastructure. Businesses can eliminate expenses related to hardware procurement, software licenses, ongoing maintenance, and personnel training. With predictable monthly costs and customised service packages, organisations can allocate their IT budget more effectively, optimising resource allocation and maximising return on investment. In the digital age, businesses in Brisbane need reliable and efficient IT infrastructure to thrive. Managed IT services empower organisations to focus on their core competencies while leveraging the expertise of specialised service providers. By streamlining operations, enhancing cybersecurity, providing scalable solutions, and offering cost savings, managed IT services in Brisbane enable businesses to unlock their full potential and stay ahead in today's technology-driven world. Embracing managed IT services is a strategic decision that drives business growth, innovation, and competitive advantage. --- # Cyber Insights with Mercury IT- June 2023 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-june-2023/ Welcome to the latest issue of Cyber Insights! In this edition we discuss the latest Paypal scam, unpack the most recent security breaches and share some tips on email security. Current Scams Cybercriminals have recently utilised PayPal, the popular international online payment platform. Cybercriminals are impersonating PayPal to steal your personal or financial information. In this scam, cybercriminals send you a phishing email claiming that one of your PayPal payments failed and that you must act quickly. The email includes a phone number that appears to be from PayPal, prompting you to call. This phone call seems legitimate, but it is the work of cybercriminals impersonating PayPal. If you call this number, cybercriminals can trick you into giving away your personal or financial information. To avoid similar scams, follow the advice below: Be cautious when providing financial information over the phone. Instead, go to the organisation's official website rather than using phone numbers provided in emails. Be wary of emails that convey a sense of urgency. Cybercriminals use a sense of urgency to catch you off guard and cause you to click or act rashly. Keep in mind that this type of attack is not limited to PayPal. Cybercriminals could use this technique to impersonate any organisation in any country. Latest Security Breaches Exploit: Ransomware Crown Princess Mary Cancer Centre: Specialty Medical Clinic Risk to Business : MODERATE Crown Princess Mary Cancer Centre in Westmead Hospital has disclosed that it has been the victim of a ransomware attack by the cybercrime group Medusa that has led to patient data exposure. The group claims to have grabbed thousands of files, some containing sensitive patient data. It is threatening to expose them if they do not pay $100,000. The clinic has not confirmed what amount or types of data were stolen. NSW Health is investigating the incident in concert with authorities. Read more here >> Exploit: Ransomware TechnologyOne: Software Company Risk to Business : MODERATE The software maker announced it had been successfully attacked on the 3rd of May, with reports pointing to ransomware. The company said that bad actors gained access to its back-office systems. TechnologyOne quickly reassured customers, "TechnologyOne's customer-facing SaaS platform is not connected to the Microsoft 365 system and, therefore, has not been impacted." The incident remains under investigation. Read more here >> Cybersecurity Tips The prevalence of phishing scams is at an all-time high. With you being the key to preventing a cyber-attack within your organisation, it is essential to question the legitimacy of every email you receive. Below is a list of questions to ask yourself about the email's date, time and subject that may help you realise that you are being phished. DATE: Analyse the timing of the email. Did you receive an email you usually get during regular business hours, but it was sent at an unusual time, such as 3 a.m.? SUBJECT: Review the subject line. Does the subject line make sense, given the context of the email? Is the email message a reply to something you never sent or requested? If you notice anything about the email that alarms you, do not click links, open attachments, or reply. You are the last line of defence to prevent cyber criminals from succeeding and making you or your organisation susceptible to phishing attacks. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Cyber Insights with Mercury IT- May 2023 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-may-2023/ Current Scams King Charles III was coronated as the new king of the United Kingdom. When a major historical event occurs, people often look to social media and online news sources for information about the event. Cybercriminals use high-profile news stories to catch your attention and manipulate your emotions. In the coming weeks, we expect to see cybercriminals referencing the king's coronation in phishing attacks and social media disinformation campaigns. Follow the tips below to stay safe from similar scams: Think before you click. Cyberattacks are designed to catch you off guard and trigger you to click impulsively. Be suspicious of emails, texts, and social media posts that contain shocking information about this event. These may lead to disinformation, which is false information designed to mislead you. If you receive a suspicious email, follow your organisation's procedure to report the email. Latest Security Breaches Exploit: Human Error OCR Labs: Technology Company Risk to Business: Extreme OCR Labs, a maker of digital identity technology, has experienced a data breach that has exposed sensitive network data belonging to several major clients. The incident was caused by a misconfiguration of the company's system that left the data available on the internet to anyone. The data leak affected a range of clients, including various financial institutions in the UK and Australia. QBANK, Defence Bank, Bloom Money, Admiral Money, MA Money and Reed are affected. The company said that it has taken steps to address the problem. Read more here Exploit: Supply Chain Cyberattack Coles: Supermarket Chain Risk to Business: Severe Major Australian grocery chain Coles has announced that customers with Coles credit cards may have had sensitive data exposed in the recent Latitude Financial data breach. Coles has used Latitude Financial as a service provider for its store credit cards until 2018. Coles has not been specific about how many customers may be affected or what data is exposed, but it would be from accounts opened before 2018. Read more here Cybersecurity Tips MFA Bypass Attacks You have MFA switched on, so your company is safe, right? Right?...well maybe not. As more and more companies turn on MFA to protect their businesses, criminals have had to find ways around the protection. Here are some of the ways criminals can bypass MFA: MFA Fatigue - MFA requires account access via a personal device. A smartphone pop-up or email may grant access if accepted. However, the criminal spams the user through continued MFA requests until the user clicks approve just to stop the pestering. Token Theft - After introducing an application, multi-factor authentication protocols may install a session cookie on your machine to allow you to continue. If an attacker steals that session cookie and moves it to another device, all the rules to retrieve it are meaningless, and you have a problem. Adversary-in-the-Middle (AiTM) attacks - Machine-in-the-Middle or Adversary-in-the-Middle attacks circumvent MFA. This phishing exploit tricks users into visiting a malicious link, allowing hackers to bypass MFA. An attacker first tricks a user into clicking on a malicious URL that leads to a proxy server. This server lets the attacker intercept network traffic between the user's computer and the legitimate web server. The attack can then steal tokens by capturing the user's web session data, including credentials and MFA session cookies. How to avoid MFA bypass attacks Switch On Number Matching Number matching is a security feature designed to prevent MFA bypass by ensuring that only a legitimate user requesting access can authenticate their identity. The way it works is straightforward: when a user needs to approve a sign-in attempt, they'll be given a code on their browser, which they must then input onto their mobile device to allow the authentication. This is also known as a verified push. Consider Phish-resistant MFA methods Passkeys, introduced by Apple and security keys such as Yubico's Yubikey 5 are built on the FIDO alliance. Using hardware tokens as part of multi-factor authentication is already very safe, and attackers would need access to the physical token to get into an account. One of the safest and most effective ways to stop token-based and AiTM MFA attacks is to combine this with FIDO2 passwordless access. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # 10 Password Best Practices URL: https://mercuryit.com.au/10-password-best-practices/ 10 Password Best Practices With the business world heavily reliant on digitalisation in this day and age, the use of technology in your organisation is unavoidable. Although technology can undeniably give your business an advantage in increasingly competitive markets, there are many troublesome areas to keep an eye on. This is why interest in cybersecurity has risen in recent years. Password protection is the best place to start if you want to ramp up your cybersecurity. Setting a password to secure an entity’s data is called password protection. Only those with passwords can access information or accounts once data is password-protected. However, because of the frequent use of passwords, people tend to overlook their significance and make careless mistakes, which could lead to breaches in security. This makes it imperative for businesses to devise strategies to educate employees about best practices when using passwords. 5 Password “Don'ts” Protect the confidentiality of your passwords by following these five password “don’ts”: 1. Don’t write passwords on sticky notes. Although you may feel that writing down passwords improves password protection and makes it more difficult for someone to steal your passwords online, it can make it easier for someone to steal your passwords locally. 2. Don’t save passwords to your browser. Web browsers are terrible at protecting passwords and other sensitive information like your name and credit card number. Browsers can easily be compromised and a wide range of malware, browser extensions and software can extract sensitive data from them. 3. Don’t iterate your password (for example, PowerWalker1 to PowerWalker2). Although this is a common practice among digital users, it is unlikely to protect against sophisticated cyberthreats. Hackers have become far too intelligent and can crack iterated passwords in the blink of an eye. 4. Don’t capitalise the first letter of your password to meet the “one capitalized letter” requirement. Out of habit, most of us tend to capitalise the first letter of our passwords to conform with the "one capitalised letter" requirement. However, hackers are aware of this, making it easy for them to guess the capitalised letter's position. 5. Don’t use “!” to conform with the symbol requirement. However, if you must use it, don’t place it at the end of your password. Placing it anywhere else in the sequence makes your password more secure. 5 Passwords “Do’s” Protect the confidentiality of your passwords by following these five password “do’s”: 1. Create long, phrase-based passwords that exchange letters for numbers and symbols. For instance, if you choose "Honey, I shrunk the kids," write it as "h0ney1$hrunkth3k!d$." This makes your password harder for hackers to crack. 2. Use multifactor authentication. It’s your responsibility to do everything in your power to keep nefarious cybercriminals at bay. One of the best approaches is to barricade them with multiple layers of authentication. 3. Always use passwords that are longer than eight characters and include numbers, letters and symbols. The more complicated things are for hackers, the better. 4. Always use a different password for every account. If you use the same password across multiple accounts, you are handing cybercriminals a golden opportunity to exploit all your accounts. 5. Use a password manager. A password manager can relieve the burden of remembering a long list of passwords, freeing up time for more productive tasks. Need a password manager? We can help. Adhering to password best practices requires constant vigilance and effort on your part. As a result, it is best to work with an expert managed service provider (MSP) like us who can help you boost your security and put your mind at ease. Contact us for a no-obligation consultation. --- # Cyber Insights with Mercury IT- April 2023 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-april-2023/ Welcome to the latest issue of Cyber Insights! In this edition we discuss the latest scam involving BEC attacks, unpack the most recent security breaches and share some tips about Piggybacking including what it is and what to look out for! Scam Alert Recently, the US FBI has warned about business email compromise (BEC) attacks by cybercriminals trying to steal physical goods. BEC is when cybercriminals spoof business email accounts and impersonate executives to try and steal information, money, or products from an organisation. In this recent BEC scam, cybercriminals start this attack by sending you phishing emails spoofing the domains of legitimate organisations, pretending to be employees of the organisation. In these emails, cybercriminals will ask to buy your business' products, trying to trick you into thinking they're making a legitimate business purchase order. If you agree to the order, the cybercriminals will send you fake credit payment information. These payments look legitimate and are only known as fraudulent after the products have been shipped. These scams can be hard to spot. So, learning how to keep yourself and your organisation safe is essential. Follow the tips below to stay safe from similar scams: To verify the legitimacy of an order request, reach out to the person who allegedly sent the email by phone or in person. The email could be fake even if the sender's email address is from a trusted domain. Cybercriminals can gain access to trusted domains to make their scams more believable. When you receive an email, stop and look for red flags. For example, watch out for emails sent outside of business hours and emails containing spelling or grammatical errors. Security Breaches Exploit: Supply Chain Attack QIMR Berghofer: Medical Researcher Risk to Business : SEVERE Patients who participated in Australia's most extensive skin cancer study are learning that bad actors may have accessed their personal data as part of a data security incident at a third-party contractor for the medical research company QIMR Berghofer. Servers owned and operated by Datatime, a technology company hired by QIMR Berghofer to scan and process surveys, were hacked, resulting in the personal data of an estimated 1,000 Australians becoming exposed. As a result, impacted patients may have had data accessed by cybercriminals, including their names, address, and Medicare numbers. Datatime maintained that it intended to delete the survey data after 12 months, but hackers struck before that. Read more here >> Exploit: Malicious Insider Twitter: Social Media Platform Risk to Business : SEVERE Troubled social media giant Twitter has disclosed that some proprietary source code for Twitter's platform and internal tools was exposed via GitHub. Twitter recently filed a California court filing to force GitHub to turn over data that could help the platform find the person responsible for the leak and give them information about any other GitHub users who may have downloaded the data. Twitter has also asked GitHub to take down the code. The New York Times reports that Twitter sources tell them that the company suspects an employee who left last year may be responsible for the leak. GitHub has not commented on whether or not it would comply with Twitter's request. Still, the information has been available for several months. Read more here >> Cybersecurity Tips Piggybacking To kids, piggybacking is when someone jumps on your back, and you carry them around for a while. In the business world, piggybacking is when you let someone you do not know enter a door you just opened. For example, many organisations use biometrics, key cards, or even regular keys to open locked doors. These could be doors to the building, parking garage, or office. Piggybacking is when someone you do not know waits for you to open a locked door and enters behind you. Many people allow this to happen because they want to be friendly and courteous and open doors for people. You may even hold the door open for them. While this may be a nice gesture in public places, at the workplace, this could end up costing you. The bad guys, just like they would try to trick you with a fake email, are targeting your good nature to gain access to a secured building. If someone you do not know is trying to enter the door behind you, you can do a couple of things to still be courteous and follow the rules. Ask them where they are going and who they are there to see, then escort them to the office of the person they are going to see and verify that they are supposed to be there. Kindly decline to let them in and explain that your organisation has a strict no-piggybacking rule. Once the bad guys can access your offices, they can plug into any internet outlets, sit down at any open and unlocked workstation, or place infected USB keys around the hallways and bathrooms. Remember, when it comes to piggybacking, kindly decline or insist on escorting them to the person they are there to see. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Cyber Insights with Mercury IT- March 2023 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-march-2023/ Welcome to the latest issue of Cyber Insights! In this edition we discuss the latest scam involving ChatGPT, unpack the most recent security breaches and share some tips about Pretexting including what it is and what to look out for! Current Scams ChatGPT, an artificial intelligence (AI) chatbot created by OpenAI, has risen in popularity since its release last year. Now, cybercriminals are using ChatGPT's popularity to lure you into phishing scams. In one of these scams, cybercriminals try to trick you with a fake new ChatGPT feature. The scam starts with a phishing email informing you that ChatGPT has a new feature to help you invest in the stock market. If you click the link in the email, you'll be taken to a spoofed ChatGPT website and prompted to enter your contact information. Then, a representative will call you and request that you submit a payment to open your investment account. Unfortunately, if you submit a payment, that money won't help you invest in the stock market. Instead, cybercriminals will steal it to invest in their malicious pursuits. Follow the tips below to stay safe from similar scams: Before you click a link, hover your mouse over it. Then, ensure that the link leads to a legitimate, safe website that corresponds with the content in the related email. Be cautious of unexpected investment opportunities. Remember, if something seems too good to be true, it probably is! Never submit payments to a bank account provided in an email, text message, or phone conversation. Instead, navigate to the organization's official website to submit a secure payment. Security Breaches Exploit: Supply Chain Attack The Good Guys: Discount Retailer Risk to Business: SEVERE Discount warehouse retailer The Good Guys have experienced a data breach due to an incident at a service provider. The company is contacting 1.85 million past and present members of its Concierge loyalty program to let them know that some of their personal information may have been exposed in 2021 in an incident at the company that ran Good Guys' loyalty program, Pegasus Group Australia (now called My Rewards). A Good Guys spokesperson said the company no longer has a relationship with My Rewards. The company said that no customer data like identity documents or financial information such as driver's license, passport or credit card data was exposed in this breach. Read more here >> Exploit: Human Error National Health Service (NHS): Government Agency Risk to Business: Moderate Britain's National Health Service (NHS) has experienced a data leak caused by an employee error. Around 14,000 employees at The Liverpool University Hospital Foundation Trust (LUHFT) have been informed that their personal data may have been exposed because of any employee blunder. In the incident, an employee mistakenly sent an Excel file to hundreds of NHS managers and 24 external accounts containing personal and sensitive payroll information. Impacted workers have been informed in a letter of apology, and the incident has been reported to the Information Commissioner's Office. Read more here >> Cybersecurity Tips Pretexting Pretexting is when the bad guys create a false scenario using a made-up identity or pose as someone you know to manipulate you into divulging personal or sensitive information. For example, they often pose as bank or credit card company employees or even as coworkers. How it Works: Common Tactics of Influence The bad guys will try to persuade you to let your guard down and giving them what they're looking for. Often, they don't even need information specific to your organization to trick you. See below for an example of two common tactics used to influence victims in pretexting scenarios: Influence by Authority For example, you receive a call at work from someone demanding immediate assistance, using an aggressive and authoritative tone. This person establishes their authority by using an executive-level or official-sounding "job title". They may even insult you for not being familiar with "who they are". These scare tactics alone often sway victims into giving away sensitive information or complying with a request. It's human nature to act in a responsive manner around someone of authority, but don't fall victim to false claims of authority! Influence by Obligation For example, you receive a call from someone posing as a member of your IT department. The bad guy tells you they've found malicious activity on your work computer and begin questioning your recent browsing history–implying that you've reached a malicious website and have put the company in danger as a result. Then, they demand you update your password with a more "secure" password which they provide. Would you feel obligated to comply with their instructions? Many unsuspecting individuals would–but don't fall victim to a false sense of obligation! How Can I Avoid Falling Victim to Pretexting Scenarios? Remember the following to help protect your organisation against pretexting scenarios: Never give out sensitive information over the phone, online, or by email unless you are absolutely sure you know who you're dealing with or you initiated contact with the individual. If the caller claims to be an employee, but their request seems suspicious, verify their identity through a trusted party and let them know you'll call them back. If the caller questions the need for your verification efforts, explain that you're following the process required for your position. Maintain a respectful but forceful attitude. Make sure you're familiar with your organisation's protocols for handling requests for information or ask your supervisor if you need assistance. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Cyber Insights with Mercury IT- February 2023 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-february-2023/ Welcome to the latest issue of Cyber Insights! In this edition we discuss the latest scam involving DocuSign, unpack the Fire Rescue Victoria security breach and share some tips around Personally Identifiable Information (PII). Scam Alert The scam starts with a fake email that appears to be from DocuSign. The email asks you to review and sign a document as soon as possible and contains an HTML attachment. Instead of an important document, the attachment is a blank SVG with malicious code. Because this code is hidden inside the attachment, the email can bypass security filters. If you download the attachment, the code will redirect you to a malicious website that will prompt you to enter sensitive information. If you enter this information, cybercriminals can use it for their own purposes. Follow the tips below to stay safe from similar scams: Always think before you download an attachment. This cyber attack is designed to trick you into impulsively downloading attachments. Never click a link or download an attachment in an email that you aren't expecting. While this attack targets DocuSign users, this scam could be used with any organisation that manages electronic agreements. Enable multi-factor authentication (MFA) on your accounts when it is available. MFA adds an extra layer of security and lowers the chance of cybercriminals logging in to your account. Security Breach Exploit: Ransomware Fire Rescue Victoria (FRV): Public Safety Service Risk to Business : SEVERE The Vice Society ransomware group has claimed responsibility for a ransomware attack on Fire Rescue Victoria that resulted in data theft. The December 2022 attack led to a widespread IT outage for the fire department, a public safety threat. Vice Society has released a sample of the stolen data on its dark web leak site. That leaked data includes budget documents, job applications and other sensitive information. FRV has recovered many critical systems since the incident. However, reports say its overall IT infrastructure is still not fully operational. As a result, FRV has had to resort to using older, offline resources such as dispatch crews, mobile phones, pagers and radios. Firefighting crews and trucks remained operational throughout the incident, which remains under investigation. Read more here >> Cybersecurity Tips Personally Identifiable Information, or PII Sensitive information is privileged information that, if compromised through alteration, corruption, loss, misuse, or unauthorised disclosure, could cause serious harm to an individual or organisation. Therefore, you must always give privileged information the highest level of protection. Here we discuss Personally Identifiable Information or PII. For data protection, Personal Identifiable Information is defined as any instance of an individual's first name, first initial, last name, and any additional confidential items. The additional confidential items include Medicare number, driver's license, credit card number and expiration date, date or place of birth, wage and salary information, vehicle identifiers including license plate numbers, medical history and Tax File Number. The key to remembering if the information can be used to uniquely identify a specific individual using non-public information is PII which must be protected. Example: John Smith was born on January 1, 1965. Which listing below would be an example of PII? A) John Smith – DOB 1/1/1965 B) John S. – DOB 1/1/1965 C) John Smith – DOB 1/1/xxxx The answer is A. B and C are not examples of PII alone. Employees who mishandle sensitive data can cost their companies money, customer trust, and even more government regulation. So do your part to keep your sensitive information safe at all times. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Data Minimisation URL: https://mercuryit.com.au/data-minimisation/ Businesses frequently gather and keep a tonne of personally identifiable information (PII) on their clients and customers in the digital era. But keeping superfluous PII on hand can have severe consequences for organisations and people. Data breaches and cyberattacks are more likely, but there is also a chance that personal data will be misused or accessed without authorisation. Additionally, companies that keep superfluous PII in breach of privacy rules may be subject to legal repercussions. On the other hand, reducing the retention of PII can increase data security, safeguard people's privacy, and foster confidence and trust. The hazards and advantages of keeping unneeded PII will be discussed in this blog. We will also cover how companies can reduce data collection and retention practices while abiding by Australian privacy laws. Australian Privacy Laws Personal data collection, use, disclosure, and preservation are governed by Australian privacy regulations. These regulations protect personal information in public and private sectors from misuse, unauthorised access, and disclosure. Personal information processing in Australia is governed by the Privacy Act 1988 (Cth). These principles govern the collection, use, disclosure, storage, and security of personal information. In addition, specific industries are covered under the Privacy Act and sector-specific privacy standards such as the Health Privacy Principles and the Privacy (Credit Reporting) Code. Individuals in Australia have the right to access, correct, and complain about privacy breaches to the Office of the Australian Information Commissioner (OAIC) under privacy legislation. Australian privacy laws safeguard individuals' privacy and require corporations and organisations to handle personal data appropriately. Business Risks Businesses face significant risks when they keep unnecessary personally identifiable information (PII). Not only is the risk of data breaches and cyber-attacks increased, but there is also the possibility of misuse or unauthorised access to personal information. For example, suppose a company keeps more PII than is necessary. In that case, it increases the chances that employees or third parties will misuse or gain unauthorised access to this information. This could result in financial loss, reputational damage, and legal ramifications for the company. Furthermore, retaining unnecessary PII violating privacy laws can result in legal ramifications such as fines and penalties. Businesses can reduce these risks and protect their own interests and the privacy of their customers and clients by minimising the retention of unnecessary PII. Business Benefits Businesses can benefit from reducing the retention of PII. Improved data security and privacy protection for individuals. Reduce the risk of data breaches and cyber attacks Increase trust from customers because they will feel that their privacy is respected and protected. Reduce the risk of legal consequences and reputational damage Steps Businesses' can take There are measures that companies can take to reduce the amount of unnecessary PII that they store. Carry out an investigation into the procedures currently used for collecting and storing data. Locate and remove any unnecessary personally identifiable information. Establish stringent safeguards and access policies for the remaining personally identifiable information. Review data retention practises to ensure compliance with privacy laws and update them regularly. Conclusion Keeping unnecessary personally identifiable information (PII) on file can put businesses at serious risk. These risks include a greater likelihood of cyberattacks and data breaches, personal data being misused or accessed without authorisation, and the possibility that privacy laws will be violated, resulting in legal ramifications. On the other hand, reducing the retention of PII can have several advantages, such as better data security and privacy protection, increased customer and client trust, and a decreased risk of legal repercussions and reputational harm. Businesses can ensure that they are complying with privacy laws and protecting their customers' interests by conducting routine reviews of their data collection and retention practices and implementing strict controls and access policies for personal information. Last but not least, it is in the best interests of businesses to safeguard their own interests and reputation to prioritise data minimisation and compliance with privacy laws. Author | Chris Haigh | Chief Information Security Officer, Mercury IT --- # Building Habits for a Secure Future URL: https://mercuryit.com.au/building-habits-for-a-secure-future/ Rather than relying solely on your IT team or the most recent security solutions, your company's security programme should begin with its employees and strong security policies. Combining a well-drafted cybersecurity policy with comprehensive security awareness training can significantly reduce the likelihood of a data breach. It is your responsibility to provide security training to all of your employees so that your company can withstand cyberattacks while continuing to operate normally. Regular training will also assist you in developing a security-focused culture within your organisation and making cybersecurity awareness second nature to your employees. Cybercriminals can target your employees at any time in order to obtain sensitive business data. If your employees receive regular security awareness training, their calculated decision-making and quick response can effectively block deceptive threats. The Impact of Security Culture on Employees A one-time employee training session for the sake of compliance is insufficient to improve your company's cybersecurity posture. Regular security awareness training is the only way to truly protect your company from the ever-increasing cyberthreats The following statistics throw light on why security awareness training is essential in today’s threat landscape: Smishing has increased over 100% over last year (1) Managers and executives make up only 10% of users, but almost 50% of the most severe attack risks (1) During the 2020-21 financial year, the ACSC observed over 67,500 cybercrime reports, an increase of nearly 13% from the previous financial year. (2) In 2022, a ransomware attack occurs every 11 seconds. Last year, the ransomware industry shot up to a whopping $20 billion. A report by Privacy Australia revealed mobile ransomware attacks are also up by 33%. The goal of creating a security-focused culture is to instil good security habits in employees. For example, simply locking one's computer screen when leaving the workstation unattended can prevent unauthorised users from accessing data. Once your employees have been properly trained, they will be more aware of the company's security policies and will understand that their employer's cybersecurity is also their responsibility. Implementing Efficient Security Awareness Training Until recently, security awareness training was delivered through lectures using a slide deck. Businesses held these training sessions once a year or during onboarding. These sessions, however, were ineffective due to their uninteresting nature and lack of follow-up sessions. Implementing robust security awareness training is critical if you want to create a security-focused culture. Here are a few pointers to help you successfully implement security training: Make the training sessions interactive - Because high-quality video captures more attention, your employees will be more interested if you deliver training in that format. Only include text content as a supplement to the video. Make sure the presentation is appealing to your employees so they don't miss out on important information. Also, ensure that your employees can clear their doubts through face-to-face or virtual discussions with subject matter experts. Break the training into smaller modules - Because your employees' attention spans will almost certainly vary from one another, breaking training sessions into smaller modules will help them retain information faster overall. You can send training modules to your employees on a regular basis to keep them up to date on the latest security issues. Smaller units have a higher retention rate than longer pieces of content. Encourage self-paced learning - Allow your employees to learn when and how they want. Of course, this does not mean that deadlines should not be set. Give your employees enough time to complete each training module based on its complexity. Training materials must be relevant - Training materials must not contain outdated information. Given how quickly the cyberthreat landscape changes, training must be updated on a regular basis and must cover new cyberthreats to prevent hackers from duping your employees. Please keep in mind that the content should not be too technical. The training material must be delivered in an understandable manner so that employees can apply it in their daily work scenarios. Conduct quizzes and mock drills to assess your employees' preparedness - To assess your employees' preparedness, you must conduct regular tests, including mock drills, that assess alertness based on their responses to simulated scams. Transform Your Weakest Link into Your Prime Defence Regular security awareness training can help develop a transformative security culture within your business, thus enabling your employees to detect even sophisticated cyberthreats and undertake adequate action. Implementing robust security awareness training can be difficult and time-consuming. However, the advantages far outweigh the costs. You want your employees to be the first line of defence against cyberthreats, whether they are current or imminent. If you need additional guidance or are unsure where to begin with your cybersecurity training, please contact us so we can discuss how Mercury IT can help. The Human Factor 2022 (Proofpoint) The ACSC Annual Cyber Threat Report 2020–21 --- # Cyber Insights with Mercury IT- January 2023 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-january-2023/ Welcome to Cyber Insights for 2023! In this edition we unpack the latest Facebook scam, current breaches and share our top tips on creating secure passwords! Scam Alert Organisations and public figures typically use Facebook pages to connect with their community. However, anyone can make a Facebook page, even cybercriminals. They use social media, and cybercriminals spoof brands and organisations to trick people into trusting them. In this recent scam, cybercriminals use actual Facebook pages to impersonate Facebook itself.\ The scam starts with a fake email that looks like it's from Facebook. The email states that your account has been deactivated and will be deleted in 48 hours unless you click a link. If you click the link, you're taken to an actual Facebook post from a page named "Page Support" that uses the Facebook logo. The post directs you to click another suspicious link that takes you to a fake login page. If you enter your login credentials, you'll give cybercriminals access to your Facebook profile and the ability to scam your friends and family. Don't be fooled! Follow the tips below to stay safe from similar scams: Watch out for a sense of urgency in emails. Phishing attacks rely on impulsive actions, so always think before you click. Remember that this type of attack isn't exclusive to Facebook. Cybercriminals could use this technique on any other social media platform. If you receive an urgent notification, verify that it's legitimate. Then, navigate directly to the organisation's website or official app to view details. Latest Breaches Exploit: Hacking LastPass: Software Company Risk to Business: EXTREME LastPass has experienced a second data breach. The company disclosed in its blog that hackers used information obtained in the August 2022 LastPass breach to access customer information in third-party cloud storage shared with its corporate partner GoTo. LastPass specified that customers' stored passwords were unaffected and remained safely encrypted. It is unclear whether or not clients of GoTo and LogMeIn were affected by this incident. All the brands involved said that the incident is under investigation. LastPass specified that it engaged Mandiant as part of that effort. No specifics as to what information was exposed were available at press time. Read more here >> Exploit: Misconfiguration Telstra: Telecommunications Risk to Business: SEVERE Another breach at Telstra has left the information of over 130,000 customers whose details were supposed to be unlisted exposed. The company pointed to a "misalignment of databases" as the cause behind the incident, which made the name, addresses and phone numbers of customers who had requested to be unlisted available via Directory Assistance or the White Pages. Telstra says it has partnered with IDCARE to develop a response plan and support affected individuals. In October, Telstra also suffered a security breach that exposed the personal data of an estimated 30,000 past and present Telstra employees days after the massive Optus incident. Read more here >> Cybersecurity Tips Creating strong passwords should be your top priority in keeping your online life secure. Weak passwords can lead to stolen identities, data or money loss, and even the loss of a job and reputation. You've probably heard suggestions for creating secure passwords before. Experts advise using long, complex, random words, letters, numbers, and special character combinations. However, that advice has changed to longer passwords without the need for complexity. To improve your password security, use the following advice: Make your passwords more secure. Strong passwords typically contain at least eight characters. Longer passwords or passphrases are more secure than shorter passwords with complexity. Make use of a passphrase. Recently, security standards strongly advise against using a single word as a password. Instead, a good passphrase is unique to you so that you remember it, but also one that is secret enough that no one else can guess it. Never use obvious or personal information in your passwords. For example, never include your name, email address, phone number, birth date, or other personal information. Never use the same password for more than one account. If cybercriminals steal your password from one account and use it on other accounts, you've given them access to all the accounts where you've used the same password. Make use of a password manager. Use a password manager to create, store, and sync complex passwords across multiple devices if your organisation allows it. You only need to remember one master password with password managers. Check with your internal IT (or other relevant) team to see if this is possible. Most importantly, if one exists, always adhere to your organisation's password policy. Password policies are designed to protect you and your organisation. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Important Update URL: https://mercuryit.com.au/important-update/ IMPORTANT UPDATE: Over the years we get contacted by New Zealand customers of Mercury IT, New Zealand and it is important to note that the two companies are not affiliated or connected in any way! ‘Contact us’ --- # Cyber Insights with Mercury IT- November 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-november-2022/ Welcome to Cyber Insights. In this edition we unpack the many breaches that have recently occurred and how this can lead to an influx of persuasive scam emails! Our cybersecurity tips highlight Smishing, what it is and what to look out for so you don't get caught out! SCAM ALERT With the recent hacks on Optus, Medibank and others (8 in total that we know of – see Breaches below for more information) over the last month, criminals have very sensitive data such as Driver's License numbers, Tax File numbers, Medicare numbers, date of birth and other personal information. The type and amount of information are concerning. With this type of information, criminals can create persuasive emails using these details to appear more authentic. Then, they will try to gain more knowledge, obtain money from you or use it to extort money. This type of attack is known as phishing. Just like phishing, the criminals could also use SMS or a phone call or a combination of them to try and part you from your money. Follow the tips below to keep yourself safe: Watch out for a sense of urgency in messages that you receive. Phishing attacks rely on impulsive actions, so always think before you click. Never click a link or download an attachment in a message that you aren't expecting. Verify any requests for payments Verify a caller by calling the official number. Remember, they have information about you to sound very convincing Monitor your credit file Latest Breaches Exploit: Hacking The Dialog Group: IT Consulting Company Risk to Business : SEVERE Singapore Telecommunications Ltd (Sing.tel) has announced that its Australian division, The Dialog Group, has experienced a cyberattack that potentially exposed information about 1,000 current and former employees and an estimated 20 clients. Singtel, which acquired The Dialog Group earlier this year, also owns Optus, the scene of a massive breach just a few weeks ago. However, company officials say that the two incidents are not connected, and the exact nature of the stolen data was unavailable at press time. Read more here >> Exploit: Ransomware Medibank Private: Health Insurer Risk to Business: SEVERE Australia's largest private health insurer Medibank Private has confirmed that it fell victim to a ransomware attack last week. The health insurer said that the cause of the attack was compromised credentials. Bad actors used those credentials to access Medibank's systems on Wednesday and deploy ransomware. The company's initial investigation has determined that no customer data was accessed or stolen, but this has changed. Medibank temporarily closed some systems while the activity was investigated but resumed normal business last Friday. Read more here >> CYBERSECURITY TIPS Watch Out for Smishing! Many companies, products, and services have started offering text message alerts to keep you up to Date. Unfortunately, scammers are aware of these alerts, and they're taking advantage of unsuspecting individuals. They send a text with dangerous links or prompt you to respond with personal information by posing as your bank, an online account, or other services – to name a few examples. This Short Message Service (SMS) or text-based phishing scam is called Smishing, and the bad guys have taken a liking to it. How it works… The following are only a couple of examples. The bad guys are constantly coming up with new ways to "smish" you: Use this Link: Scammers pose as a familiar company or service and send shocking alerts such as – "Your account has been locked due to multiple failed logins." – accompanied by a link to supposedly resolve the issue. Smishing links can contain malware that instantly installs if you make the mistake of clicking. This malware can include keystroke-logging software or permit access to your applications and files–making it easy to steal your identity or hold your files for ransom. Call this Phone Number: Smishing attacks often try to persuade you into calling a number by telling you there's been an issue with your account or that suspicious activity has been detected. A scammer will be ready to take your call and persuade you to provide personal information or making a payment. Think before you tap! Remember that government agencies, banks, or other legitimate businesses will never request sensitive information over text messages. Take your time. Much like email phishing, texting scammers often use the social engineering tactic of creating a false sense of urgency in their message. Never click on any links or call any phone numbers in unexpected texts. Instead, contact the company directly if you want to verify the text message. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Cyber Insights with Mercury IT- October 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-october-2022/ Welcome to Cyber Insights. In this edition we highlight callback phishing scams, share the latest security breaches and explain how phishing attacks land in your inbox! SCAM ALERT Recruiters often use LinkedIn, a popular professional networking platform, to reach out to potential candidates about job opportunities. Unfortunately, cybercriminals send fake job opportunities through LinkedIn. Currently, they're taking advantage of cryptocurrency's growing interest to send fake job openings at cryptocurrency organizations. In this scam, cybercriminals send you a recruitment message about a job opening at a prominent organization in the cryptocurrency industry, such as Crypto.com. The message claims that positions fill quickly and urges you to download an application attachment. However, downloading the attachment could also be downloading malware that can steal your sensitive information. Don't let a job opening scam trick you. Instead, follow the tips below to keep your sensitive information safe: Watch out for a sense of urgency in messages that you receive. Phishing attacks rely on impulsive actions, so always think before you click. Never click a link or download an attachment in a message that you aren't expecting. Verify any recruitment messages by viewing the job openings that the organization has posted from their verified LinkedIn account or on their official website. Then, submit your application directly through these posts. BREACH UPDATE Australia's second-largest telecom Optus has been hit by a ransomware attack. One of the most significant data breaches in Australian history, the incident impacts an estimated 10 million customers or about one-third of Australia's population. A bad actor using the moniker "optusdata" claimed to be the force behind the attack. Initially, he posted a ransom demand of $1.5 million and the personal data of about 10k people on a dark web forum. They've since withdrawn that post. Some news articles have pointed at an API interface configuration error as the access point for the bad guys, but that has not been confirmed. The incident is under investigation. Read more here >> CYBERSECURITY TIPS You may already be aware that you should not open email attachments with an extension such as ".exe", but did you know that even PDFs or Word Documents can be unsafe to open? Opening these attachments from senders with malicious intent can cause your computer (and any networks to which you are connected) to be compromised, hacked or even riddled with ransomware. What are the unsafe file types to look out for? This question is better answered by listing file types that are generally considered safe to open. The truth is that almost all file types are at risk of being "booby-trapped" to attack your computer or device. The general rule is to NEVER open an email attachment if you do not know who it came from or why you received it. How can I tell if an attachment is safe to open? Ask yourself: Was I expecting to receive this attachment? Did it come from who I would expect it to come from? Check email addresses for any "red flags" that may indicate the email address has been spoofed or faked. Never open an email attachment if you don't recognise the sender that it came from. If you recognise the person or email address sending you the file, but it was still unexpected, contact them first through a different form of communication (such as by phone) to ask them if they intended to send you the file. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # State of Employment URL: https://mercuryit.com.au/state-of-employment/ It seems like every other day we are waking up to news of another association, union or supporting body on the news complaining that there aren’t enough candidates in their industry. It’s hard, when there are less employees and that the remaining employees often have to pick up the difference. That can, in some cases lead to burn out, exhaustion and sickness. Inevitably, this results in less employees to complete the work thus completing the circle. It appears that many industries are back to normal with minimal restrictions, we still see that there are requirements for those that test Covid positive to isolate and work remotely. We can acknowledge that also puts a strain for those industries that cannot work remotely (such as hospitality, aged care and transportation to name a few). This puts further strain on already impacted sectors. It has been noted that during the pandemic (especially those that had lengthier lockdowns) people took the time to re-evaluate what they want. This went into all aspects, where people live, what they do for a living, what hobbies they are interested in. Whilst the media has coined the term the great resignation, I prefer another term; the great realignment. What I mean by this is, the changes that we were used to seeing over several years, we saw in six months. I recount several conversations of people (both in a professional and personal sense) decide to go chase after what they were really interested in doing. To an extent, the sense of control was back. Which is great, well except if you are trying to find more people to fill active vacancies. Currently the unemployment statistics for Australia are at historical lows with reports that there are more job ads than people looking for work. This is scenario that I thought I would never see in my working life. What does this mean? The available talent pool is so small, employers are struggling to find staff or even retain staff. This in some cases drives up employee salaries and drives up the cost of service. And the cycle continues as we have to pay more for services etc. What is missing? The part that is most likely missing and I was pleased to see this starting to make headlines is skilled migration. For many years, the information technology sector has relied on skilled migration to fill the gap of knowledge. Current forecasts by CIIER indicate that in 2026 we will need 1.1 million IT jobs across multiple occupational groupings. That is an average annual growth of 5.4%. The December release of ABS Australian growth statistics had the population growth at 0.5% or 128,000 people. This sad statistic means that we have to attract talent from overseas not only for technology jobs (which lets be honest is difficult as the world has embraced the work from anywhere), but for future jobs and the jobs that we need filled today. Whilst I appreciate that there will now be a backlog of people attempting to enter, and we have to do all the checks to ensure our security and safety. I would encourage that we do everything we can in order to assist all industries across all geographics. For industry, I would encourage you to look at what your teams are doing. Is there anything that is not adding value? Why do I ask this? Maybe we can get more done with less. Maybe we can focus on the things that really add value and that just might reduce the stain to your teams and business. Parkinson’s Law “Work expands to fill the available time”. Whilst we might think there is a lot to do, the question is, is the work that we are doing adding the most value? Author | Paul Walters | Operations Manager, Mercury IT ‘Contact us’ --- # The End of Cyber Apathy- Hopefully! URL: https://mercuryit.com.au/the-end-of-cyber-apathy-hopefully/ You would have to be living under a rock to have missed the well-publicised Optus API breach. Depending upon whom you believe, the breach is somewhere between a laughably simple attack of opportunity, to a highly sophisticated targeted attack. Regardless of the mechanism for entry, the immutable fact is that Optus has failed in its obligations to ensure that its customers data was protected. My big problem here is that Optus is by no means alone in their failure to take Cybersecurity seriously. I have been screaming in the wilderness for years about getting organisations to take Cybersecurity more seriously, and maybe, just maybe, this is the moment of change. This is by no means the first major breach we have seen, so why is it different this time? Personally, I feel the difference is the level of interest from the media, which has resulted in a large outcry from Optus customers. And, I may say, a level of hysteria that I have not yet seen from the public around the misuse of their information. For the reality is, almost everyone has had a level of apathy around their personal information for years and no amount of reporting or articles seemed to sway people to take this a bit more seriously. To be frank, most of the people standing indignantly in lines at Transport Departments to get a new Drivers Licence will inevitably have very poor password hygiene, very poor social media information or configuration governance, or any real understanding of what information they have shared with numerous websites, companies, agencies or indeed freely with almost anyone that would ask. However, for all of my seething annoyance, this hopefully is a watershed moment where we may just see some change. Certainly, Government has not been the catalyst of change. The laughably small fines (and almost complete lack of applying them) they set under the Notifiable Data Breach legislation has had no tangible impact on businesses improving their cybersecurity posture. The fact that our Minister for Cyber Security is finally taking this seriously gives me at least a small amount of confidence that we may see some more action. Unfortunately, governments have previously adopted a strategy that corporations would do the right thing by their customers. This of course was, and is, completely naïve. Corporations are driven by profit, and spending money on cybersecurity has previously been seen as providing no ROI. I am sure we will see in the medium term, as customers abandon Optus in droves, that there is a net value in NOT losing customers due to perceived cost savings. I digress, I was talking about government. What we need to see is increased fines and significantly increased application of those fines for corporations for failing in their obligations to protect their customers data. We need to look to Europe’s GDPR as a real example of a jurisdiction that is taking cybersecurity seriously. I would like to see us take the lead globally on this, and hopefully this is our moment to embrace change. Indeed, we have just seen state governments allow people to change their driver’s licence proactively. Previous to this instance, you could only change your licence number if you had PROVEN evidence that fraud had taken place. I will say that most people have probably handed their driver’s licence out more times than they can even remember….and the likelihood is high that at some point that info has already been breached at least once. The answer here is not to have to change document ID every time a breach occurs, the onus really needs to be on the organisation that is using these documents to ascertain identity to ensure that it is legitimate. In fact we also need to see extensive fines for any organisation that allows anyone to use stolen credentials to set up an account. Honestly if a financial institution or company takes a document ID such as a licence or passport number without the physical document or adequately ensuring the identity of the individual, that organisation needs to fined out of existence. This is by no means the last time we will see a trusted organisation come afoul of a cybersecurity failing. For years we have been attempting to impart the seriousness of cybersecurity to businesses of all sizes, my hope is that we can sow the seeds of change from this disaster. Author | Martin O'Riordan | General Manager and Head of Cybersecurity, Mercury IT Contact us --- # 6 Powerful Benefits of IT Consulting and Management URL: https://mercuryit.com.au/6-powerful-benefits-of-it-consulting-and-management/ In the 21st century, every business must have a strong presence online to succeed. This is true regardless of the size of your business or the industry you're in. However, with an increase in IT infrastructure and online services, it's only natural that additional help and investment is needed. That's where the benefits of IT consulting and management can provide invaluable support, increasing efficiency and saving you money. 1. Improved Efficiency Business IT consultants are experts in their field and can quickly identify areas of your IT infrastructure that need improvement. This can lead to increased efficiency and productivity for your business. Inefficient administrative tasks, confusing operational processes, and repetitive customer communication can all be streamlined and automated with IT assistance. 2. Cost Savings One of the biggest benefits of IT consulting is that it can help you save money, by identifying cost-effective solutions to your IT needs. Often this involves diagnosing obsolete software and systems that can be either decommissioned or streamlined. IT consultants can also negotiate better rates with vendors on your behalf and often have access to specialised platforms and software that aren't available to the general public. 3. Increased Security Sadly, we see many businesses suffer from a lack of preparedness around cybersecurity. Waiting until an attack has happened before responding means you’re already losing time and money, not to mention the potential reputation damage that can come from notifying your customers. Business IT consultants can help you implement strong security measures to protect your data and systems from cyber-attacks. Phishing, malware, trojan horses, viruses, identity theft, and keylogging can be very profitable for cybercriminals since they can effectively hold your business to ransom. With cybercrime rates set to inevitably rise, staying proactive with cybersecurity allows for peace of mind by knowing your business is protected. 4. Disaster Recovery and Business Continuity In the event of a disaster, whether it be a fire, flood, earthquake, hardware failure or pandemic, having an IT consultant on board helps to ensure your business can continue operating with minimal disruption. Your consultant will have a comprehensive understanding of your IT infrastructure and will be able to put together a disaster recovery plan that covers all eventualities. This plan will enable you to get your business back up and running as quickly as possible, with minimal loss of data or productivity. Business continuity plans (BCP) are essential for all businesses, and an IT consultant can help you develop a comprehensive strategy to ensure your business remains operational. 5. Increased Customer Satisfaction By optimising your IT infrastructure, business IT consultants can help you increase customer satisfaction by providing a more efficient and streamlined service. This can lead to higher customer retention rates and improved brand loyalty. 6. Flexibility Business IT consultants can provide support on an as-needed basis, giving you the flexibility to scale up or down according to your changing needs. This can be a more effective use of your resources than maintaining a full-time in-house IT staff, which may not always be necessary. The benefits of IT consulting support are clear and can make a big difference in the efficiency and productivity of your business. If you’re interested in working with a serviced IT company to support your business, then Mercury IT is a long-established, trusted provider for a wide range of industries. We would welcome an enquiry about how we can find the right solution for your business and budget. --- # Cyber Insights with Mercury IT- September 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-september-2022/ Welcome to Cyber Insights. In this edition we highlight callback phishing scams, share the latest security breaches and explain how phishing attacks land in your inbox! SCAM ALERT While making a phone call may seem harmless, you should always consider who's on the other end of the line. Cybercriminals can use callback phishing scams to trick you into calling them directly. Once you're on the phone, cybercriminals will ask you to share sensitive information or grant access to your device. In one scam, cybercriminals send you an email that says you've subscribed to a service with automatic payments. The email also includes a phone number you can call if you have any questions. When you reach the phone number, cybercriminals will ask for remote access to your desktop so that they can cancel your subscription. If you grant remote access, the cybercriminals will attempt to change your permissions so they can access your desktop later. Then, they can use ransomware to lock you out of your desktop and threaten to release your personal information unless you meet their demands. Don't fall for these types of scams! Instead, follow the tips below to stay safe: Cybercriminals often use fake invoices to trick you into hastily clicking or calling. So always think before you take action! Never call a phone number provided in a suspicious email. Instead, visit the organisation's official website from your browser to find their contact information. Never grant remote desktop access to any unverified agents or organisations. In most cases, legitimate support representatives will be able to solve your problem over the phone or via email. BREACH UPDATE 7-11 Stores: Convenience Store Chain Exploit: Hacking Risk to Business: Extreme The chain of 7-11 stores in Denmark was forced to shut down after a cyberattack disrupted stores' payment and checkout systems throughout the country. The attack occurred on August 8th, and all stores remain closed while the company investigates the incident. No word on when they'll reopen or the nature of the attack, although ransomware is suspected. Read more here >> DoorDash: Food Delivery Service Exploit: Supply Chain Attack Risk to Business: Severe DoorDash has confirmed a data breach that has exposed customer information. The vendor's employees had credentials stolen from a recent incident at software company Twilio that were then used to access DoorDash's internal tools. The company said it cut off the third-party vendor's access to its systems after discovering suspicious activity. DoorDash did not name the third-party vendor but did confirm the attack and that it was related to the Twilio hack. Read more here >> CYBERSECURITY TIPS Have you ever wondered how phishing attacks get into your inbox? Most email clients, such as Outlook and Gmail, have built-in features to filter out potential threats. Additionally, your organisation likely has extra security measures to help protect your work account. Unfortunately, scammers have found clever ways to bypass this security and creep into your inbox. Technical Tactics Most security filters work by looking for specific text patterns, file formats, or links to websites that are known to be suspicious. Unfortunately, scammers often bypass this feature by hosting a malicious file on a legitimate file-sharing service, such as Dropbox or Google Drive. As a result, your email filters will not see the linked file as a threat because it is hosted on a trusted website. Remember: Never trust a link within an email you were not expecting, even if it is to a familiar website. Social Engineers Bad guys can avoid security filters by sending phishing emails that don't include links or attachments. Instead, they use a technique called social engineering. Social engineering is when a scammer poses as someone else and tricks you into sharing sensitive information. Typically, the phishing email will appear to be from someone important, such as your manager or a member of your IT department. Then, the scammers try to use this disguise to trick you into replying with sensitive information, sending a confidential attachment, or even wiring money to them. Remember: Stop and think before you click. Were you expecting this email? Is this an unusual request? Is there another way that this person can, or should, securely gather this information? A Human Touch Technology will never catch 100% of threats because the attackers are human. That's why becoming a vital part of your organisation's human firewall is so important. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # 5 Things to Look For When Working with a Serviced IT Company URL: https://mercuryit.com.au/5-things-to-look-for-when-working-with-a-serviced-it-company/ If you're like most business owners, you don't have the time or resources to manage your own IT department. Even the thought of hiring a full-time IT specialist on staff might seem like overkill. That's where working with a serviced IT company can help - they provide businesses with access to a range of expert IT staff without the hassle and expense of hiring and managing those employees themselves. But not all serviced IT companies are created equal. We've seen a range of companies come and go since we opened in 2004, and many of our clients come to us with IT horror stories. From businesses crippled by ransomware attacks to "helpdesks" that are never manned; it can be a challenge to find the right serviced IT company to partner with. To help avoid a lot of wasted time, effort and money, here are 5 things you should look for when choosing a serviced IT company. 1 - Experience in your industry Make sure the company has experience in your industry. They should understand the specific challenges and needs of your business. For example, if you're in the retail sector, they should be aware of things like PCI compliance and the need for secure credit card processing. If you're in healthcare, they should understand AHPRA regulations and the importance of keeping patient data secure. The company should also have a good understanding of your business processes and workflows. They should be able to offer solutions that will improve efficiency and productivity, not just patch up problems. A good serviced IT company will have a team of experienced professionals who are familiar with a wide range of industries and businesses. They should be able to provide you with tailored solutions that meet the specific needs of your business. 2 - Comprehensive service ranges Look for a company that offers a comprehensive range of services. They should be able to meet all your IT needs, from simple maintenance tasks to more complex projects. This is one of the biggest drawcards to working with a serviced IT company- you should be able to access a range of professionals with the experience to take care of any problem. From project management to cybersecurity and network solutions to specialist support; the company needs to have the flexibility to support you in all situations. 3 - Established reputation A good serviced IT company will have a solid track record of happy customers and positive reviews. They should also be transparent about any negative feedback. Companies established for a long period of time have also demonstrated their ability to consistently serve customers and build a portfolio of experience. Our advice is to avoid newly established IT Companies. 4 - Pricing transparency Make sure the company is transparent about its pricing. You should know exactly what you're paying for, and there should be no hidden costs. A good serviced IT company will be upfront about their pricing, with no hidden costs or unexpected fees. They should offer a range of flexible payment options to suit your budget, from pay-as-you-go services to comprehensive monthly plans. They should also be willing to tailor their services to your specific needs and budget. This will give your business the flexibility to scale its services up or down as your needs change. 5 - Friendly and helpful Finally, choose a company that you feel comfortable working with. They should be friendly and helpful, and you should feel confident in their ability to meet your needs. After all, you'll be working with them closely on a regular basis! When it comes to your business's IT needs, you can't afford to take risks. Choosing the right serviced IT company is an important decision that will have a big impact on the success of your business. By following these tips, you can be sure to find a serviced IT company that will be a good fit for your business. If you're interested in working with a serviced IT company to support your business, then Mercury IT is a long-established, trusted provider for a wide range of industries. We would welcome an enquiry about how we can find the right solution for your business and budget. --- # Cyber Insights with Mercury IT- August 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-august-2022/ Welcome to Cyber Insights. In this edition we highlight the scam relating to WhatsApp, share the latest security breaches and provide our top cybersecurity tips for spotting a multi-vector attack. SCAM ALERT WhatsApp is an application that allows you to message and call your friends and family worldwide. However, due to a new scam, the next WhatsApp message you receive may come from a cybercriminal instead of a trusted contact. To start the scam, a cybercriminal will send you innocent WhatsApp messages to earn your trust. After you start talking to the cybercriminal, they will try to convince you to call a phone number that begins with a **21* prefix. If you call this phone number, your mobile carrier will forward your personal phone number to the cybercriminal’s phone. Then, the cybercriminal can use your phone number to get a temporary WhatsApp password, reset your existing password, and lock you out of your account. Once the cybercriminal has access to your WhatsApp account, they can impersonate you and convince your contacts to send them money. Don’t fall for this scam! Follow the tips below to keep your WhatsApp account secure: Be cautious of who you call on WhatsApp. Only call phone numbers that belong to trusted contacts. Learn about common social engineering red flags. Educating yourself on common scam tactics can help you avoid social engineering attacks. BREACH UPDATE TWITTER Exploit: Hacking Risk to Business: Moderate Cybercriminals say that they’ve exploited a vulnerability in the Twitter platform to obtain data of about 5.4 million accounts. Altogether, bad actors claim to have snatched data from 5.4 million accounts, with the data now up for sale on a hacker forum for $30,000. Twitter was alerted to the exploit in January 2022 and fixed it quickly, but the damage had already been done. The method used to scrape the data was similar to an attack on Facebook in 2021. Twitter has not confirmed or denied the attack as of press time, saying that the incident is under investigation. Read more here >> MARRIOT INTERNATIONAL Exploit: Ransomware Risk to Business: Moderate Marriott is looking at another big data breach after a group of cybercriminals claims to have stolen an estimated 20 gigabytes of data, including financial data like credit card information and confidential information about guests and workers from an employee at the BWI Airport Marriott in Baltimore. The group identified themselves as GNN or “Group with No Name” to media outlets and sent along samples of the purportedly stolen data. Marriott contends that the stolen data consisted of “non-sensitive internal business files regarding the operation of the property.” The incident remains under investigation. Read more here >> CYBERSECURITY TIPS You probably know that cybercriminals can use malicious emails and phone calls to steal your sensitive information. But did you know that cybercriminals can use multiple attack vectors simultaneously to make their attacks even more effective? While it may be easy to spot a single suspicious email or phone call, multi-vector attacks can be difficult to catch. According to a new IBM report, a standard email-only attack yielded a 17.8% click rate from its target audience. When cybercriminals paired the same email attack with a matching phone call campaign, the click rate increased to 53.2%. That’s three times the email-only click rate! By using multiple attack vectors at once, cybercriminals can make their messages seem more credible and urgent. Don’t let a multi-vector attack trick you. Follow the tips below to keep your sensitive information safe: Verify that urgent messages are legitimate before taking action. Contact the person or organisation directly using another line of communication. When you receive an email or phone call, watch out for red flags. Scams often use urgent deadlines and scare tactics to trick you into sharing sensitive information. Remember that even if you receive a message from more than one attack vector, that does not mean the message is legitimate. Always think before you click or reply. Remember to look for the "S" in "HTTPS" before you enter any sensitive information into a web browser. Even then, remain cautious. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # The Importance of IT Support for Dental Practices URL: https://mercuryit.com.au/the-importance-of-it-support-for-dental-practices/ The modern dental clinic is a far cry from the days of the roving dentist with his bag of tools. In fact, the modern dental practice is so technologically advanced that the idea of running one without a computer seems hard to imagine. That’s why the importance of IT support for dental practices has never been higher. In this article, we break down the critical elements of IT within a dental practice and the kind of technical support that’s needed. How IT Powers Dental Practices The first thing to understand is that dental practices are, in many ways, like any other business. They have financial records that need to be kept track of. They need to manage employee schedules and patient appointments. But unlike other businesses, dental practices also deal with sensitive medical information and be able to transfer it to where it needs to be quickly and on demand. This means that the security of their data is of paramount importance and must comply with strict privacy laws. A dental practice’s IT infrastructure needs to be able to support all of these different functions. The good news is that there are now a variety of software solutions specifically designed for dental practices. But with such a wide range of Practice Management Software (PMS) and Digital Imaging options available for dental practices, it can be hard to know which solution is right for you. That’s where IT support comes in. IT Support Specialists for Dentists An IT support specialist will be able to assess your practice’s specific needs and provide valuable guidance on the best software solution for you. An IT support specialist can also liaise with vendors to help set up, use and troubleshoot any issues with your PMS system and train your staff on how to use it. In addition, they can provide ongoing support and maintenance, so that you can be confident that your system is always running smoothly. So if you’re looking to improve the efficiency of your dental practice, make sure you invest in a good IT support team. They will be an invaluable asset in helping you to keep your practice running swiftly and smoothly. IT Backups and Security While it’s important to have a good IT support team in place, there are also a few things you can do to help keep your practice running smoothly. First, make sure you have a good backup solution in place. This will ensure that if anything does go wrong, you’ll be able to quickly and easily restore your data. Second, keep your software up to date. This will help to reduce the risk of any security breaches and stability issues. At Mercury IT we frequently see this as a cause of system crashes, viruses and malware. Third, make sure you have a good spam filter in place to protect your email inbox from being overloaded with junk mail, spam and phishing attempts. Nobody wants to be the one who clicks on the dodgy email link and shuts down the computer system for your dental practice! By following these simple tips, you can help to ensure that your dental practice runs smoothly and efficiently. How Mercury IT Supports Dental Practices If you ever do run into any IT problems, know that you have a reliable and trustworthy support team in Mercury IT who can help you get back up and running again. Mercury IT has been providing first-class IT support to dental practices since 2004. We understand the unique challenges that come with running a dental practice and we’re here to help. From consulting and strategic planning to managed services and remote support, we have a way to support your practice. Get in touch today to discuss your specific needs and requirements. --- # Cyber Insights with Mercury IT- July 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-july-2022/ Welcome to Cyber Insights. In this edition we highlight the scams that often surround Amazon Prime Day, share the latest security breaches and provide our top cybersecurity tips for the month. SCAM ALERT Amazon Prime Day 2022 begins today, so you might expect some Amazon deliveries soon. But unfortunately, while you may use Prime Day for incredible deals, cybercriminals use Prime Day for awful scams. Cybercriminals may take advantage of Prime Day in different ways. Still, there are some common scam tactics that they typically use. For example, they may include the Amazon logo in their phishing emails to make their emails seem more legitimate. Their emails may also include links that send you to fake Amazon login pages. If you enter your Amazon login credentials on one of the fake pages, cybercriminals can use these credentials to change your Amazon account password and log you out of your account. Then, they can make purchases using your saved payment information. To keep your Amazon account secure, follow the tips below: If you receive an email from Amazon about an upcoming delivery or an account update, don't click any links in the email. Instead, log in to your Amazon account directly from your browser to check on the issue. Enable multi-factor authentication (MFA) on your Amazon account. MFA adds an additional layer of security by requiring you to present two or more verification factors to log in to your account. Cybercriminals often use scare tactics to trick you into clicking links without thinking. If you receive an email that urges you to take immediate action, stop and evaluate the message before you click any links. BREACH UPDATE Exploit: Insider Risk (Employee Error) iCare: Insurer Risk to Business: Severe State insurer iCare is in the hot seat after an employee mistakenly shared the details of almost 200,000 injured workers with 587 employers and insurance brokers after sending the incorrect cost of claims analysis reports to the wrong recipients. The employee information was contained in spreadsheets that were mistakenly sent as attachments to the wrong employers. The company sent impacted workers an apology for the incident in May 2022. Risk to Individual: Severe The missent cost of claims reports included a summary of workers' claims history, their name, date of birth and injury category, workers' policy number, a breakdown of weekly payments, claim costs and gross amounts paid, but no banking or contact details. Read more about the security breach here >> CYBERSECURITY TIPS When signing into a website such as Facebook or Amazon, have you ever seen the beginning of the URL change from "HTTP" to "HTTPS"? How about a small lock icon at the top of your browser? The "S" in "HTTPS" stands for "secure" and indicates that your web browser is accessing the website through a secure connection that no one else can access. The lock icon also shows that the website is secured with a digital certificate. However, a website is not necessarily secure just because "HTTPS" is included in the URL. A website using HTTPS can be safer than a website using HTTP, but cybercriminals can get HTTPS certificates, too. Cybercriminals often use HTTPS URLs to trick unsuspecting victims into clicking phishing links. HTTPS websites can offer a false sense of security, so you may be tempted to automatically trust them. However, it's important to remember that even legitimate HTTPS websites may have vulnerabilities that cybercriminals can exploit. Therefore, you should never rely on an HTTPS URL or even the lock icon at the top of your browser for security. Tips to Stay Safe Follow the tips below to make sure the website you're visiting is secure: Watch out for misspelled domains. For example, a link may contain the word "Annazon" instead of "Amazon." Some misspellings are easier to catch than others, so make sure to look closely! If you receive a login link through email or text message that you weren't expecting, don't click it. Cybercriminals can send you malicious links that look legitimate. Instead, always navigate directly to the website. Remember to look for the "S" in "HTTPS" before you enter any sensitive information into a web browser. Even then, remain cautious Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Cyber Insights with Mercury IT- June 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-june-2022/ Welcome to Cyber Insights. In this edition we share a spear-phishing scam, provide an update on recent breaches and offer some tips on email security. SCAM ALERT Last month, researchers at Fortinet observed a sophisticated phishing email sent to a Hungarian diplomat. In the email, cybercriminals disguised themselves using the first and last names of an employee in the diplomat’s IT department. In this case, the diplomat believed the email was suspicious and forwarded it to the actual employee in the IT department for investigation. This case is a perfect example of a widespread attack called spear-phishing. Spear phishing attacks are targeted at a single person or department with information that cybercriminals want. In these attacks, cybercriminals research the specific person or department and figure out whom they talk to frequently. Then, the cybercriminals send a message to the person or department, pretending to be someone they know and trust. It’s essential to watch out for these attacks because they can happen to anyone, not just diplomats or executives. Follow these tips to stay safe from spear-phishing attacks: Don’t open attachments or click on links in emails that you were not expecting. Check email headers to ensure you recognise the sender and other recipients. Reach out to the person who allegedly sent the email by phone or in person. By reaching out to the alleged sender directly, you could save yourself and your organisation from a potential spear-phishing attack! BREACH UPDATE Exploit: Supply Chain Risk National Disability Insurance Scheme (NDIS): Government Program Risk to Business: Severe A client management system provided by a service provider and used by the National Disability Insurance Scheme (NDIS) has exposed sensitive data. CTARS, a Sydney-based software and analytics provider for the disability and care sectors, maintained the system. NDIS disclosed that an unauthorised third party had accessed its systems on May 15, 2022. Risk to Individual: Severe National Disability Insurance Scheme (NDIS) says that personal information relating to patients may have been exposed, including details of the diagnoses, treatment, or recovery of a medical condition or disability. Other data possibly compromised includes Medicare and pensioner cards and tax file numbers. Read more about the security breach here >> CYBERSECURITY TIPS The prevalence of phishing scams is at an all-time high. With you being the key to preventing a cyber attack within your organisation, it is crucial to question the legitimacy of every email you receive. Below is a list of questions to ask yourself about the recipient of the email that may help you realise that you are being phished. TO: Analyse who was the email sent to. Were you CC’d on an email, and you don’t personally know the other people it was sent to? Or was the email sent to an unusual mix of people? For example, a seemingly random group of people with unrelated email addresses or a group of people at your organisation whose last names all start with the same letter. If you notice anything about the email that alarms you, do not click links, open attachments, or reply. You are the last line of defence to prevent cyber criminals from succeeding and making you or your company susceptible to phishing attacks. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # E-volution – Digital Transformation’s Next Stage URL: https://mercuryit.com.au/e-volution-digital-transformations-next-stage/ Unless you have been living under a rock, you will no doubt have heard the term ‘Digital Transformation’ slung around with wild abandon. It really is a term that has been overused and to some extent, its validity today is somewhat questionable. To explain what I mean, perhaps I need to digress a little. Firstly, what is ‘Digital Transformation’ anyway? Fundamentally, it is the implementation of technology, processes and controls to improve business outcomes. More broadly this involves the integration of systems across the organisation to improve efficiency, visibility and enhance the customer experience. That sounds positively reasonable, definitely a noble goal. So why do I have problem with the term? My problem is that most organisations have already begun their digital journey and most of them don’t even realise it. Let alone attach a fancy title to it. Besides which, I have a real problem with the word ‘Digital’. We need to change our lexicon; digitisation was the process of moving from analogue (physical) systems to technological solutions and we are well past that stage now. Over the last 20 years we have seen the rise of the internet, becoming a ubiquitous component of not just everyday life, but an integral part of every business. Businesses have evolved their online presence and embraced interactive methods of attracting, engaging and retaining customers. Additionally, core business applications have been moving steadily away from standalone on-premises solutions to streamlined integrated Software as a Service (SaaS) platforms. Contributing to this growth has been stampede towards cloud services, particularly the Microsoft M365 suite of products which has enabled small to medium businesses with what is essentially an enterprise way of working. So, my point is that businesses have been digitising for the past 20 years and they just did not realise it. Ok, great, so you are already there? Why are you reading this? Well, digitisation is more of journey than a destination. Hence my insistence that we need to change the terminology and start to embrace ‘E-volution’, the next stage in the digital journey. E-volution is all about taking the good work you have done in transforming your business through technology and taking it further. This is where we look at enhanced integration across your various cloud applications and services. E-volution is about improving the customer experience by improving response, delivery and outcomes. It includes embracing AI and Machine Learning to assist with more predictive production and logistics. Don’t get me wrong, this is not the easy part of the journey, in fact this is probably the hardest part as we have done all the easy bits already—low hanging fruit and all that. This is the part of the journey where we fix the issues we did not even know we had twenty years ago. I will give you an example: printing. We have talked about a paperless office since the first word processors were used back in the 80’s and yet here we are well into the 21st Century and very few offices have actually been able to make the move away from paper. Besides the obvious environmental considerations, the cost savings and efficiency gains of going paperless are well known. So why haven’t we got there yet? Tradition, a paper crutch? Or is it just that we have not been able to effectively improve our processes to accommodate the demise of the ‘ream’. The fact is that we are probably only just at the point in our technological advancement where we have the true capability to make the shift once and for all. Printing however is only one part to this and the journey will continue with multiple iterations to continually evolve the business technology landscape. If you would like to know how we can help you take the next steps on your business E-volution, contact us to have a no obligation discussion with us and see how we can help you to evolve your digital journey. --- # Cyber Insights with Mercury IT- May 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercuryit-may-2022/ Welcome to Cyber Insights! In this edition we share a scam relating to Microsoft Teams, provide an update on a recent breach and elaborate on a password stealing technique know as 'Password Spraying'. LATEST SCAM Collaboration tools such as Microsoft Teams are prevalent in many businesses, and the criminals know this. Current phishing scams appear to be a notification from one of your collaboration tools asking you to click on a link. This could be to accept being added to a new project team or read a new message. Another sneaky tactic is to label the email as internal or trusted. This seems to be an attempt to override the appearance of this email being external to your organisation. Follow the tips below to help you stay safe from similar, simple scams: Never click on a link in an email that you were not expecting, even if it appears to come from a program or application that you use. When you receive an alert email, ask yourself questions: Did I sign up for email notifications? Have I received alerts like this in the past? If you think the notification could be genuine, log in to the program or application directly instead of clicking the link in the email. BREACH UPDATE There are legal ramifications for financial services businesses and possibly all Australian companies if they experience a breach. This month in Cyber Insights, we follow up on the legal outcome of a breach. In Australia, businesses are bound by several policies such as the Privacy Policies, Notifiable Data Breach Policy, APRA and others based on your industry. So far, we have not seen fines or many repercussions for businesses failing to meet their obligations to maintain proper cyber hygiene practices until last week. The federal court has ordered RI Advice to undertake cybersecurity training and pay $750,000 towards ASIC's legal costs. This was because the lack of cyber security risk management at RI Advice breached its license obligations. Federal Court Justice Helen Rofe stated: "It is not possible to reduce cyber security risk to zero, but it is possible to materially reduce cyber security risk through adequate cyber security documentation and controls to an acceptable level." Read full article here >> CYBERSECURITY TIPS Passwords have become an integral part of our daily lives. We use passwords to check our social media feeds, access our bank accounts, and log in to our work computers. In fact, studies have shown that the average person can have up to 100 different online accounts. That's a lot of passwords to remember! With so many login credentials to remember, you may be tempted to develop short and simple passwords. For example, using a password such as "password1234" or "QWERTY" may not seem like a big deal, but a weak password can put you at risk of a cyberattack called "password spraying." What Is Password Spraying? Password spraying is a cyberattack that tests common weak passwords across multiple user accounts. Cybercriminals can avoid being locked out of a single account by cycling through numerous accounts due to failed login attempts. The process is usually automated and often goes undetected for a long time. Once cybercriminals gain access to a user's account, they can steal sensitive information and plant malware. The password spray attack isn't new, but it remains an effective hacking method that allows cybercriminals to access organisations' networks. Recently, cybercriminals have modified the password spraying technique, attacking single sign-on (SSO) services and other cloud platforms. Due to these attacks, you may need more than just a password to keep your sensitive information secure. How Can I Keep My Account Safe? Follow the tips below to help protect your accounts and your organisation's network from password spraying attacks: Use multi-factor authentication (MFA) to add an extra layer of security to your account. MFA requires you to provide additional verification before logging in to an account, making it more difficult for cybercriminals to hack your account. Try safe passwordless authentication options, such as biometric authentication, voice recognition, or facial recognition technology. Make sure that the passwords you use are unique and robust. For example, try using longer passphrases that you can remember, and don't use the same passwords for multiple accounts. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Cyber Insights with Mercury IT- April 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-april-2022/ Welcome to Cyber Insights, this month we share two security breaches carried out by 'The Lapsus$ Gang', a scam relating to Emergency Data Requests (EDR) and tips on what to do if you find a USB stick in a public place. LATEST SCAM In the United States, law enforcement agencies must obtain a court-ordered warrant or subpoena before requesting user data from a tech company. However, law enforcement agencies can bypass this process in extreme scenarios by issuing an Emergency Data Request (EDR). Since the request is urgent, tech companies must act quickly and trust the agency that issued the request. Unfortunately, cybercriminals have begun hijacking law enforcement email systems to send fake EDR emails and gather sensitive user data. Recent news has revealed that in 2021, Apple, Meta, and other tech companies responded to fake EDRs and provided user data to cybercriminals. This data included users’ addresses, phone numbers, and IP addresses. Now that this data breach is making headlines, we expect cybercriminals to use EDR-related data leaks as a topic in phishing attacks and social media disinformation campaigns. Here are some tips to stay safe: Be cautious of emails or phone calls that claim you or your organisation have been affected by these data leaks. Typically, this sort of information is communicated through regular mail. Watch out for sensational or shocking headlines about Apple, Meta, or other tech companies that have experienced EDR-related data leaks. These headlines could lead to articles that contain disinformation, or false information designed to mislead you intentionally. Protect yourself from potential data breaches by regularly updating your passwords, using multi-factor authentication, and limiting the amount of information you share with social media platforms LATEST BREACH Exploit: Unauthorised Access Microsoft: Software Company Risk to Business: Severe The Lapsus$ gang has released 37GB of source code that they snatched in a brazen hit on Microsoft’s Azure DevOps server. Microsoft confirmed the incident, saying that the threat actors gained access through a compromised employee account. The source code looks to pertain to various internal Microsoft projects, including for Bing, Cortana and Bing Maps. Microsoft made a blog post about its recent operations to track and potentially interfere with Lapsus$ last week. The company was quick to state, “Microsoft does not rely on the secrecy of code as a security measure and viewing source code does not lead to elevation of risk.” Lapsus$ is known to be a ransomware outfit, but no ransom activity was disclosed in this incident. Read more here >> Exploit: Credential Compromise (Supply Chain Risk) Okta: Identity and Access Management Solutions Risk to Business: Extreme Lapsus$ also pulled off another high-profile attack, this time against access management company Okta. Lapsus$ announced that it had breached Okta’s security in January on March 22. Supporting the claim, the group published screenshots related to Okta’s internal apps and systems. This one had a bit of a bumpy acknowledgment process by Okta who originally said no customer data was accessed but later clarified, saying “a small percentage of customers – approximately 2.5% – have potentially been impacted and (their) data may have been viewed or acted upon. A third-party service provider’s previous breach likely also played a part in the incident. No specifics on the data were given. As we stated above, Lapsus$ is typically involved in ransomware operations but no details of any ransomware activity have been reported. Read more here >> CYBERSECURITY TIPS Have you ever found a USB Stick/Thumb Drive, or a CD on the ground or in a parking lot? While you may be tempted by curiosity to see what data is on there, or perhaps to identify the owner, do not insert any of these found objects into your computer. This is a common tactic used by bad guys to infiltrate your network and steal information and to gain unauthorised access. Code can be executed simply by inserting these devices into your computer. By the time you can see what files are on it, the damage may have already been done. Your company should have a policy on how to handle such a situation. If they do, please be sure to follow the guidelines as listed in that policy. If you are not sure, or if your company does not have a policy, ask your IT department what you should do in this situation. The average cost of a cyber attack such as this one on a small company is $200,000. The cost to a large public corporation can cost over $6,000,000 per day of downtime. Remember to always refer to your company policies or consult your IT department on how to handle these situations. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Why Use Managed IT Services? URL: https://mercuryit.com.au/why-use-managed-it-services/ Ok, I know, this is a pretty dry subject and at the risk of writing an article that could replace sleeping medication for insomniacs, it really is an important topic to cover—so please stay with me for a few more minutes. I am not going to go into a lengthy explanation of what Managed IT Services are, the short answer is that we provide IT support for businesses of all sizes. Ok great, so why would you want that? You could hire someone internally to do your IT right? Or perhaps you already have an internal team. Or the common one you hear is “I know this guy, Bob, who does IT….”. ‘IT’ is such a broad area to have expertise within. We have so many specialities it is impossible for someone to be across everything. That is why we have people who specialise in their preferred field such as: infrastructure, networks, application support, end-user support, cybersecurity, project delivery, software development, voice and collaboration etc. etc., there are just way too many specialities to mention. And yes, even a small business will need services in almost all of these areas at some point. So, you need a diverse team of individuals with different skillsets to support the IT needs of your business and no, as much as ‘Bob’ toots his own horn as an ‘IT expert’ he will never be across the expertise and training that specialists have. A big part of the problem is that quite often business people don’t value IT at all. I am not sure that many business people would trust their legal advice to a guy they know that calls themselves a lawyer, but hey, he is cheap! The fact is that the IT environment for business has never been more challenging. Not only are businesses almost completely reliant on their systems to be operational all the time, ensuring they are protected from cyber attacks is a full-time role just on its own. That is why Managed IT Service providers exist. We build a diverse team of experts in various IT fields and then we are able to aggregate the costs so that we can deliver a comprehensive IT service with a true multi-disciplinary team to our clients. So, you end up with an IT team of 40 specialists, quite often at a price that is less than or equal to them hiring 1 or 2 generalists. Of course, we don’t have to replace all of the IT functions, we can also augment an internal team and provide that one IT person with the support of a whole team and their knowledge. In short, we make the internal team look good. If you have managed to stay awake this long, perhaps you would like to know more about how we could help you in your business? There is no ‘one-size-fits-all’ when it comes to managed services and we like to work with our clients to provide them with the IT services they need to achieve their business goals. Have a no obligation discussion with us and see how we can make your life easier by looking after your IT, while you concentrate on running and building your business. ‘Contact us’ --- # Cyber Insights with Mercury IT- March 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-march-2022/ Welcome to Cyber Insights, this month we highlight two extreme security breaches, a scam relating to the war in Ukraine and share some tips on staying safe from piggybacking (it's not what you think). LATEST SCAM The recent war in Ukraine has gathered a lot of attention. Unfortunately, cybercriminals often take advantage of world events to prey on your emotions. Now more than ever, it’s important to watch out for phishing attacks and disinformation campaigns. Cybercriminals may use several different tactics to scam you. For example, cybercriminals may try to trick you into sending money using cryptocurrency. The cybercriminals may take advantage of your sympathy by pretending to be Ukrainians in need of financial assistance. Cybercriminals may also try to catch your attention and manipulate your emotions by spreading disinformation. Disinformation is false information designed to intentionally mislead you. Cybercriminals may spread disinformation in the form of emails, text messages, or social media posts. Don’t fall for these scams. Follow the tips below to stay safe: Avoid making donations to unknown users. If you would like to donate to support a cause, donate directly through a trusted organisation's website. Watch out for social media usernames that only consist of random letters and numbers. These accounts may be run by bots instead of legitimate users. Stay informed by following trusted news sources. If you see a sensational headline, be sure to do research to verify that the news story is legitimate. LATEST BREACH Exploit: Misconfiguration New South Wales Department of Customer Service: Regional Government Agency Risk to Business: EXTREME A real data exposure mess has brewed in New South Wales, Australia thanks to a government-run QR code-based COVID-19 check-in program. The COVID Safe Businesses and Organisations dataset was discovered loose on the internet and it included data for sensitive sites and organisations alongside data about run-of-the-mill companies. Some of the sensitive data posted gave details about the physical facilities and locations of prisons, critical infrastructure networks including power stations and tunnel entry sites as well as dozens of shelters and crisis accommodation centers. Even national security-related locations were exposed. In this program, businesses and organisations registered as COVID-safe to access a QR code for staff and customers to check-in at their physical locations. The program has been discontinued. Read more here >> Exploit: Phishing OpenSea: NFT Trading Marketplace Risk to Business: EXTREME Online NFT marketplace OpenSea has been embroiled in controversy after a cyberattack cost investors their NFT. There’s been a lot of back-and-forth on this one. A phishing attack perpetrated on the platform’s users is purportedly to blame for the incident that has so far left more than 30 of its users unable to access their NFTs, although some claims have been made on Twitter pointing to a flaw in the platform’s code. Reports say that the attacker has made somewhere between $1.7 – 2 million in Ethereum from selling some of the stolen NFTs. An estimated 254 tokens were stolen over three hours Read more here >> CYBERSECURITY TIPS Piggybacking - Courtesy that could cost you To kids, piggybacking is when someone jumps on your back and you carry them around for a while. In the business world, piggybacking is when you let someone that you do not know enter a door that you just opened. A lot of organisations rely on biometrics, key cards, or even regular keys to open locked doors. These could be doors to get into the building, parking garage, a particular office. Piggybacking is when someone you do not know, waits for you to open a locked door, and enters in behind you. Many people allow this to happen because they want to be nice and courteous and open doors for people, you may even hold the door open for them. While this may be a nice gesture in public places, at the workplace, this could end up costing you. The bad guys, just like they would try and trick you with a fake email, are targeting your good nature, to gain access into a secured building. If someone you do not know, is trying to enter the door behind you there are a couple of things you can do to still be courteous and follow the rules. Ask them where they are going and who they are there to see, then escort them to the office of the person they are going to see, and verify that they are supposed to be there. Kindly decline to let them in and explain that your organisation has a strict no-piggybacking rule. Once the bad guys have access to your offices, they can plug into any internet outlets, or sit down at any open and unlocked workstation, or place infected USB keys around the hallways and bathrooms. Remember, when it comes to piggybacking, kindly decline or insist on escorting them to the person they are there to see. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Our Top 6 Tips for Promoting Modern Workplace Productivity URL: https://mercuryit.com.au/what-does-your-modern-workplace-look-like/ In a radically changed world where many workers may never go back to the office, new challenges are emerging for staff members and managers alike. Probably the biggest question surrounds how productive and safe people can be when working remotely with what Microsoft calls the Modern Workplace – and the good news is that not only are the tools there to make it happen, but you could even see improved productivity. It’s part of what happens next (or what’s happening right now) for many of our clients’ IT systems. Of course, productivity in changed circumstances does depend on multiple factors including personality type (some folk are quite comfortable working alone, others less so) and the nature of the work being done. But many are likely to find enormous and reciprocal advantages in a dispersed workforce. These advantages are reciprocal because they accrue to workers on the one hand and employers on the other. In an oversimplification, workers get flexibility and balance while employers have reduced overheads as demand drops off for office space and supporting services. In some cases, these aren’t even trade-offs, as suitably motivated employees can become more productive working from home, particularly if they are incentivised by outcome rather than time spent. In other words, employees will want to get it done fast and accurately so they have more time to themselves. That why Twitter’s head of human resources Jennifer Christie told BuzzFeed News that “People who were reticent to work remotely will find that they really thrive that way. Managers who didn’t think they could manage teams that were remote will have a different perspective.” With this the future of how we are working, and how technology must support the way we work, here are our top tips for productivity with the Remote Workplace: 1. It’s ALL about security The consequences of poorly secured IT systems are well known, and a new headline is never far away. That’s why our top tip is security, security and security again. Security doesn’t start with technology but a mindset, then policy, then people. Technology is the final, but equally essential component. The Modern Workplace implies working from anywhere, which means your systems must be secure anywhere – in the cloud, at the coffee shop and in your employee’s homes. Microsoft has put a lot of work and a billion dollars a year into security across Azure right through to Microsoft 365 (which puts Office, Teams and other essential applications on your employee’s machines). Knowing your software and IaaS/PaaS solutions are secure by design is a crucial factor for peace of mind for the commonly used applications essential to every business. And the real beauty of Microsoft 365? It simplifies security while making it convenient. 2. Focus on inclusion Some thrive on independence. Others don’t. Most work today is collaborative by nature and we’re generally organised into teams. When working from home or ‘anywhere’ getting everyone feeling like they are indeed part of a team is undoubtedly a challenge. That’s why a sharp focus on inclusion is our second top tip. This is where SharePoint and Teams really shine (supported by Planner and Outlook). SharePoint makes sharing and collaboration simple, especially with larger files or jobs requiring multiple inputs, while Teams does a great job of putting everyone within easy reach by video, voice, chat or email. With Planner, you can easily see who’s available and when, too. 3. Have regular meetups In a similar vein to inclusion, having regular meetups are important in helping everyone feel like they are part of the company. These should be ‘face to face’, using Teams with video, because that’s the best human interaction. Brainstorm, engage, share company news and views – an open forum facilitates a sense of cohesion and belonging. Set weekly (or more regular) meetings where everyone should attend. A further good idea is creating a digital ‘pinboard’ where your people can share anecdotes, updates, memes and other light-hearted content. It all goes towards creating camaraderie and building company morale. 4. Know what you have…and how best to use it We’re all aware that most users of say Word access just a tiny fraction of the capability it offers. The same can be said for Microsoft 365. It incorporates the usual Office applications along with Teams, but there’s a LOT more. For example, there are multiple add-ons in Outlook which can enhance productivity and convenience. And then there’s the more sophisticated apps included in some subscriptions, key among them PowerBI and PowerApps (or available as paid extras in other subscriptions). Knowing the full scope of what you’ve bought and paid for is the first step to using it all to your advantage – and this is where an experienced partner can help your Modern Workplace truly be YOUR Modern Workplace. 5. Recognise achievements and ‘new’ behaviours Many companies started a slow but steady transformation to the Modern Workplace before the term was even a thing. However, others have transitioned rapidly owing to force of circumstance – and that means a lot of change in a short space of time. In spending the past 18 months equipping many businesses with Modern Workplace solutions, it’s clear that those who succeed bring their people along on the journey – and one of the best ways of encouraging a successful and productive transition is identifying, recognising and rewarding appropriate behaviours and uses of those solutions. There is a great advantage, of course, in Microsoft’s solutions because they are so familiar to most, while also incorporating all the advantages of modern User Experiences (that’s a fancy way of saying Microsoft 365 is easy to use). But finding great examples of people maximising their value from for example Teams or Outlook, at the lower end, and PowerBI and PowerApps on the more sophisticated side, provides encouragement and support for those who need it, while also giving everyone else ideas of what’s possible. 6. Support your remote workforce It’s not all about technology and mindset. There are some physical aspects to a successful remote workforce which include work spaces and furniture. Some will have a study or spare bedroom already set up for that purpose, others won’t. Exercise some sensitivity here and see how you as an employer can assist your people towards the best setup for their personal circumstances. Business as usual, just not in the office For those who have moved to Microsoft 365, the benefits are abundantly clear, particularly in the present climate. We’ve done it ourselves and as a result, Mercury IT staff are working, connected, and engaged. Along with flexible licensing which allows installation to up to 5 devices (recognising the fact most of us have several gadgets we use together), Microsoft 365 is affordable, powerful, secure and to many, ourselves included, indispensable. Author- Sally-Ann Bird Chief Sales Officer --- # 4 Setbacks with Ineffective Technology Change Management URL: https://mercuryit.com.au/4-common-setbacks-with-ineffective-technology-change-management/ Technology is advancing at an unprecedented pace, empowering businesses to accomplish more in less time. The transformations that technology has brought about in the business world are mind-boggling and with transformative change comes stress. Without a defined change management strategy in place, avoidable inconsistencies are more likely to occur and you risk disrupting essential operations and losing valuable team members due to burnout. Keeping that in mind, before you begin implementing new technology in your infrastructure, you must understand the significance of effective change management. Change management is an approach that deals with changes or transformations in organisational processes, objectives and technologies. The goal of change management is devising strategies to implement and govern transformation while helping your team adjust to it. Change management is crucial because: It addresses the effects of change on individuals, processes and more Every change has repercussions in multiple areas of an organisation, and change management helps address each of these. It enables organisations to prosper in an ever-changing business environment Organisations that use change management achieve better results even when managing multiple distinct transformations. It empowers people Change management prepares, empowers and supports people to adapt to changes in their workflows, environments and technology. It increases the success rate of a transformation Excellent change management increases the likelihood of meeting objectives by reducing risks. What could go wrong with ineffective change management? 1. Gaps in Communication. Effective communication is, without a doubt, one of the most critical factors for organisational success. Employee resistance may develop if they feel bombarded with changes and aren’t comfortable expressing their concerns due to a lack of two-way communication. Communication breakdowns or gaps cause demotivation, employee frustration, a lack of collaboration, attrition and ultimately, business failure. 2. Employee resistance and frustration You should expect some of your employees to resist change initially. However, failing to handle it proactively could undermine your objectives. If ignored, it eventually leads to disengagement, decreased productivity and increased absenteeism. Plus, if an employee is frustrated for an extended period, it may create a dull workplace atmosphere that will eventually affect other employees. 3. Workflow glitches and stoppages Workflow glitches and stoppages are obstacles that no aspiring business should tolerate. Remember, neglecting such hurdles can harm productivity, timeliness and future prospects. It's worth noting that in today's complex business environments, unexpected workflow glitches and stoppages will almost certainly have a cascading effect and destabilise other related/dependent business components. 4. Lost productivity In an era when businesses compete to optimise their productivity and be the best in their domain, lost productivity can certainly eat into the profitability of a careless business. An effective change management strategy is critical for businesses to tackle all the problems listed above. Are you fully equipped with the experience and expertise to handle it on your own? If you feel your company lacks certain resources, it’s best to work with an MSP capable of easing your transition to a higher-performing technology ecosystem. With our wealth of experience and knowledge surrounding successful technology change management, we may be the ideal partner for your company. Feel free to contact us to set up a complimentary consultation. --- # Cyber Insights with Mercury IT- February 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-february-2022/ Welcome to Cyber Insights, this month we highlight a scam relating to the Winter Olympics, the latest security breach experienced by Kings Plant Barn and we shine the spotlight on what it actually means when you accept the terms of a privacy policy. The 2022 Olympic Winter Games is taking place in Beijing. With representatives from 91 countries, the Olympics are watched by billions of spectators from all over the world. Unfortunately, cybercriminals often use worldwide events like the Olympics to catch your attention and manipulate your emotions. As the games continue, be extra cautious of any emails, text messages, and social media posts that mention the Olympics. Remember these tips to help you stay safe: Watch out for sensational or shocking headlines about participating countries and athletes. These headlines could lead to articles that contain disinformation, or false information designed to intentionally mislead you. No matter how exciting or disappointing the news is, always think before you click. Cybercriminals target your emotions in hopes of tricking you into acting impulsively. Stay informed by watching official Olympic broadcasts and checking trusted news sources. LATEST BREACH Exploit: Third Party/Supply Chain Kings Plant Barn: Garden Retailer Risk to Business: SEVERE Kings Plant Barn is notifying customers that it has experienced a data breach after a data security incident at FlexBooker. The garden chain says that client names, email addresses and collection times were exposed but not passwords or other sensitive data. FlexBooker experienced an attack before the holidays that resulted in the theft of more than three million user records. The platform is used for scheduling and employee calendar management by small businesses like doctor’s offices, real estate companies, service sector businesses and similar companies. Read more here >> CYBERSECURITY TIPS Why You Should Actually Read That Privacy Policy If you’ve ever created an account on a website, you’ve likely been prompted to read and accept a privacy policy. Did you take time to read the policy? A privacy policy outlines the way your personal information can and can’t be accessed. If you don’t read the policy, you won’t know how the business uses your personal information. Ask yourself these questions before accepting the terms: Who collects your information and who else sees your information? Privacy policies tell you who has access to your information and who your information is shared with. The business may just use your information to improve service, or they may plan to share your information with third parties. If the privacy policy informs you that third parties will have access to your information, research the parties involved and find out why your information is being shared with them. What information is collected and why? Privacy policies tell you what information businesses collect and why they collect it. There are many types of personal information that a business may want to collect, such as your internet activity, purchase history, or linked accounts. Be suspicious of any website or app that asks for information that isn’t necessary for operation. For example, don’t give businesses permission to track your location if they don’t need it to perform a specific task. How do businesses collect your information and how can you change permissions? Lastly, privacy policies tell you how businesses collect your information and how you can change your information permissions in the future. Knowing how businesses collect your information may help you know when they collect your information. For example, a business may collect information about you whenever you access their website so that they can remember your device in the future. It’s also important to know if and how you can change your privacy settings. That way, if you decide you no longer want to share specific information, you can change the related settings. The next time you have to read a privacy policy, ask yourself these questions before you sign! It’s important to know how businesses access and use your personal information. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Change Management Basics for Technology Refreshes URL: https://mercuryit.com.au/change-management-basics-for-technology-refreshes/ Once you've completed a technology audit and prioritised the order in which you'll close gaps in your infrastructure, it's critical to remember that there are actions you must take prior to implementation for change to be successful and well-received by your team. Change produces stress in technology environments and among those who implement or are affected by the change. This is why change management is so critical for successful implementation. Change management is an approach that deals with the change or transformation of organisational processes, objectives and technologies. The goal of change management is to find strategies to implement and govern transformation while also assisting people in getting accustomed to it. Applying change management best practices can enable your organisation, regardless of size or industry, to scale and adapt to changing market conditions without losing key team players. Five elements of effective change management for technology refreshes 1.Identify Most change management strategies recognise that identifying what to improve creates a solid foundation for clarity, ease of execution and success. Since most changes are made to improve a process, a technology or a result, identifying the objective and clarifying goals is crucial. This also involves selecting the resources and individuals capable of facilitating and leading the initiative. Start by asking the following questions to gain a better understanding of your core mission: What are you changing? Why is this change occurring? Which systems and processes might be affected? How would this affect employees, customers and others? 2. Evaluate Change evaluation attempts to analyse crucial transformations before letting those changes integrate into usual operations. Here are a few suggestions for the evaluation stage: Examine technology mapping and dependencies to ensure you understand the implications of pulling specific systems offline for updates. If the failover* operation isn't an option, assess peak usage for all affected users to ensure that system downtime isn't scheduled during peak usage times. Determine the processes that need to be modified as well as the individuals who oversee them. Define how various internal and external user groups will be affected * The capability to switch to a reliable backup system instantly and seamlessly is known as failover. 3. Manage These are the areas that require your attention: Seek an executive sponsor to propel your project forward and hold you accountable for deviation from your objectives. Before detailing your change management strategy, meet with appropriate team leaders to discuss your plan and solicit their views. List and connect with relevant process owners and provide them with implementation deadlines. Know which platforms and technologies will be affected by upcoming changes. Remember to gather emergency contacts to tackle unforeseen mishaps. 4. Create After completing the previous steps, create a change management strategy and draft an expected implementation timeframe. The change management strategy you create must be comprehensive to act as a roadmap defining the concrete steps your organisation will have to take to implement the change management process. This is crucial to avoid disrupting workflows and assist your team in navigating this change. 5. Implement Once all key stakeholders have approved the change management strategy, it’s time to put the changes into effect. This frequently requires cross-team collaboration and, on occasion, the support of third parties such as technology suppliers, consultants or a managed service provider (MSP). Collaborate for success There’s no way around it — dealing with change is hard. Without a defined strategy in place, avoidable inconsistencies are more likely to occur and you risk disrupting essential operations and losing valuable team members due to exhaustion. Working with a specialist MSP can help you reduce organisational stress while updating your technology ecosystem. An expert like us can take a significant burden off your shoulders, allowing you to focus on other critical business matters. Contact us to develop a change management strategy for your upcoming technology infrastructure refresh. --- # Cyber Insights with Mercury IT- January 2022 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-january-2022/ Welcome to the first edition of Cyber Insights for 2022. This month we highlight a current scam relating to Amazon, tips on staying safe from a BEC (Business Email Compromise) attack and an overview of the latest security breach experienced by Finite Recruitment. CURRENT SCAM Rumours are circulating that Amazon may create its own cryptocurrency. There hasn’t been any confirmation from official sources that these rumours are true. However, the truth hasn’t stopped cybercriminals from taking advantage of these rumours. Cybercriminals are running social media ads that spoof well-known news sites such as CNBC and Yahoo! Finance. The ads claim that Amazon has opened presales for their “Amazon Token” and link to a fake Amazon website. The convincing website includes a roadmap outlining the release of the token, details about Amazon Prime integration, and a countdown to when the presale will end. If you try to buy an Amazon Token, you’ll be sending your money straight to the cybercriminals and receive nothing in return. Follow these tips to stay safe from similar scams: Before clicking on an ad, hover over the link to preview where the link will take you. For example, one Amazon Token ad led to amz-tokenpresale-tokenscc. This address is not a legitimate website, because it is not using the official Amazoncom domain. Watch for poor grammar and misspellings. While the fake Amazon Token website looked great, it had a number of errors, such as “TOKENS AVAILABLEN” and “You can contribute AMZ token go through Buy Token page.” Cryptocurrencies have a range of different origins, structures, and intended uses. Before investing in a coin, do your research about that coin by reviewing multiple well-known and trusted sources. LATEST BREACH Exploit: Ransomware CS Energy: Energy Company Risk to Business: SEVERE Risk to Individual: SEVERE IT recruitment firm Finite Recruitment has confirmed it experienced a cyberattack in October 2021 that resulted in some of the company’s data getting stolen and published on the dark web. The Conti ransomware group listed Finite Recruitment as a victim on its dark web leak site, claiming to have acquired 300GB of the company’s data. Finite Recruitment services several NSW government agencies as well as private clients. An estimated 38,000 employees and up to 80,000 government employees may have had their data exposed and that data may include financial data, contracts, customer databases with phone numbers and addresses, contracts with employees’ passport details, phone numbers, mail correspondence, and other information. Read more here>> CYBERSECURITY TIPS What is BEC? In a Business Email Compromise (BEC) attack, cybercriminals impersonate business professionals to trick victims into sharing information about their organisation. This attack is an advanced form of spear-phishing: a phishing attack that targets a specific individual or department within an organisation. In a BEC attack, cybercriminals impersonate a business partner, supplier, or prospect. The cybercriminals’ end goal is to transfer funds from an organisation to themselves. A successful BEC attack can result in a huge loss for the organisation involved. Who Is the Target of a BEC Attack? Originally, the primary targets for BEC attacks were employees in high-level and financial roles. As a result, many organisations began to take extra security measures to protect these employees. However, as technology and cybersecurity change, so do the cybercriminals’ tactics. Now, BEC attacks target employees of all types and levels. For example, cybercriminals have recently started to target employees in sales roles. Sales representatives are popular new targets because of their connection with financial departments for payment processing. Even employees with no ties to financial departments can be targeted. Any relationship a cybercriminal creates within an organisation can help them gain access to vital information. For example, administrative assistants often have access to high-level employees’ business calendars. If a cybercriminal targets an overly trusting assistant, the cybercriminal could win themselves a meeting with an executive. Remember These Tips to Stay Safe: Be suspicious of any emails sent from people you do not know, even people who appear to represent a legitimate organisation. Before sharing any information about your organisation or co-workers over email, be sure to verify the sender’s identity. You could ask for proof of who they are, where they work, or contact them by phone or video call. Always follow your organisation's protocol for reporting suspicious emails. Following cybersecurity protocols will help keep everyone’s information safe, no matter who the original target was. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # 4 Reasons Phishing is Getting More Frequent URL: https://mercuryit.com.au/4-reasons-phishing-is-getting-more-frequent/ Phishing is a social engineering attack used to obtain sensitive information, such as login credentials and payment details, from users. It happens when an attacker, posing as a trusted source, dupes a victim into clicking on a malicious link or downloading a spam file sent over email, text messages, phone calls or social media. If you fall into this trap, you could end up with malware, system slowdowns and sensitive data loss, among other things. The term phishing is one of the most reviled in today’s digital landscape and is a significant concern for executives. It's no surprise that the word is frowned upon when the attack vector is responsible for more than 20% of data breaches.* These attacks can be severely damaging for people and businesses. While individuals are affected by illicit purchases, financial fraud or identity theft, a company that is the victim of such an attack, in most cases, suffers severe financial losses as well as a loss of market share, reputation and stakeholder trust. An unfortunate reality regarding phishing is that the attack vector is becoming more sophisticated and frequent with each passing day. Why phishing attacks are becoming more frequent Remote/hybrid workforce Over the last year and a half, a significant number of organisations had to transition to remote/hybrid work models. While the switch allowed operations to continue without interruption, the scattered workforce and mobile endpoints brought their own set of challenges. One of the main problems was vulnerabilities becoming more visible to hackers, who quickly exploited them through phishing attacks. Organisational oversights Many businesses, in efforts to stay afloat amid the global crisis, completely disregarded cybersecurity. This included decreased spending on security posture, a lack of employee training and much more. Such mistakes opened the door for cybercriminals. Constantly evolving cybercriminals Keep in mind that hackers constantly strive to uncover and exploit even the tiniest flaws in your business. They're constantly shifting their strategy, so you're practically defending against a moving attacker. Threat actors have recently targeted businesses via the website contact form, pretending to be legal authorities, saying that the company is not complying with the law and asking the organisation to download a "report." Cheap phishing tools Several low-cost phishing tools are available on the dark web, allowing even non-technical people to become hackers. How can businesses stay safe? To avoid falling victim to phishing, all small and midsize businesses (SMBs) must be constantly vigilant. To keep your business safe, you must: Facilitate regular security awareness training to ensure that everyone is on the same page and that employees strictly adhere to relevant security requirements. Ensure that your IT infrastructure is up to date so that hackers cannot exploit unpatched/non-updated systems. Enforce strong password policies and create a system that prohibits anyone from evading them. Try and isolate vital infrastructure components as much as possible, so that everything doesn't collapse like a house of cards after a breach. Conduct mock phishing drills to get data on your employees' degree of alertness. Deploy an automated phishing detection solution that is powered by artificial intelligence. Trying to guard against phishing on your own takes a lot of effort and resources, especially if you're running a business. Collaborating with an expert like us relieves you of additional concern and responsibility. Book here to set up a complimentary consultation and we'll handle the heavy lifting for you. Source: *Verizon DBIR --- # Cyber Insights with Mercury IT- December 2021 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-december-2021/ Welcome to the final edition of Cyber Insights for the year. This month we highlight a current scam targeting Instagram influencers and their followers, the latest breaches to hit the news and lastly some tips to help keep you safe when scanning QR codes. CURRENT SCAM An elaborate new Bitcoin scam targets Instagram influencers and their followers. In this scam, cybercriminals send an influencer a phishing link that takes them to a fake Instagram login page. If the influencer tries to log in to their account, their login credentials are sent directly to the cybercriminals. Once the cybercriminals have access to the account, they can change the password and prevent the influencer from logging in. Then, the cybercriminals offer to release control of the influencer’s account if the influencer creates a very specific video. In the video, the influencer must say they invested a small amount of money into Bitcoin and gained a huge payout. They must also tag and thank the Instagram account that belongs to their “friend” who helped them invest. Of course, this “friend” is actually the cybercriminal holding their account hostage. Once the video is created, the cybercriminals post it to the influencer’s Instagram page for all their followers to see. The end goal is for these loyal followers to send bitcoins to the cybercriminals under the assumption that they will be making an investment, just like the influencer did. Here are some tips to stay safe from similar influencer scams: Hijacking a social media account is an easy way for cybercriminals to spread disinformation or scam several people at once. Don’t trust everything you see on social media, and be sure to report any suspicious activity. To the general public, Bitcoin and other cryptocurrencies are still very new and complex. Before you buy coins, learn more about cryptocurrency from well-known and trusted sources. Never trust a get-rich-quick scheme. If something seems too good to be true, it probably is. LATEST BREACH Exploit: Ransomware CS Energy: Energy Company Risk to business: SEVERE CS Energy confirmed it experienced a ransomware attack on November 27. The company said the incident was limited to its corporate network and did not impact operations at its Callide and Kogan Creek power stations. CS Energy’s CEO said that the company contained the ransomware attack by segregating the corporate network from other internal networks and enacting business continuity processes. CS Energy is owned by the Queensland government. Read more here >> CYBERSECURITY TIPS What Is a QR Code? With signing in to most venues in Australia most people know what a QR code is, however they can be used for other things. A QR code (Quick Response code) is an interactive link that you can scan with your smartphone. The link could take you to a website, start a file download, or open an app on your phone to take an action, like adding an event to your calendar. QR codes are fun, easy, and alluring because they can be placed on anything from business cards to a bag of chips. How Can Cybercriminals Use QR Codes? Unfortunately, since a QR code is nothing more than a fancy-looking link, cybercriminals can use them just like they would use a link in a phishing email. There are many free websites that allow you to create your own QR code that links to anything you choose. This means that the bad guys can create a QR code that links to a malicious website or downloads malware onto your device. Once they have created their malicious QR code, it can be emailed, posted to social media, printed out on flyers, or even made into stickers and placed on top of legitimate QR codes. Follow these tips to stay safe when scanning QR codes: Never scan a QR code from an unknown or untrustworthy source. Did you receive a random, anonymous flyer claiming you could win the latest iPhone if you scan the code? Don’t trust it! When scanning a QR code, be sure to use a scanner app that provides a preview of the destination. This feature gives you a chance to review the URL and decide if the QR code is safe. If you scan a QR code and the URL looks cryptic, or the website requires a login, or the site is unrelated to what you scanned, close out of your browser immediately. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Cyber Insights with Mercury IT- November 2021 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-november-2021/ Welcome to Cyber Insights with Mercury IT. At this time of year , it's easy to be caught off guard and fall for a scam with Black Friday and Cyber Monday deals coming in thick and fast, view our tips to stay safe and secure. Latest breaches this month include a hacking incident and credential compromise. CURRENT SCAM Customer retention and satisfaction are vital to most organisations’ success. Knowing how important this is, cybercriminals send fake customer complaints in hopes of catching you off guard. In a new phishing email, cybercriminals impersonate a member of your organisation’s human resources or management team. The email addresses you by name, states “It is urgent request,” and tells you to call the sender immediately in regards to a customer complaint. Additionally, a PDF of the complaint appears to be linked within the email. If you click on the link, a webpage opens where you can download the customer complaint. Unfortunately, the file isn't actually a PDF. Instead, it's a dangerous piece of malware. Here’s how you can stay safe from similar scams: Think before you click. Cybercriminals exploit emotions, such as the fear or guilt of upsetting a customer, to trick you into clicking on malicious links. Watch for poor grammar and unusual phrasing in emails, such as “It is urgent request.” Emails from legitimate sources are more likely to use correct and natural language, such as "This is urgent" or "This is an urgent request." Never click a link in an email that you weren’t expecting. If you’re not sure, reach out to the sender by phone to confirm the legitimacy of the email. LATEST BREACH Exploit: Hacking mySA Gov: Government Services Platform Risk to business: EXTREME South Australia’s Department for Infrastructure and Transport confirmed that mySA Gov accounts were compromised through a cyber attack. Officials went on to say that the hackers gained access to several mySA Gov accounts that were secured with recycled passwords. The department went on to say that there was no evidence of any unauthorised transactions on the impacted accounts while encouraging users to update their passwords. Read more here >> CYBERSECURITY TIPS It’s Thanksgiving week in the United States, which means Black Friday and Cyber Monday are finally here! To celebrate, cybercriminals have created a record number of malicious online stores to trick unsuspecting shoppers. Cybercriminals create online stores that claim to sell hard-to-find items, such as trending makeup products or this year’s hottest toys. To lure in customers, cybercriminals run ads on other websites, on social media platforms, and even within Google search results. If you click one of these ads, you'll be taken to the malicious online store. These stores can be very convincing because they include real product images, descriptions, reviews, and a functional shopping cart and checkout process. Unfortunately, if you try to purchase something from one of these malicious stores, your money, mailing address, payment data Follow the tips below to avoid these malicious online stores: Watch out for misspelled or look-alike domains. For example, cybercriminals may spoof the popular toy brand Squishmallows with spellings such as "Squishmellows" or "Squashmallows." Be cautious of stores that promise outrageous deals on high-demand products. Remember that if something seems too good to be true, it probably is! Always shop from well-known and trusted retailers. If you haven’t shopped there before, look up reviews and customer feedback for that retailer. Find out more about cybersecurity for your business here or book a complimentary consultation with our Chief Information Security Officer, Chris Haigh here --- # Cybersecurity: What Every Business Owner Should Know URL: https://mercuryit.com.au/what-every-business-owner-should-know/ While organisations and workers have certainly benefitted from the advancement of technology, it has also introduced an unprecedented number of cybersecurity risks. Ransomware attacks, for example, hit businesses every 11 seconds in 2021.1 Therefore, if you want your business to grow and succeed, you must understand the realities of cybersecurity. The Reality of the Current Threat Landscape Almost every organisation will encounter cybercrime at some point. It's not a question of IF, but rather WHEN it will happen. While that reality can be alarming, there’s no need to panic. There are proactive steps you can take to protect your business and achieve peace of mind. But first, let’s discuss what you need to be aware of. Here are some of the most serious and prevalent cyberthreats facing business owners right now: Ransomware Ransomware is malicious software that threatens to reveal sensitive data or prevent access to your files/systems until you pay a ransom payment within a set timeframe. Failure to pay on time can result in data leaks or irreversible data loss. Phishing/Business Email Compromise (BEC) Phishing is a cybercrime that involves a hacker impersonating a legitimate person or organisation mostly through emails or through other methods such as SMS. Malicious actors employ phishing to send links or attachments that can be used to extract login credentials or install malware. Similarly, business email compromise (BEC) is a scam in which cybercriminals use compromised email accounts to trick victims into sending money or revealing sensitive information. Insider Threats An insider threat arises from within a company. It could happen because of a current or former employee, vendor, or other business partner who has access to important corporate data and computer systems. Insider threats are hard to detect because they emerge from within and are not always intentional. Denial-of-Service/Distributed Denial-of-Service (DoS and DDoS) These attacks are widespread and easy to carry out. When a DoS or DDoS attack occurs, hackers flood the targeted system with repeated data requests, forcing it to slow down, crash or shut down. If you are still unsure whether you should be concerned about these sophisticated threats or not, the following statistics may help you make up your mind: It takes an average of 280 days to identify and contain a breach.2 Malicious attacks with financial motivations were responsible for 52% of breaches.2 Personal Identifiable Information (PII) is compromised in 80% of data breaches (PII).2 Implement These Measures to Secure Your Business Now that you know what types of cyberthreats to look out for, let’s take a look at some measures you can put in place to protect your business against cybercrimes. Strict Password Policies/Management Tools Strict password policies and the use of proper password management solutions can help improve your organisation's overall password hygiene. It is, in a way, the first line of protection against cybercriminals. Strong Identity Controls - Multifactor Authentication (MFA) To combat the current threat landscape, strong identity controls that go beyond traditional username-password authentication are required. Consider using Multifactor authentication, which includes features such as one-time passwords (OTPs) and security questions. Regular Risk Assessment This process aids in the detection, estimation and prioritisation of risks to an organisation's people, assets and operations. Virtual Private Network (VPN) To avoid a security breach, you should set up a corporate VPN that encrypts all your connections. Make sure your employees test it in their respective locations to avoid any hassles. Business Continuity Strategy When disaster hits, a solid business continuity strategy ensures that mission-critical operations continue uninterrupted and that IT systems, software and applications remain accessible and recoverable. Continual Security Awareness Training Continuous security training empowers your employees to recognise complex cyberthreats and take appropriate action, resulting in a transformative security culture within your organisation. If you’re ready to strengthen your cybersecurity posture but aren’t sure where to start, don’t worry. We can help your company build a digital fortress of protection solutions. Contact us today to schedule a free consultation. Sources: Cybersecurity Ventures IBM Cost of Data Breach Report --- # Defense in Depth (DiD): Think Like a Hacker URL: https://mercuryit.com.au/defense-in-depth-did-think-like-a-hacker/ The current threat landscape is rapidly advancing, with cybercriminals constantly upgrading their toolset to break through security defenses. If you want to outsmart malicious hackers, it’s time to start thinking like them. Fend them off with various layered defense methods. This is what Defense in Depth (DiD) is all about. The National Institute of Standards and Technology (NIST) defines DiD as “The application of multiple countermeasures in a layered or stepwise manner to achieve security objectives. The methodology involves layering heterogeneous security technologies in the common attack vectors to ensure that attacks missed by one technology are caught by another.” In simple terms, DiD is a cybersecurity approach in which multiple defensive methods are layered to protect a business. Since no individual security measure can guarantee protection against every attack, combining several layers of security can be more effective. If you want to protect your business against cybercriminal masterminds, stay up to date with the ever-changing threat landscape. 9 Threats to Protect Your Business Against While there are numerous threats that businesses like yours must be aware of, let’s take a look at some of the most common. Ransomware Ransomware is a type of malware that threatens to disclose sensitive data or blocks access to files/systems, by encrypting it, until the victim pays a ransom. Failure to pay on time can lead to data leaks or permanent data loss. Phishing/Business Email Compromise (BEC) Phishing is a cybercrime that involves a hacker masquerading as a genuine person/organization primarily through emails or sometimes other channels like SMS. Malicious actors use phishing to deliver links or attachments that execute actions such as extraction of login credentials or installation of malware.Business email compromise (BEC) is a scam that involves cybercriminals using compromised or impersonated email accounts to manipulate victims into transferring money or sharing sensitive information. Cloud Jacking Cloud jacking, or cloud hijacking, entails exploitation of cloud vulnerabilities to steal an account holder’s information and gain server access. With an increasing number of companies adopting cloud solutions since the pandemic hit, IT leaders are worried about cloud jacking becoming a significant concern for years to come. Insider Threats An insider threat originates from within a business. It may happen because of current or former employee(s), vendors, or other business partners who have access to sensitive business data. Because it originates from inside and may or may not be premeditated, an insider threat is hard to detect. Denial-of-Service/Distributed Denial-of-Service (DoS and DDoS) These attacks are common and easy to carry out. When DoS or DDoS attacks happen, hackers flood the targeted system with multiple data requests, causing it to slow down or crash. Artificial Intelligence (AI) and Machine Learning (ML) Hacks Artificial intelligence (AI) and machine learning (ML) are two trending topics within the IT world for their path-breaking applications. However, AI and ML help hackers be more efficient in developing an in-depth understanding of how businesses guard against cyberattacks. Internet of Things (IoT)Risks and Targeted Attacks IoT adoption is skyrocketing, and experts estimate that the total number of installed IoT-connected devices worldwide will amount to 30.9 billion units by 2025.1 However, data sharing with no human intervention and inadequate legislation has made IoT a favorite target of cybercriminals. Web Application Attacks Vulnerabilities within web applications permit hackers to gain direct access to databases to manipulate sensitive data. Business databases are regular targets because they contain sensitive data, including Personally Identifiable Information (PII) and banking details. Deepfakes A deepfake is a cyberthreat that uses artificial intelligence to manipulate or generate audio/video content that can deceive end users into believing something untrue. Get Up and Running With DiD To keep sophisticated cyberthreats at bay, you need a robust DiD strategy. Your strategy should involve layering multiple defensive methods, like firewalls, intrusion prevention and detection systems, endpoint detection and response (EDR), network segmentation, etc., to build a security fortress that’s hard to crack. DiD is an undertaking that takes time and effort, so it’s best to collaborate with a partner like us who can implement and maintain your DiD strategy while you focus on your business. Source: Statista --- # Mercury IT Cybersecurity Roadmap Series URL: https://mercuryit.com.au/mercury-it-cybersecurity-roadmap-series/ Join Chris Haigh, Chief Information Security Officer (CISO) at Mercury IT as he provides an overview of the Mercury IT Cybersecurity Roadmap in these three short videos. Part One: An overview of level 1, Initial and Developing your Roadmap which includes technology risk assessment, tightening the basics and defence in-depth. Learn more here >> Part Two: An overview of level 2, Defining Your Roadmap which includes deploying policies and procedures, implementing framework and building awareness. Learn more here >> Part Three: An overview of level 3, Managing and Optimising which includes setting up a Security Operations Centre (SOC), ongoing testing, compliance, and reporting. Learn more here >> If you would like to have a conversation with Chris Haigh about a cybersecurity roadmap for your business, book a 30 minute complimentary consultation here or check out our cybersecurity page for further information. --- # How to Build a Security-First Culture URL: https://mercuryit.com.au/how-to-build-a-security-first-culture/ Tools are only as good as their users. This should be your guiding philosophy as the world shifts to a hybrid work model to deal with the complexities posed by the COVID-19 pandemic. While it’s great to define and implement essential security controls and tools, if it isn’t backed up by workforce buy-in and participation, you could be in for a bumpy ride. A Ponemon survey of IT security leaders revealed that 62% of remote employees do not follow security protocols closely.[1] And that’s only half of it. Think of all the logistical and monitoring challenges posed by hybrid working environments. You may have some employees working remotely, some from your office and a few others at a co-working space. If you have rotational shifts, you will have employees working throughout the day. To put it bluntly, building a security-first culture in this new era is a massive undertaking. You will need to devise a comprehensive cybersecurity strategy that involves and empowers your hybrid workforce. Here are the critical components of this strategy: Perimeter-Less Technology In a hybrid work model, you will have employees spread over multiple locations, working together online. Some may use less secure home internet connections for work while others may use personal devices to get the job done. That’s why it is critical to upgrade your security systems, tools and controls to make sure they match the demands of a hybrid environment. This means going truly perimeter-less and investing in cloud-based SaaS applications, secure VPNs, identity and access management tools, patch management applications, unified endpoint management systems, and backup and recovery solutions. Make sure the application you choose supports Zero Trust architecture. It is a security concept that dictates that every attempt to access company networks and systems must be verified first, whether within your network perimeter or outside it. Documented Policies and Procedures If your security policies and procedures are not clearly documented, you will struggle to enforce them. Your staff may not know what steps are involved or what the purpose of the whole process is. There will be no buy-in from their side. For instance, if you don’t have an Acceptable Use Policy for your VPN in writing, your employees may end up using it for non-work purposes. Identify critical IT policies and procedures like change management, remote access, incident response, etc. Then, have all of them documented and shared with the concerned teams and members of your staff. Remember to keep the files up to date and in an easily accessible, central location. This will make it easier to enforce policies. Employees will know what is expected of them and why. Finally, make sure policies are reviewed periodically and make changes if needed. Security Awareness Training Programs Aim to make your employees the first line of defense against cyberattacks. Although this approach has been around for years, it is even more relevant in a hybrid work environment. The risk factor is higher, so you must take it seriously—no more gimmicks to meet compliance requirements. Deploy engaging training programs that will help reduce human errors, develop good security habits and create awareness about the current threat landscape. Create training videos and a knowledge base covering security best practices and SOPs. Along with that, you should set up interactive training programs that help employees learn how to defend against phishing, ransomware, brute-force password attacks and social engineering. After training, reinforce what they learned by conducting routine tests and simulations. Communication and Support Channels When communication and support channels are clearly defined and easily accessible, you can handle threats more effectively. Every staff member will know how to raise an alarm, whom to contact and what to do after reporting it. More importantly, it will help you detect threats early, thereby allowing you to minimize their impact. Additionally, you should clearly define what tools can be used for communication and collaboration. For instance, employees should be discouraged from using personal apps like WhatsApp and Facebook for official communication and file transfer. Not only does it put company data in danger, it might also hurt your chances of achieving compliance. Friction-Free Systems and Strategies When it comes to devising new security strategies or evaluating new systems, ensure that you give due importance to user experience and efficiency. For instance, if your company’s antivirus solution is slowing down employee workstations, they may resort to disabling it to get work done, which is a recipe for disaster. Although security is critical, it shouldn’t come at the cost of efficiency and user experience. Following security measures and policies shouldn’t feel like extra work, otherwise employees could grow weary and abandon security best practices altogether. Ensure your security systems and strategies dovetail nicely with their workflow. Next Steps The truth is, building a security-first culture is challenging. The hybrid work model has only made it more complicated by adding dozens of new layers and steps to the process. You will certainly need skilled staff, 24/7 support and specialised tools if you want to implement a security-first culture within a hybrid work environment. If you are thinking about going down this path, we can help ensure proper and effective implementation and ongoing management of necessary IT/cybersecurity and data security controls. Contact us for a consultation to learn more about how we can help. Sources: [1] According to IT security leaders, remote workforces pose a greater risk to data because home networks are less secure (71%) and employees do not follow security protocols as closely (62%). [Source: 2021 Data Exposure Report Insider Risk, Ponemon] --- # 4 Reasons Cybersecurity Attack Surfaces Are Expanding URL: https://mercuryit.com.au/4-reasons-cybersecurity-attack-surfaces-are-expanding/ The COVID-19 pandemic impacted individuals and businesses all over the world in one way or another. Almost overnight, it disrupted the way people went about their daily routines and how companies operated. Amidst all the chaos, changes to the cyber landscape increased at an unprecedented pace. Some of the trends that powered these changes and continue to fuel them are: Increased Use of Internet of Things (IoT)- - About 56 federal agencies in the U.S. reported using Internet of Things (IoT) technologies.1 - In 2021, experts expect the number of connected devices to reach 10.07 billion.2 Rapid Adoption of the Cloud - Global public cloud end-user expenditure is expected to grow by over 18% in 2021.3 Digital Transformation - IT spending is expected to hit $3.9 trillion in 2021.3 - Spending on digital transformation technologies increased from $1 trillion in 2018 to $2.39 trillion in 2021.2 Work-From-Home Model - Over 70% of all departments and teams are expected to have remote workers by 2028.4 With an expanding attack surface comes cybercrime. According to an FBI report, cyberattacks have skyrocketed by over 400% since the start of the pandemic, making it imperative to identify and deflate cyberthreats for the health and future of your business. Growing Cybersecurity Risks Targeted Ransomware Attack Ransomware attacks have long been a nuisance to businesses. Experts have estimated that about 10% of breaches reported in 2021, so far, involved ransomware.5 The success of this mode of attack is attributed to the simplicity with which an attacker can wreak havoc. It should worry everyone that ransomware kits are inexpensively available on the dark web. Ransomware propagators are constantly devising new plans to evade defenses set by businesses. Without precautionary measures in place, SMBs could find themselves at risk. Phishing Attacks Phishing uses social engineering in email and cloud services attacks. Phishing attacks can lead to account takeover, credential theft and more. According to one report, phishing attacks increased by 11% in 2021 alone.5 Malicious actors using phishing scams as their method of attack are cunning enough to tilt every global event to their advantage. For example, when the pandemic started, phishing emails were sent out to the masses in the name of the World Health Organization (WHO). Later, when vaccines were rolled out, scam emails had a vaccine company’s name as the sender. Insider Threats Shockingly, close to 20% of breaches involve internal actors.5 The problem with insider threats is that they’re often the toughest to detect. The most common causes of inside incidents are: Negligent employees or contractors6 – 62% Criminal or malicious insiders6 – 23% Credential theft6 – 14% Fileless Attacks A fileless attack aims to exploit the features and tools of a victim’s environment. It doesn’t depend on file-dependent payloads nor does it generate a new file. This leaves no footprint and makes fileless attacks very hard to detect. A fileless attack is reported to be 10 times more successful than a file-based attack.7 Fileless attacks can originate through an email that directs you to a malicious website. From there, using social engineering tactics, the cybercriminal can use system tools (such as PowerShell) to distribute payloads and execute commands. Since these system tools are part of your IT environment, the threat can evade outdated security systems. How to Stay Protected You can ramp up your cybersecurity and protect your business by following these steps: Keep your systems updated and safe from cyberattacks that exploit known software vulnerabilities by automating patch and vulnerability management. Ensure effective and quick recovery from cyber disruption by backing up your systems and SaaS applications. Secure your systems by deploying advanced antivirus and antimalware solutions that provide endpoint detection and response (EDR). Make sure every new device has the necessary security tools to start with — local firewall, DNS filtering, malware protection, multifactor authentication (MFA) and disk encryption. Always be ready with an incident response plan. No breach can shake you if you have a robust action plan. The plan should have a communication strategy with all stakeholders, including your investors and valued customers. Provide regular security training to your employees and vendors. If thinking about assessing your current cybersecurity posture gives you anxiety and you’re not sure where to start, don’t worry. We can take the assessment off your plate and suggest the right solutions for your business. An experienced partner like us can make your cybersecurity journey seamless and successful. Contact us today for your cybersecurity assessment. Sources: US GAO-20-577 Report Statista Gartner Upwork Report Verizon 2021 DBIR 2020 Cost of Insider Threats: Global Report Ponemon Institute --- # Cyber Insights with Mercury IT- July 2021 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-july-2021/ Welcome to Cyber Insights with Mercury IT. This month we focus on latest breaches, top cybersecurity tips and the impact of payment redirection scams in Australia. CURRENT SCAM Payment redirection scams cost Australian businesses $128 million in 2020 Payment redirection scams were the most financially damaging scams for Australian businesses in 2020 according to the ACCC’s latest Targeting Scams report. Combined losses reported to Scamwatch, other government agencies, banks and payment platforms totalled $128 million in 2020. Businesses were also targeted by health and medical scams in 2020. About half of the $3.9 million in total losses reported to health and medical scams were from businesses, as they attempted to procure personal protective equipment for their staff to comply with government guidelines during the pandemic. The ACCC provides a range of resources for businesses on how to avoid scams on the Scamwatch website and in our media releases throughout the year. Businesses that have been scammed should contact their bank as soon as possible. If the scam occurred on a platform such as Facebook, contact them directly to report it. Businesses can also report a scam to ReportCyber, which is run by the Australian Cyber Security Centre and passes reports to law enforcement agencies for assessment and intelligence purposes. LATEST BREACHES Exploit: Hacking TPG Telecom: Communications Technology Risk to Business: EXTREME Australia – TPG Telecom TPG Telecom has announced that it had the data of two unnamed large customers improperly accessed on its legacy TrustedCloud hosting service. It added it did not believe any other customers were impacted by the breach. The service was part of a 2011 acquisition by the telecom and is set to be decommissioned in August 2021. An investigation is underway and authorities have been informed. Read more here >> Exploit: Third-Party Data Breach NSW Health: Regional Healthcare Agency Risk to Business: SEVERE Australia – New South Wales Health (NSW Health) New South Wales Health has confirmed that it is the latest organisation impacted by the major cyberattack on the file transfer system owned by medical data services provider Accellion last month. The state entity said that no medical records maintained in public hospitals were affected. The agency has begun notifying people whose data may have been accessed. NSW Health has upgraded its technology to avoid future problems Read more here >> CYBERSECURITY TIPS You may or may not visit sensitive websites in your free time. However, what would happen if a hacker tried to blackmail you by saying that they had “proof” that you were on a sensitive website? This is a common example of how extortion-type phishing attacks work. How it works: A bad guy sends you an email that appears to come from your own email address. In the email, they claim to have compromising images or video footage of you that they threaten to share with people you know. They demand money, usually in the form of cryptocurrency. They claim that if you pay them that they will not share this compromising content with your family and friends. The bad guy doesn’t actually have the compromising content that they claim they have. Do not send them money! Either delete the email or follow the reporting procedures that your organisation has put in place. Tips to avoid extortion: Although the above is a scam and not true extortion, legitimate extortion is a serious internet crime that can lead to devastating consequences for victims. According to the FBI, here are some things you can do to avoid becoming a victim of extortion: Never send compromising images of yourself to anyone, no matter who they are or who they say they are. Don’t open attachments from people that you don’t know, and be wary of opening attachments even from people that you do know. Turn off or cover your webcam when you are not using it. If you require assistance with cybersecurity for your business, contact us --- # Do You Know Your Digital Risk? URL: https://mercuryit.com.au/do-you-know-your-digital-risk/ Rapid technological advancement and rising global connectivity is reshaping the way the world is functioning. From higher productivity to improved customer satisfaction, technology has played a critical role in the growth of businesses across the world. However, the consequential bad news is that technological advancements have also made organisations increasingly vulnerable to digital risks. However, this does not mean that businesses must compromise on growth and advancement for the sake of security. The security challenges within these digital environments can be better addressed if organisations knew how to identify these risks and incorporate preventative security measures and controls, along with proactive solutions and detailed plans, to overcome their digital vulnerabilities. Let us discuss the different types of digital risks you should be looking out for and how you can use this information to get a positive ROI. Types of Digital Risks Digital risks are increasing in the business world due to the rapid adoption of new disruptive technologies. These risks are seen in various industries and are more pervasive than cybersecurity risks. On a broader scale, digital risks can be classified into physical, technical and administrative risks. The following risks are the most prevalent in today’s digital world and should be treated as top priorities for your business: Cybersecurity risk: Cyberattacks continue to evolve as businesses become more technology driven. Attacks like ransomware, DDoS, etc., can bring a halt to the normalcy of any business. Data privacy risk: As we move forward to a knowledge-based economy, data has become the most valuable commodity in the world. This has resulted in hackers targeting critical business data and misusing them for personal gains. Compliance risk: Businesses need to adhere to various regulations regarding data privacy, cybersecurity, organisational standards of practice, etc. Any violation can attract heavy fines and penalties for a business. Third-party risk: When you outsource certain services to third parties, it might compromise the security of your IT infrastructure. For instance, a software tool you develop with an external vendor may introduce some vulnerabilities to your otherwise intact digital environment. Resiliency risk: This concerns the ability of a business to bounce back and continue operations after an unexpected disaster. Risks due to human errors: In the UK, 90 percent of cyber data breaches were caused by human errors in 2019. Whether it’s falling for phishing scams or misusing work devices, human errors can be quite costly for organisations if they go unchecked. Automation risks: While automation is reshaping the tech industry for the better, it could also give rise to a range of risks such as compatibility risks, governance risks, etc. Cloud storage risks: The flexibility, ease-of-use and affordability offered by the cloud makes it one of the most popular options for backup and storage. However, the cloud is also prone to various risks such as lack of control over data, data leakage, data privacy, shared servers, etc. Importance of Risk Assessment in Managing Digital Risks The best way to start managing your digital risks is by performing comprehensive security risk assessments regularly. After all, how would you know what your current vulnerabilities or gaps are and where you biggest security challenges lie without an ‘under the skin’ examination? With a risk assessment, you can measure your security posture against various internal and digital threats and determine how equipped you are to deal with these risks. When you perform a security risk assessment you can proactively: Identify vulnerabilities: A risk assessment helps you identify which part of your digital environment is relatively weak against various security threats. You can identify which systems are likely to be targeted by attackers and incorporate measures to strengthen these systems. Without the information presented by your risk assessment report, you don’t stand much chance of improving your digital security posture against various vulnerabilities. Review and bolster security controls: In most cases, security incidents occur due to a lack of controls in the process. For instance, without proper cybersecurity awareness training and best practices training, employees are unlikely to follow security protocols on their own, which could result in losses due to human errors. Based on the risk assessment, you can upgrade your securities and incorporate preventive measures against various risks. Track and quantify risks: To effectively manage various risks, you need to know the effect of these risks on your business. With a risk assessment, you can quantify these risks by identifying the potential losses posed by various threats. This helps you incorporate necessary risk mitigation strategies to prevent your exposure to various risks. The Value of Risk Assessment IT and security budgets are often difficult to explain to management. Everyone understands the consequences of not investing in correct security measures. However, it isn’t that easy or simple to put an exact ROI figure on security investments. The value of risk assessment is based on how you choose to act with the information you get from these reports. In this scenario, the real question is – what is the cost of not making this investment? Let us consider a major data breach for example. It is always about what you stand to lose in the aftermath of a breach. If your business is dealing with valuable customer data, a data breach can result in unrecoverable financial losses as well as reputational damage. Moreover, this might also result in regulatory non-compliance and attract heavy penalties from various regulators. In such cases, reviving a business after a major disaster can be almost impossible. Here, the cost of investment in security solutions and cyber insurance is negligible since it concerns the survival of the business. You may not be able to measure the exact ROI of the airbags in your car but that does not mean that your survival is not dependent on them. Similarly, the information and insights gained from routine risk analyses are critical to the operation, resilience posture and long-term success of your business. Assess Your Risks the Right Way Monitoring and managing your digital security risks is a continuous process that must be done regularly and should be a part of your ongoing operational strategy. To implement it the right way, you need to create a risk monitoring strategy that focuses on what risks need to be identified and how to identify them. Reach out to us today to perform a complete risk assessment of your digital infrastructure and help you build a resilient security posture against various threats. Data Sources: https://www.cybersecurityintelligence.com/blog/90-of-breaches-are-caused-by-human-error-4820.html: 90% of breaches are caused by human error --- # Adopt Zero Trust Security for Your SMB URL: https://mercuryit.com.au/adopt-zero-trust-security-for-your-smb/ With the cyberthreat landscape getting more complicated with every passing minute, cybersecurity deserves more attention than ever before. Fully trusting applications, interfaces, networks, devices, traffic and users without authentication is no longer an option. Misjudging and misplacing your trust in a malicious entity can lead to severe breaches that can damage your business. Zero Trust Security practices, however, can go a long way towards helping small and medium-sized businesses (SMBs) minimise cybersecurity risks and prevent data breaches. Zero Trust was introduced in 2010 by John Kindervag, a former Forrester analyst. The concept has since gained wide acclaim and approval as a trusted framework for cybersecurity. The Zero Trust approach trusts nothing within or outside its perimeter and insists on verifying everything attempting to connect to the company systems before granting access. In simple terms, the National Institute of Standards and Technology (NIST) refers to it as a “never trust, always verify” approach. Implementing Zero Trust Security within your business can help guard against data breaches, downtime, productivity loss, customer churn and reputation damage. Over 70% of businesses planned for the deployment of Zero Trust in 2020 and it is even more critical for SMBs in an era where workforces and networks are becoming heavily distributed.1 Three Misconceptions and Facts About Zero Trust Security Misconception: Zero Trust Security is only for enterprises. The Zero Trust cybersecurity framework is a proven counterthreat strategy. While it’s true that enterprises prioritise protection of their data and networks by deploying the best solutions and approaches, SMBs must also protect sensitive data and networks by taking adequate measures to minimise internal and external vulnerabilities. Thus, Zero Trust Security isn’t just for enterprises. It is equally significant for SMBs as well. Misconception: Zero Trust Security is too complex. By applying Zero Trust concepts at a scale that makes sense for your business, you will realise it isn’t as complex as you thought. Misconception: The cost of implementing Zero Trust is too high. Zero Trust adoption is operationally and economically feasible if you focus on your most critical applications and data sets first. Still Not Convinced? Let’s look at a few statistics that should convince you of the seriousness of today’s cyberthreat landscape as well as the need for a Zero Trust approach: Human error causes close to 25% of data breaches.2 Unfortunately, you can’t completely mistrust an external network, nor can you fully trust even a single user within your network. Experts predict that ransomware attacks will occur every 11 seconds in 2021.3 This gives you no time to be complacent. Over 40% of employees are expected to work from home post-pandemic.4 When this happens, many devices, users and resources will interact entirely outside the corporate perimeter. This increases the risk of an incident occurring. Phishing attacks have increased by over 60% since the pandemic started.5 To counter such a scenario, cybersecurity policies must be dynamic and adapt to address additional concerns. If you’re not equipped with a solid defense against cyberthreats, you may regret it later when a breach happens. Chances are your current approach to cybersecurity falls short of stopping cybercriminals from accessing your network. The Zero Trust approach can change all that. Adopting Zero Trust Security within your business does not mean you throw away your existing security tools and technologies. In fact, according to NIST, Zero Trust Security must incorporate existing security tools and technologies more systematically. Build an effective Zero Trust model that encompasses governance policies—like giving users only the access needed to complete their tasks—and technologies such as: Multifactor authentication Identity and access management Risk management Analytics Encryption Orchestration Scoring File-system permissions Taking your business down the path of Zero Trust may not be easy, but it’s certainly achievable and well worth it. Don’t worry about where and how to begin. With the right MSP partner by your side, your journey becomes easier and more successful. Contact us to get started. Source: com IBM 2020 Cost of Data Breach Report JD SUPRA Knowledge Center Gartner Report Security Magazine Verizon Data Breach Digest --- # Cyber Insights with Mercury IT- June 2021 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-june-2021/ Welcome to Cyber Insights with Mercury IT. This month we focus on latest breaches, top cyber security tips and the most recent report from SCAMWATCH illustrating the impact of scams on Australians in 2020. LATEST BREACHES: Waikato District Health Board – New Zealand Waikato District Health Board (DHB) had most of its IT services go offline Tuesday morning as the result of a suspect Conti ransomware attack, severely impacting services at six of its affiliate hospitals. Only email service has escaped the shutdown. With patient notes inaccessible, clinical services were disrupted and surgeries postponed. Phone lines went down and hospitals were forced to accept urgent patients only, using pencil and paper records. Service disruptions are expected to continue for several days. Read more here >> JBS Australia A cyber attack has shut down operations at the world’s largest meat processor in Australia, Canada and the United States, sending thousands of Australian abattoir workers home. Multinational company JBS, which is also the largest meat processor in Australia, had its global information systems brought down on the weekend. JBS has a network of 47 facilities with abattoirs and feedlots in NSW, Queensland, Victoria and Tasmania. Read more here >> Cybersecurity Tips One of the most common and successful tricks cyber criminals use to trigger you into falling for their scams is fake “stressor events”. In this context, “stressor events”, are shocking or compromising situations that inflict fear or provoke other emotions, for the purpose of causing an impulsive reaction. How it works: When the bad guys present a shocking claim to an unknowing victim, they often add a sense of urgency to drive home the “importance” of the scenario. In reality, this sense of urgency is another factor increasing the chances that you’ll react impulsively and click on their malicious links or download their dangerous attachments. Attackers explain their fake scenarios in the body of their phishing emails, but they’re also known for using shocking subject lines such as, “Act Now: Fraudulent activity on your checking account”. Though these tactics certainly aren’t limited to phishing emails, scammers also use these techniques in Smishing (SMS, or text phishing) and Vishing (voice phishing) attempts. How to avoid falling victim to pressure: The reason these attackers are often successful is because they‘re convincing the target to either avoid a negative consequence or gain something of value. Stop and think about the likelihood of the scenario before making the wrong move. Never open an attachment you weren’t expecting. Even if it appears to be from someone you know, pick up the phone to verify it’s legitimate. If the sender of the email is difficult to get in touch with or unwilling to speak on the phone, it’s likely a scam. If the sender requests that you send or receive money in unusual ways it’s probably a scam. For example, if they’re requesting a payment in the form of gift cards, don’t fall for it! If you require assistance with cybersecurity for your business, contact us --- # Tech & Cocktails Event URL: https://mercuryit.com.au/tech-cocktails-event/ Mercury IT recently hosted a Tech & Cocktails Luncheon at La Costa Restaurant and Bar, Fortitude Valley as part of our new "TECH AND CONNECT" event series focused on connecting people, businesses and technology… the critical components to future growth. CONNECT: with likeminded business leaders and professionals LEARN: the latest technology trends and innovations GIVEBACK: to charity Guests enjoyed the ambience of the Amalfi Coast and experienced an Italian inspired menu coupled with signature cocktails curated by the Maybe Sammy Team, Australia’s #1 Cocktail Bar and the raffle raised $1400 for the Currumbin Wildlife Sanctuary Charity. Our team of experts discussed 'How to attract more women to the IT Industry'. Emma Harris: ANZ SpaaCH / Ecosystem Leader at Cisco Rosemary Stockdale: Dean of Engagement within Griffith Business School Leigh Ellen-Potter: Senior Lecturer within the School of ICT at Griffith University, and Director of the IDEA Lab (Innovative Design and Emerging Applications). Matthew Pankurst: Client Engagement Manager in the IT sector for Hays Recruitment Martin O'Riordan: General Manager and Head of Cybersecurity for Mercury IT. Watch full panel discussion here >> Our next Tech & Connect event will be launched soon! --- # Top 9 IoT-Related Security Threats Businesses Face URL: https://mercuryit.com.au/top-9-iot-related-security-threats-businesses-face/ The Internet of Things (IoT) is rapidly changing the technology landscape as we know it. Businesses worldwide are leveraging IoT for benefits such as seamless collaboration, access to comprehensive data and the ability to make stronger business decisions based on insights derived from substantial data. Experts estimate the total number of installed IoT-connected devices worldwide to amount to 30.9 billion units by 2025.1 However, as we know, all that glitters is not gold. Due to the exponential growth of the number of IoT devices, the increasing amount of sensitive data these devices handle and their ability to function with minimal human intervention, the doors have been left wide open to high-level cybersecurity risks. IT professionals consider about 60% of IoT devices to be vulnerable to medium- or high-severity attacks.2 Essentially, the IoT ecosystem is made up of numerous interconnected devices constructed with unique sensors that collect, share, process, act on and store data. This introduces a growing risk for IoT users since hackers could exploit the vulnerability of a single device in the ecosystem and potentially gain “backdoor” access to your business’ entire network and wreak havoc. 9 IoT-Related Risks to IT, Network and Data Security Nefarious cybercriminals can target and use IoT devices to exploit vulnerabilities in your IT network as well as the four components of an IoT device—the hardware, connectivity, software and interface. Here’s a list of nine IoT-related security vulnerabilities that you must mitigate immediately: 1. Lack of Proper Security Controls Within Most IoT Devices Even though several flaws regularly emerge in an IoT device’s software, most IoT devices lack the capability to be patched with the latest security updates. As a result, the devices are indefinitely exposed to evolving security risks. Many Operational Technology (OT) systems lack filtering chokepoints, such as firewalls or router ACLs, which render standard network remediation tactics ineffective when it comes to preventing the spread of malware. In fact, it could trigger critical infrastructure disruptions or failures. Most IoT devices even lack the basic encryption systems to secure data in transit and at rest. In fact, over 95% of all IoT device traffic is unencrypted.3 2. Threat to Protection of Sensitive Data The sensors on IoT devices collect (potentially store and share) copious amounts of sensitive data without your knowledge or explicit consent. For example, an IoT device is capable of collecting data on what you say, do or buy from inside your home or business’ office. One doesn’t need to be an expert to imagine how devastating it would be if any of this data was compromised through industrial espionage or eavesdropping. 3. Threat to Workplace Security The rapid surge in the number of IoT devices and applications within the modern-day workspace has posed a multifaceted security challenge for a business’ IT team. Today’s decentralised networks that involve the increased utilisation of segmented “home” networks, have added multiple potential attack vectors. The 2021 Data Exposure Report prepared by the Ponemon Institute stated that home networks are 71% less secure than office networks. The more the number of IoT devices used by employees on their home networks, the greater the security risks. 4. Absence of Regulations or Standards for IoT Currently, no regulatory requirements or standards for the manufacturing of IoT devices exist, either globally or industry-specific, with respect to security and data protection controls. This means businesses have been left on their own to mitigate IoT-related risks with little to no guidance. 5. Vulnerable Default Passwords Cybercriminals find it easy to exploit hard-coded and embedded credentials to enter a business network. When an entire string of IoT devices share the same credentials (such as username: admin and password: admin), it serves as an open invitation for hackers. 6. Impossibility of Implementing a Single Security Policy IoT ecosystems are complex due to the diverse types of data collected by the devices and the varied computing powers of each device. This complexity makes it impossible to implement a “one size fits all” security policy or solution to tackle the digital security risks spread across the “IoT journey.” 7. Inability to Train Every User on IoT Security Regular security awareness training has proven to be effective in significantly reducing the likelihood and impact of cyberattacks. However, businesses are unable to leverage this tool to educate users on IoT functionality and its related risks due to the lack of broad universal knowledge and awareness about IoT at the user level. 8. Life-Threatening Risks to Data Integrity If the data collected by medical IoT devices (such as pacemakers and continuous insulin regulators) is compromised or lost, it can turn into a life-threatening risk for patients. Any business in the healthcare industry using medical IoT devices must prevent this risk from jeopardising data integrity, control and security. 9. Innate Vulnerability to Cyberattacks A cybercriminal can exploit an unsecure IoT device without even breaking a sweat. About 72% of organisations experienced an increase in endpoint and IoT security incidents last year and 56% of organisations expect a compromise via an endpoint or IoT-originated attack within the next 12 months.4 Here’s a list of the most common routes a hacker might take to exploit your business: Botnet Attacks: During a botnet attack, hackers exploit botnets, a collection of internet-connected devices infected by malware, to carry out acts such as credential leaks, unauthorised access, data theft and DDoS attacks. Denial-of-Service/Distributed Denial-of-Service (DoS and DDoS): During DoS or DDoS attacks, hackers can flood your business’ systems with multiple data requests, causing them to slow down, crash or even shut down. Malware: Malware attacks on your business’ IoT ecosystem can prove fatal. The entire network of IoT devices can be hijacked and turned into botnets that act as per the hacker’s commands. Passive wiretapping/Man-in-the-Middle (MITM) attacks: Such attacks involve an unauthorised entity breaking into your business’ network and behaving as an insider, which puts your business’ invaluable data in grave danger. Structured Query Language injection (SQL injection): A technique that can destroy the database, SQL injection involves injecting a malicious code in SQL statements. Wardriving attacks: To carry out a wardriving attack, a hacker drives around and uses technology to identify unsecure wireless networks (in this case, the network IoT devices are connected to). Zero-Day Exploits: A zero-day vulnerability is an undetected vulnerability in software or hardware that can cause serious problems if a hacker exploits it. Strategies and Best Practices for Mitigating IoT Risks The above-mentioned risks shouldn’t completely discourage you from leveraging IoT technology in your business. You can reap the valuable benefits of this technology with proper information and implementation of security best practices and strategies, which will help you tackle and avoid IoT-based risks. Some steps in the right direction include thorough risk assessment (with respect to IoT), automated and routine patch management, security policy management for both internal and third-party systems, and more. You do not have to navigate this rocky road all by yourself. Let us help you build a resilient defense against IoT-related risks. Contact us today to learn more. Sources: 1: Statista 2 & 3: 2020 Unit 42 IoT Threat Report 4: 2020 Endpoint and IoT Zero Trust Security Report --- # Making Security Awareness Second Nature URL: https://mercuryit.com.au/making-security-awareness-second-nature/ Your business’ security program must start with your employees and strong security policies rather than entirely depending on your IT team or the latest security solutions. You can significantly reduce the likelihood of a data breach by combining a well-drafted cybersecurity policy with comprehensive security awareness training. It is your responsibility to implement security training for all your employees so that your organisation can withstand cyberattacks and carry out business as usual. Regular training will also help you develop a security-focused culture within your business and make cybersecurity awareness second nature to your employees. Cybercriminals can target your employees at any moment to gain access to sensitive business data. However, if your employees receive regular security awareness training, their calculated decision-making and quick response can effectively block deceiving threats. Security Culture and Its Influence on Employees Conducting a one-time employee training session for the sake of compliance does not adequately benefit your business’ cybersecurity posture. It is regular security awareness training that can truly protect your business from looming cyberthreats that are constantly on the rise. The following statistics throw light on why security awareness training is essential in today’s threat landscape: Human errors cause 23 percent of data breaches 1. Over 35 percent of employees do not know about ransomware 2. Nearly 25 percent of employees have clicked on malicious links without confirming their legitimacy 3. The aim of developing a security-focused culture is to nurture positive security habits among employees. For example, the simple habit of locking one’s computer screen when leaving the workstation unattended can prevent data from being accessed by unauthorised users. Once you properly train your employees, they will be more aware of the business’ security policies and will realise that their employer’s cybersecurity is their responsibility as well. Tips to Implement Effective Security Awareness Training Until recently, companies would impart security awareness training as lectures using a slide deck. Businesses conducted these training sessions once a year or once during induction. However, these sessions proved ineffective because of their uninteresting nature and lack of follow-up sessions. If you intend to develop a security-focused culture, implementing robust security awareness training is crucial. Here are a few tips that can help you effectively implement security training: Make the training sessions interactive - Your employees will show more interest if you deliver training in high-quality video format since it grabs more attention. Add text content only as a complementary piece to the video. Ensure that the presentation is appealing to your employees so that they do not miss out on important details. Also, make sure your employees can clear their doubts through face-to-face discussions or virtual conversations with subject matter experts. Break the training into smaller modules - Since the attention span of your employees will almost certainly vary from one to another, breaking training sessions into smaller modules will help them retain information faster as a whole. You can regularly send training modules to your employees to ensure they are up to speed on the latest security topics. Smaller units have a better chance of retention than lengthy pieces of content. Facilitate self-paced learning - Give your employees the freedom to learn at their convenience. This, of course, does not mean deadlines should not be set either. Make sure you give your employees sufficient time to complete each training module based on its complexity. Training must include relevant material - The training material must not contain any outdated information. Given how quickly the cyberthreat landscape is changing, the training must be updated regularly and must cover new cyberthreats, so hackers don’t end up tricking your employees. Please remember that the content should not be overly technical. The training material must be imparted in an easy-to-understand manner, so employees have no trouble applying it in daily work scenarios. Conduct reviews with quizzes and mock drills - To assess your employees’ preparedness, you must conduct regular tests, including mock drills, that assess alertness based on their response to simulated scams. Transform Your Weakest Link into Your Prime Defence Regular security awareness training can help develop a transformative security culture within your business, thus enabling your employees to detect even sophisticated cyberthreats and undertake adequate action. We understand that implementing robust security awareness training can be a bit challenging. However, you have nothing to worry about. We can help you seamlessly integrate security awareness training into your business operations to make your employees the first line of defence against existing or imminent cyberthreats. Get in touch with us today and let's get started. Article curated and used by permission. Sources: 1. IBM 2020 Cost of Data Breach Report 2. Opinion Matters Survey 3. Help Net Security Magazine --- # Cyber Insights with Mercury IT- May 2021 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-may-2021/ This month in Cyber Insights we highlight SMS-based phishing attacks, known as smishing, latest breaches and as part of Privacy Awareness Week...tips for protecting you and your business online. This week is PRIVACY AWARENESS WEEK, it's a good reminder that if you aren’t protecting your personal information online, you could be sharing things you would rather keep private. Our personal information is valuable and worth protecting. But if you don’t know how, you are not alone. Even though most Australians (85%) have a clear understanding of why they should protect personal information, 49% don’t know how to go about it.* Many aren’t doing enough to safeguard their privacy due to lack of time, knowledge and the perceived difficulty of the process. It’s easier and faster than you think. Here are some of our top tips to help protect your privacy online. Use multi-factor authentication and strong passphrases If your data is breached, act quickly Talk about privacy with your children Update your security software Check before sharing your personal information Shop online securely Update your privacy settings Be aware of phishing scams Secure your devices Share online with privacy in mind I don't know about you, but I've been receiving many SMS-based phishing attacks, known as smishing, lately. You may be familiar with "your account is on hold" or "click here to track your UPS package", or even the classic "you're a winner". So do we need to be worried about these attacks? The short answer is yes, every organisation and person should take these attacks seriously. They are abundant and work. Sophisticated or not, many people lose money or are duped into providing user names and passwords (business and personal). Here is an example from less than two weeks ago. In this case, two Indonesian men were arrested for successfully swindling over 60 million dollars using SMS-based phishing scams. It impacted over 30,000 U.S. citizens out of the over 200 million citizens targeted. Two guys…200 million malicious text messages…60 million in stolen money. And you know we only catch the stupid ones. The biggest reason to prevent smishing attacks from being successful is to protect both you and your organisation. Every skill you teach someone about how to recognise and correctly react to a smishing assists in doing this. It reduces risk to both employee and business. If an SMS message has the slightest chance of being a malicious phishing message, NEVER click on the URL. Learning how to tell the difference between a rogue and legitimate URL can help immensely. Many phishing SMS messages (and legit ones) have "shortened" URLs. A shortened URL is where the original, usually longer URL, is swapped out for a shorter one. And when the shorter one is clicked on, it redirects the clicker to the longer one. You can use a URL expander service to check the URL. Chris Haigh Chief Information Security Officer, Mercury IT Read full Cyber Insights here >> For more assistance with cyber security for your business contact our cyber security consultant --- # Your Biggest Cybersecurity Risk: Your Employees URL: https://mercuryit.com.au/your-biggest-cybersecurity-risk-your-employees/ Cybercriminals work round the clock to detect and exploit vulnerabilities in your business’ network for nefarious gains. The only way to counter these hackers is by deploying a robust cybersecurity posture that’s built using comprehensive security solutions. However, while you’re caught up doing this, there is a possibility you may overlook mitigating the weakest link in your fight against cybercriminals — your employees. With remote work gaining traction and decentralised workspaces becoming the new norm, businesses like yours must strengthen their cybersecurity strategies to counter human errors and data breaches perpetrated by malicious insiders. All employees, irrespective of their designation/rank, can expose your business vulnerabilities to cybercriminals. Implementing routine security awareness training for employees can help you prevent a vulnerability from escalating into a disaster. As the first line of defense against cyberattacks, your employees must be thoroughly and regularly trained to identify and deflate potential cyberthreats. Why Employees Pose a Risk to Businesses? According to IBM’s Cost of a Data Breach Report 2020, 23 percent of data breaches in an organization occurred because of human error. An untrained employee can compromise your business’ security in multiple ways. Some of the most common errors committed by employees include: Falling for phishing scams: With the onset of COVID-19, hackers masquerading as the World Health Organization (WHO) tricked people into clicking on malicious links and sharing sensitive information. Cybercriminals are using improved techniques, like spoofed emails and text messages, to propagate the ongoing scam. Your employees must be well-trained to counter it. Bad password hygiene: A section of your employees might reuse the same password or a set of passwords for multiple accounts (business and personal), which is a dangerous habit that allows cybercriminals to crack your business’ network security. Misdelivery: Even slight carelessness can lead to an employee sending sensitive, business-critical information to a hacker. Such an act can cause lasting damage to your business, which is why you must be prepared to counter it. Inept patch management: Often, employees can delay the deployment of a security patch sent to their device, which can lead to security vulnerabilities in your business’ IT security left unaddressed. The bottom line is that with cybercriminals upgrading their arsenal every day and exploring a plethora of options to trap your employees, security awareness training has become more important than ever before. Security Awareness Training: An Essential Investment A one-time training program will neither help your employees repel cyberthreats nor help your business develop a security culture. To deal with the growing threat landscape, your employees need thorough and regular security awareness training. You must never back out of providing continual security awareness training to your employees just because of the time and money you need to invest in it. The return on investment will be visible in the form of better decision-making employees who efficiently respond in the face of adversity, ultimately saving your business from data breaches, damage to reputation and potentially expensive lawsuits. The following statistics highlight why you must deploy regular security awareness training and consider it a necessary investment: Eighty percent of organisations experience at least one compromised account threat per month. 1 Sixty-seven percent of data breaches result from human error, credential theft or social attack. 2 Since the start of the COVID-19 pandemic, phishing attacks have gone up by 67 percent. 3 Expecting your employees to train themselves on how to detect and respond to cyberthreats certainly isn’t the best way to deal with an ever-evolving threat landscape. You must take on the responsibility of providing regular training to your employees to ensure you adequately prepare them to identify and ward off potential cyberattacks. Every employee must realize that even a minor mistake can snowball into a terrible security disaster for the company. They need to understand that your business’ cybersecurity is also their responsibility. You can transform your business’ biggest cybersecurity risk – your employees – into its prime defense against threats by developing a security culture that emphasises adequate and regular security awareness training. Making all this happen will require continued effort and may seem like an uphill climb, but with the right partner by your side, you can easily integrate security awareness training into your business’ cybersecurity strategy. The first step towards training and empowering your employees starts with an email to our cyber security consultant. Feel free to get in touch anytime. Article curated and used by permission. Sources: McAfee Cloud Adoption & Risk Report Verizon 2020 Data Breach Investigations Report Security Magazine Verizon Data Breach Digest --- # Cyber Insights with Mercury IT- April 2021 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-april-2021/ This month in Cyber Insights we highlight payment redirection scams, latest breaches and tips for protecting your business from deepfake technology. Read full Cyber Insights here >> Current Scams Payment redirection scams cost Australian businesses $14 million Australian businesses reported over $14 million in losses to Scamwatch due to payment redirection scams last year, and average losses so far in 2021 are more than five times higher compared to average losses in the same period last year. Total losses are much higher as these scams are reported to a range of different organisations. In a payment redirection scam, also known as business email compromise scams, scammers impersonate a business or its employees via email and request that money, which usually is owed to the legitimate business, is sent to a fraudulent account. “Payment redirection scams impact businesses across many industries, including real estate, construction, law, recruitment, and universities,” ACCC Deputy Chair Delia Rickard said. “Scammers tend to target new or junior employees, or even volunteers, as they are less likely to be familiar with their employer’s finance processes or the types of requests to expect from their supervisors.” “We recommend organisations ensure their staff are well trained in the company’s payment processes and remain aware of payment redirection scams,” Ms Rickard said. Payment redirection scams can take several different forms. In some instances, scammers hack into a legitimate email account and pose as the business, by intercepting legitimate invoices and amending the bank details before releasing emails to the intended recipients. In one instance, a victim lost $16,500 in a single transaction after a scammer used a staff member’s email address to send an invoice to a customer with ‘updated bank details’, redirecting the payment to the scammer’s personal bank account. Other times, payment redirection is done by spoofing, when scammers impersonate CEOs or other senior managers using a registered email address that is very similar to that of the genuine email address. The scammer will then request that staff transfer funds to them or make a payment to a third party on behalf of the business. Latest Security Breaches The Parliament of Western Australia Western Australia’s parliamentary email network was infiltrated by suspected Chinese hackers in the fallout of the recent massive Microsoft Exchange incident. The intrusion was detected on 03/04 in the middle of the state election campaign and led to intervention from Australia’s cybersecurity watchdog. Email service was disrupted but an investigation by Western Australia’s Parliamentary Services Department concluded that no sensitive data was stolen in the attack. Read more here >> Channel Nine In an especially audacious attack, hackers disrupted broadcast operations at Channel Nine, preventing the station from transmitting its popular Sunday morning news program, which runs from 7:00am to 1:00pm out of studios in Sydney as well as its 5pm evening news broadcast. The 6pm broadcast was facilitated by studios in Melbourne. The company acted quickly to restore operations. Read more here>> Cybersecurity Tips Engaging with others through videos has become a standard part of our everyday lives. Whether you’re joining a video conference at work or watching your favourite celebrity on Instagram, videos are everywhere. However, can you really trust what you’re seeing? The rise of deepfake technology could make it difficult to know if what you are watching is real or fake. What is Deepfake Technology? Deepfake technology uses AI and machine learning to create realistic audio and video spoofs. These spoofs combine real footage of one person with the words or actions of another. While deepfake technology has been around for years, it is now easier to use and harder to recognize. For example, there are mobile apps that allow you to replace a celebrity’s face with your own to create surprisingly realistic videos. How Could Cybercriminals Use This Technology? There are a number of ways that the bad guys could use deepfake technology. One way cybercriminals are using this technology is to impersonate celebrities. Spoofing influential people could be used to spread false information designed to intentionally mislead you. This is a tactic known as disinformation. On a smaller scale, this technology could be used to impersonate executives in your organisation. Imagine receiving a phone call from your CEO asking you to send money or confidential information. However, it isn’t actually your CEO, but a cybercriminal spoofing their voice with deepfake technology! What Can I Do to Stay Safe? To stay safe from deepfake spoofs remember these tips: Always be suspicious of videos that contain shocking or controversial claims. This could be disinformation in action. Always check the source. For example, if you are watching a celebrity’s video on social media, make sure it was posted on their verified profile. Always verify before taking action. In the example of your CEO calling, you could ask to set up a meeting in person. For more assistance with cyber security for your business contact our cyber security consultant --- # What is a Security Operations Centre? URL: https://mercuryit.com.au/what-is-a-security-operations-centre/ Yesterday’s security is no match for the evolving threats and attack methods used by today’s cybercriminals. You need to build a comprehensive security defense using proactive strategies and advanced security controls to dramatically improve your security posture, enabling you to confidently protect your business-critical systems and data. Traditionally a 24/7 SOC is astronomically cost prohibitive, Mercury IT have developed a 24/7 fully managed Security Operations Centre (SOC-as-a-service) at an affordable price point for small to medium businesses. We are pleased to launch this service at a cost of $20 per device, per month. Our SOC-as-a-service solution leverages the power of people, processes and technology to provide essential security capabilities like real-time threat and intrusion detection, rapid incident response and investigation, and continuous 24/7 monitoring and vulnerability management. Take advantage of our team of seasoned cybersecurity professionals and expert analysts to empower your business to overcome today’s top cybersecurity challenges and implement a more proactive and preventative approach to protecting your business. --- # How Bad Guys Bypass Your Email Security URL: https://mercuryit.com.au/how-bad-guys-bypass-your-email-security/ How Bad Guys Bypass Your Email Security- Tips from our Partner KnowBe4 Have you ever wondered how phishing attacks get into your inbox? Most email clients, such as Outlook and Gmail, have built-in features to filter out potential threats. Additionally, it's likely that your organisation has extra security measures to help protect your work account. Unfortunately, scammers have found clever ways to bypass this security and creep into your inbox. Technical Tactics Most security filters work by looking for specific text patterns, file formats, or links to websites that are known to be suspicious. Scammers often bypass this feature by hosting a malicious file on a legitimate file-sharing service, such as Dropbox or Google Drive. Your email filters will not see the linked file as a threat, because it is hosted on a trusted website. Remember: Never trust a link within an email that you were not expecting, even if it is to a familiar website. Social Engineers Bad guys can completely avoid security filters, by sending phishing emails that don’t include links or attachments. Instead, they use a technique called social engineering. Social engineering is when a scammer poses as someone else and tricks you into sharing sensitive information. Typically, the phishing email will appear to be from someone important, such as your manager or a member of your IT department. Then, the scammers try to use this disguise to trick you into replying with sensitive information, sending a confidential attachment, or even wiring money to them. Remember: Stop and think before you click. Were you expecting this email? Is this an unusual request? Is there another way that this person can, or should, securely gather this information? A Human Touch Technology will never catch 100% of threats because the attackers are human. That’s why becoming a strong part of your organization’s human firewall is so important. Remember: Stay on the lookout for suspicious emails. Nothing can catch a bad guy better than a good guy! Stop Look Think - Don't be fooled The KnowBe4 Security Team --- # Cyber Insights with Mercury IT- February 2021 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-february-2021/ Welcome to the latest edition of Cyber Insights with Mercury IT. This month we highlight a popular phishing scenario and how to stay safe from this advanced attack. We also touch on the latest security breaches and cybersecurity safety tips for now and later! Read Full Cyber Insights here >> Current Scams Here’s a popular phishing scenario: You receive an email with a link. The link takes you to a phony login page with the name and logo of a legitimate website. Once you submit your username and password, the information is sent straight to the bad guys. Cybercriminals love to use these phony look-alike login pages to steal your credentials and access sensitive information. Now cybercriminals have developed a way to make look-alike pages even more convincing. Scammers use a special tool to automatically display your organization’s name and logo on the phony login page. They can even use this tool to populate your email address in the corresponding login field. This creates a false sense of security because many legitimate websites remember your username if you have logged in previously. While this is an advanced attack, you can still stay safe by practicing the tips below Never click a link in an email that you were not expecting. Remember that any site, brand, or service can be spoofed. When you’re asked to log in to an account or online service, navigate to the official website and log in. That way, you can ensure you’re logging in to the real site and not a phony look-a-like. Cybersecurity Tips New innovations in technology are being developed at a rapid rate. But new technology comes with new risks. Let's go over some examples of how technology will change in the future and ways you can stay safe. 5G Cellular Networks You may think a cellular network is only used for cell phones, but it can also be used for GPS devices, wifi hotspots, logistics tracking, and more. 5G stands for the fifth generation of cellular networking. In short, 5G is a dramatically faster and more stable way to connect to the internet. While this is great for connectivity, it could be a major struggle for cybersecurity. Current security monitoring methods may not be strong enough for the speed and amount of traffic created on a 5G network. The Internet of Things The Internet of Things, or IoT, is a network of connected devices designed to work together using an internet connection. A common example of this is the use of “smart” devices in the home. Smart devices connect and communicate with one another using your wifi network. IoT is being used and developed across a number of industries, from healthcare to logistics. Each device within an IoT network is a potential risk. As more devices are connected to one another, an organisation’s attack surface grows. Meaning, there are more targets for cybercriminals to attack and more points of entry to protect. As these networks grow, it is essential that cybersecurity measures grow with them. Safety Tips for Now and Later Stay Informed- No matter what the future holds, it is always harder to fool an educated person. Follow trusted news and media outlets for the latest updates in technology and cybersecurity. Be Suspicious- As technology changes, cybercriminals will find new ways to attack. If something doesn’t look or feel right, report it. It is better to be safe than sorry! Time Travel to the Past- Maybe technology isn’t quite there yet, but you can use classic communication to outsmart cybercriminals. For example, if you receive a suspicious email, reach out to the sender by phone to verify that it’s legitimate. --- # Cyber Insights with Mercury IT- January 2021 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-12-january-2021/ Welcome to the latest edition of Cyber Insights with Mercury IT. This issue highlights data breaches and what to do if you think your information has been compromised. Cyber Insights Overview Watch Out for Impersonation Scams – Cybercriminals are attempting to take advantage by using the Australian Cyber Security Centre (ACSC) name to send emails to individuals containing a malicious link requesting they download ‘Antivirus’ software. If clicked on, the link downloads and installs malicious software to the individual’s computer.These cybercriminals are using social engineering tactics to convince potential victims to install remote desktop software. If successful, these criminals will be able to steal your banking information. The government issued the following statement, "The Australian Cyber Security Centre (ACSC) warns some Australians are receiving phone calls or emails from scammers claiming to be ACSC employees and that the receiving person’s computer has been compromised." > Read More Business software solutions provider Epicor Software has disclosed a breach that may have exposed business data but did not impact daily operations. The incident had been reported to relevant authorities and is currently under investigation. > Read More What’s the Deal with Data Breaches? Data breaches are becoming more and more common these days. You hear about them in the news all the time. So you might be wondering: what exactly is a data breach? A data breach is when secure information is taken from a trusted environment without permission. The bad guys can use this information to steal your identity, hack into your online accounts, or use the information for targeted phishing attacks to gather even more information about you. However, just because the data was exposed does not necessarily mean it’s already being used by the bad guys. It only means that bad guys can easily gain access to it. There are steps you can take to protect your information even if you were exposed in a data breach. How do I protect my information? Use secure passwords. You may also want to try using a password manager. Set up two-factor or multi-factor authentication. Keep your personal information secure. Never share your passwords or personal information with anyone you don’t know. Shred documents with your personal information on it before throwing it away. What do I do if my information was already exposed in a breach? Don’t panic! Take a moment to assess the situation. Ask yourself: What sort of information was exposed? Do I need to notify my bank or other entities? What steps should I take to make my information more secure now? If your password was exposed, we recommend changing your password for all online accounts associated with that password immediately. Make sure the password is complex or use a password generator to create one for you. For extra security, you may want to set up two-factor or multi-factor authentication. If your credit card number or bank account number was exposed, we recommend calling your bank or cardholder and cancelling your card(s) immediately. Let them know that your information was exposed so they know to look out for charges that may be fraudulent. If you have any questions regarding Cybersecurity or require assistance with Information & Communication Technology (ICT) services please contact us. --- # Cyber Insights with Mercury IT- November 2020 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-26-november-2020/ Welcome to the latest edition of Cyber Insights with Mercury IT. This issue highlights online shopping scams including what to look out for so you don't get tricked and top tips on staying safe while shopping this festive season. Cyber Insights Overview Watch out for online shopping scams – Online shopping scams have increased 42% this year with almost $7 million in reported losses. Scammers will now be actively targeting people doing their Christmas shopping and you will need to be hyper vigilant for the Black Friday and Cyber Monday sales. Scams on Facebook marketplace and Gumtree have increased by 60% this year. Do your research, check independent reviews and don’t feel pressured by the sales price > Read More REvil ransomware strikes again, this time at major accounting firm Nexia. The company informed regulators of an attack on November 3, 2020. While the REvil gang had up until recently boasted of the score on its website, the information has since disappeared, leading to speculation that the ransom was paid. The firm has not confirmed what if any data was stolen, although the REvil group did confirm that it had data in its initial posting. > Read More Our top Cybersecurity tips to stay safe this holiday season! Keep your smartphone, computer, and other devices updated. This helps ensure that your device has the latest security patches. Only use trusted Wi-Fi connections and be suspicious of any network that does not require a password to connect. Take the time to change any outdated or simple passwords. Use strong, unique passwords on all of your accounts. Be careful not to overshare on social media. Consider anything you post to be public information. Keep an eye on the activity in your banking and credit card accounts. Also, be sure to monitor your credit report on a regular basis. Be suspicious of emails you receive about online purchases. Check the status of your order directly on the website that you purchased from. If you receive a holiday greeting card in your inbox, verify the sender before clicking the link to view the card. If you’re traveling for the holidays, be sure to keep your devices stored safely at all times. Pay close attention to the websites that you order from. Only shop on websites that you know and trust. Watch out for giveaways and contests. Remember that if something seems too good to be true, it probably is. --- # Top Ten Social Media Security Tips URL: https://mercuryit.com.au/top-ten-social-media-security-tips/ Learn how to minimise risk and protect your family on social media with our top ten social media security tips! --- # Work from Home Flexibility Here to Stay URL: https://mercuryit.com.au/work-from-home-flexibility-here-to-stay/ AJ Williams spoke with Alister Thomson from The Gold Coast Bulletin about how the work from home boom is providing big opportunity for Gold Coast employers to attract and retain key talent from all around the country. “It is going to give the workforce a lot more flexibility, if you don’t need to go into the office it doesn’t matter where you live”. Read full article below. --- # Cyber Insights with Mercury IT- 12 November 2020 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-12-november-2020/ Welcome to the latest edition of Cyber Insights with Mercury IT, an informative newsletter that will keep you abreast of the latest cybersecurity tips, security breaches and assist you in staying aware of potential scams that could harm you or your business. Cyber Insights Overview Over the last two weeks the world has been hearing about Sean Connery, best known for portraying James Bond and countless other roles, passing away at the age of 90. Cyber criminals will be sure to exploit this celebrity death in a number of ways, so be extra cautious of any mention of Sean Connery in emails, text messages and social media posts. In addition to this, there was plenty of news surrounding the USA presidential election. Again, it will pay to be overly cautious of social media posts, texts and emails around this subject. Analytics and media monitoring firm Isentia, the company that provides media services for much of the Australian government, has been hit by a cyberattack, likely ransomware.Customers lost access to the company’s service portal that connects them with media reporting on them, issues of interest and journalists. The incident is under investigation, with no clear diagnosis of what, if any data was stolen. Isentia holds sensitive information for powerful public figures as part of its media services operations > Read More > Read more Cyber Insights here > --- # Social Media- The Good, The Bad and The Ugly URL: https://mercuryit.com.au/social-media-the-good-the-bad-and-the-ugly/ In 2020, the number of people using social media is over 3.81 billion worldwide, with the average user having 8.6 accounts on different networking sites spending 2 hours and 29 minutes on there each day. Most people have an online presence, it can make them feel more connected and involved. Users feel that they can participate in things that are happening around the world, however these social platforms also come with high risk factors that could impact you, your family, and your business. "If you are not paying for the product… you are the product" Netflix documentary - The Social Dilemma 2020 Our Cybersecurity experts navigate the complexity of social media including: How to control your information in an online world Being aware & identifying disinformation How much information are you putting online Educating & protecting your children How the safety of you and your family is at risk Social engineering & 'it won’t happen to me' mentality Understanding your social media security settings to reduce risk View recording here > --- # Cyber Insights with Mercury IT- 15 October 2020 URL: https://mercuryit.com.au/cyber-insights-with-mercury-it-15-october-2020/ Welcome to the first edition of Cyber Insights with Mercury IT, an informative newsletter that will keep you abreast of the latest cybersecurity tips, security breaches and assist you in staying aware of potential scams that could harm you or your business. Cyber Insights Overview The COVID-19 related scams are still by far the most prevalent scams in the market right now, so be on the lookout. Trading Reference Australia has had an Unauthorised Database Access that is still being investigated. They are one of Australia's largest tenant information databases. The Scouts Victoria was hit by ransomware in July and August. Sensitive information including names, phone numbers, credit card information, bank details, ID documents including passport information and driver's license details were exposed. Cybersecurity Tips- Improve your passwords > Read More --- # The Pinnacle of Human Achievement URL: https://mercuryit.com.au/the-pinnacle-of-human-achievement/ I hate wiping my bottom. I really loathe it. It is just that the concept of using a wad of fibrous tree material after you have gone to the bathroom seems ridiculous. I am not for an instant suggesting that I don’t—of course I do, I just hate the notion. And please don’t sit there and suggest water under pressure is a better option, it’s not as if you are going to let yourself air-dry are you? No, toilet paper is unfortunately an unavoidable part of the process. Please don’t get me wrong, I am actually grateful that we have toilet paper at all, the alternatives are so much less appealing. For the love of all that is holy, do not even contemplate doing an internet search for toilet paper alternatives, some things are best left unknown. We have only had commercially available toilet paper for the last 163 years and far more disturbing, splinter free toilet paper has only been a thing since 1935! So, no, I am not ungrateful, I just think it is time that we put some effort into coming up with a better way. Perhaps we are just lacking ambition and creativity. Set in 2032 , the 1993 movie Demolition Man provided a glimpse of the type of future I am talking about. One of the most famous scenes in the movie is the toilet paper replacement—the three seashells. Whilst the movie does not describe how they worked; the idea was just brilliant. 300,000 years ago Homo sapiens evolved during a time of dramatic climate change. Sound familiar? Anyway, our branch of humanity not only survived, we flourished and became the most successful species on the planet. Why? Because of our big brains and use of tools. And well, truth to tell, also because of our in-built, immutable survival instinct and somewhat violent tendencies—we did outlast all other co-existing branches of humanity. But let us not get bogged down in our innate ability and propensity for making other species extinct. The fact remains, our intelligence is what enabled us to develop, spread to every corner of the globe and prosper despite mother nature’s numerous attempts to wipe us out. We are not just smart, we have been, and are, getting progressively smarter. Let me put it into some perspective. 300,000 years of history is a little hard to get your head around, so let’s convert it to a smaller timeframe, say 24 hours. Based on this, 300,000 years ago would be 24 hours ago and 170,000 years ago, when we started to wear animal skins as clothes, would be 13½ hours ago. So, just over 5 hours ago, humans arrived in Australia and we fashioned fishhooks 3½ hours ago. For the first 23 hours and 5 minutes we hunted and gathered food. 55 minutes ago, we sowed the first grains and started on a path to civilization. We developed bronze, created numerals and started writing 25 minutes ago and just over 24 minutes ago we invented the wheel. 15 minutes ago, we smelted iron and 10½ minutes ago we built the Great Wall of China. Paper was developed 9 minutes ago and the first block printing on it was just under 6 minutes ago. 2 minutes ago, Copernicus realised that Earth revolved around the Sun and Newton discovered the laws of motion and gravity a minute and a half ago. A minute ago, Alessandro Volta created the first electrochemical battery, 57 seconds ago, George Stephenson invented the steam train and Michael Faraday invented the electromagnetic device that would become both the dynamo and electric motor. 40 seconds ago, Mr Bell, Mr Edison and Mr Benz invented the telephone, the light bulb, and the car. The Wright Brothers were flying over Kittyhawk 34 seconds ago, whilst the first computers and the transistor were invented 21 seconds ago. A bunch of very smart people put Neil Armstrong and Buzz Aldrin on the moon 14½ seconds ago and the first Apple and IBM personal computers were released 12 and 11 seconds ago respectively. The World Wide Web started 8½ seconds ago and we mapped the human genome 5½ seconds ago. And just under 4 seconds ago, the first iPhone was released. So, we come to 2020, a world where apparently the most important thing people cannot live without when the zombie apocalypse hits is, yep, toilet paper. Essentially modern humans have been using trees to wipe their bottoms for 300,000 years--and we still are. Have we reached the pinnacle of human achievement? I refuse to believe so. Our inventiveness and scientific advances in the past 3 minutes are just staggering, imagine what we can do in the next 3 minutes. Think of that whilst you consider the complexity and ingenuity of design that went into the development of the device that you are reading this on. Perhaps it is the nature of the topic that our best and brightest are not attracted to spending any meaningful amount of time pondering it. Really? I am sure there will be more kudos for solving this problem than naming a new mould spore. So, we need to put the challenge out—once our best and brightest have finished concentrating on vaccines, they need to commit to a unified global effort to developing my three seashells before 2032—we only have 3½ seconds. --- # Business Cybersecurity Risk Webinar Series URL: https://mercuryit.com.au/mercury-it-webinar-series-business-cybersecurity-risk/ Mercury IT's Business Cybersecurity Risk Webinar Series is designed to help businesses understand and better manage their Cybersecurity risk. At the centre of the series is the Cybersecurity Framework developed by the National Institute of Standards and Technology (NIST). Presenter Chris Haigh, Chief Information Security Officer (CISO) at Mercury IT, has over 20+ years’ experience in Cybersecurity and explores the five key elements of the framework… Identify, Protect, Prevent, Respond and Recover from Cybersecurity risk. In conjunction with Chris, guest speakers and additional industry experts joined throughout the series to share their knowledge. Part 1: Identify- Guest speaker: Philip Meyer, Partner Technology Strategist, at Microsoft for 29 years (Sydney, Australia). Learn how the Identify function assists in developing an organisational understanding for managing cybersecurity risk to systems, people, assets, data, and capabilities with a focus on Microsoft Intune and Secure Score. View recording for Identify Part 2: Protect- Guest speaker: Jacqueline Jayne, Security Awareness Advocate for the APAC region for KnowBe4. Discover how the Protect function helps support the ability to limit or contain the impact of a potential cybersecurity event, with a spotlight on KnowBe4 the provider of the largest security awareness and simulated phishing platform. View recording for Protect Part 3: Detect- Guest speaker: Matt Carling, Architect, Security and Trust Organisation, at Cisco for 20 years (Canberra, Australia). Find out how the detect function defines the appropriate activities to help identify the occurrence of a cybersecurity event and also enable timely discovery, included in this webinar a snapshot of the Australian Government Australian Cyber Security Centre - Advisory 2020-008: Copy-paste compromises - tactics, techniques and procedures used to target multiple Australian networks. View recording for Detect Part 4: Respond- Guest speaker: Martin O'Riordan, General Manager and Head of Cybersecurity at Mercury IT (Gold Coast). Discover how the Respond function assists in outlining the appropriate actions to take regarding a detected cybersecurity incident, whilst also supporting the ability to contain the impact of a potential threat. Find out more about notifiable data breaches and putting a response plan in place for your business. View recording for Respond Part 5: Recover: International guest speaker: Frank Briguglio, CISSP, Public Sector Identity Governance Strategist at SailPoint (USA). Learn how the Recover function identifies appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity incident. Includes a final summary of the NIST Cybersecurity framework. View recording for Recover If you have any questions or you would like further information on Cybersecurity please contact cybersecurity@mercuryit.com.au --- # The Ethics of Backseat Driving..... URL: https://mercuryit.com.au/the-ethics-of-backseat-driving/ Welcome to our dystopian future. If the ongoing research, announcements and investment is anything to go by, one could be forgiven for thinking that any day now we might be able to hop into an autonomous vehicle, close the door and be whisked away to the destination of our choice in safety and comfort. Ok…the safety part might still be a bit questionable but they’re totally working on it…promise. With these horizons looming closer it behoves us to take a moment to consider some of the implications of where these first tenuous steps might be leading and how we plan to get there. This brings us to the real conundrum I have with driverless cars, and it’s not about their technical capabilities. Ultimately, the mechanics of autonomous vehicles are just that, an application of technology, and if there is one thing we have seen over recent decades it’s that technological solutions are not so much a question of if it will happen but rather how long it will take. Much like the advent of virtual reality, touch screens and folding displays, these things will take time to evolve and that may be quicker or slower depending on market drive but if there is significant enough interest then the technological development is all but inevitable. Putting the host of sensors, design, development and testing aside, the real part that attracts my scrutiny is instead the question of ethics. Now, before you mention automation and the loss of jobs, let me stop you there. The concept of autonomous cars with regard to automation and employment is a whole separate discussion and debating what could be considered the natural progression of the entire industrial movement seems a little broad in scope to warrant such brief consideration as this article is capable of. No, of immediate interest to me for the moment is the ethics of decision making. My quandary with decision making is two-fold. The first part is the question around responsibility for a decision made by a self-driving car. Let me propose a scenario—a second-hand ethical trolley problem of sorts. A young girl steps out from behind a parked car and directly onto the street in front of an autonomous car. In the oncoming lane, a motorbike driver with an adult and a teenage passenger is directly opposed. The numbers are crunched and there is insufficient time to stop and nowhere else to go. Do you continue straight which will result in the death of the young girl or veer into oncoming traffic which will result in the death of the motorbike passengers. Well? The answer is of course neither. From the back seat, all you can do was watch as your car plows through whichever of the unlucky candidates it happened to decide were somehow mathematically less awful. Or perhaps the decision is predicated entirely on the best outcome for the owner of the vehicle-after all you’re the one who paid for it right? Whichever way the scenario plays out it’s a tragedy so it’s not much of a decision and you’re probably just glad that at least you weren’t the one who had to make it. Now, the sticky part arrives a little bit later when the time comes to begin ascribing fault. Who then bears the responsibility for making the choice? Because you can be sure that the courts are going to want to know even if the rest of us haven’t considered it just yet. The car company who built the vehicle? The programmer who created the cars decision-making rules? The owner of the vehicle (after all, if he’d picked a smarter or more expensive car then maybe this wouldn’t have happened right)? Or maybe it’s the car itself who will need to bear that guilt—regardless of how remorseful it feels after the fact. And now we come to the second part of my ethical concern on decision making. Autonomous cars and the systems that govern how they operate and make decisions are designed and implemented by companies whose ultimate goal is to sell those products. The mismatch here, is that companies as a whole, while they may or may not be altruistic, are driven by commercialism rather than the betterment of mankind or carkind (vehiclekind?). Not only that but we are talking about the industry that so famously back in the late 60s produced the Ford Pinto and made a cost benefit analysis weighing the cost of fixing an engineering issue against the cost of injury claims and reparations before ultimately choosing the injuries, deaths and reparations as being the more palatable option. And before you decry my example as being too old to be relevant and claim that companies these days have learnt from their lessons, then I’d take a moment to remember that VWs dieselgate decision wasn’t exactly the pinnacle of ethical choices was it? The reality is that car manufacturers didn’t learn altruism from these events, what they took away from them was that they needed to include the loss of public image into their risk calculations. And ultimately these are the people who will be laying the foundation for how an autonomous car should make its decisions. And so we arrive at the crux of the problem. How do you buy an autonomous vehicle when nobody knows who to blame for its decisions and the only thing you do know with certainty is that the people teaching those vehicles ethics have no understanding of what ethics are to begin with? --- # Cyber Warning for Coast Firms URL: https://mercuryit.com.au/cyber-warning-for-coast-firms/ Chris Haigh, Chief Information Security Officer for Mercury IT spoke with The Gold Coast Bulletin about the risk of cyber security as the Australian Government suffers a major attack. A clear reminder that all businesses are vulnerable, both big and small. --- # 'The Future is Coming into View' Mini Webinar Series URL: https://mercuryit.com.au/the-future-is-coming-into-view-mini-webinar-series/ Technology is changing the way we do business and unforeseen events can upset the plans of even the best-prepared organisation. As a leader, you know it’s vital to do more than just react. You need to stay ahead – to maximise opportunities and mitigate threats. View our mini webinar series here and get the outside perspective you need to capitalise on trends and neutralise risks. Learn how to integrate Microsoft products to take collaboration to the next level, streamline workflows, and power up your enterprise with business intelligence and security. View Recording View Recording Learn about Microsoft Sway, Stream & Teams Learn more about Microsoft Power Automate View Recording View Recording Learn about Microsoft Power BI Learn about Microsoft 365 advanced security If you have any questions regarding these webinars or you would like to partner with us for future events please contact events@mercuryit.com.au --- # Spring Into The Future URL: https://mercuryit.com.au/spring-into-the-future/ How Office 365 launches your business focus into the future. Now perhaps more than ever is a time for maintaining productivity wherever possible. Circumstances have changed dramatically for businesses in a very short space of time, but we are fortunate that most of us already have the tools to keep working and keep our organisations and our economy ticking along. And one of the key tools already widely out there is Microsoft’s Office 365. With it, your IT systems are future ready. You can see further, go further and achieve more every day. Along with connectivity, the prevalence of laptops and other mobile devices means a good deal of the workforce has everything they need to take productivity with them. When Office 365 is added to devices and connectivity – or even better, it’s slightly beefier cousin Microsoft 365 – you have a powerful, secure and highly functional setup for getting the job done anywhere. Having spent the past 18 months moving most of our customers into the Microsoft cloud (including Azure), they might not be in the office, but they are at work. That’s the go further bit; be just about anywhere and your office is along for the ride. Now, the naming conventions for the Office 365 suite can be a little on the confusing side. To explain, Office 365 is the ‘usual’ productivity solutions we all know and love, like Word, Excel and Outlook, as well as OneDrive. Depending on the subscription type, Office 365 can include other solutions like Yammer, Teams and Planner. (To add to the confusion, Microsoft has recently announced that Office 365 is to be renamed Microsoft 365 with Personal and Family subscriptions from 21 April 2020). Microsoft 365 has all the features Office 365 , but also includes Microsoft EMS (Enterprise Mobility + Security), Windows 10 Enterprise, PowerApps and PowerBI. Microsoft 365 is designed for business and underpins the Modern Workplace (a distributed workforce); but the crucial differentiators really are EMS on the one hand, and PowerBI/PowerApps on the other. We’ll see why in a moment. The power of Teams First, I’d like to discuss one of the real gems within the 365 solution set, Teams. You’ll achieve more with teams because it drives your ability to conduct highly successful remote business and in fact, I’d describe Teams as probably the world’s best collaboration system. It’s not for no reason that Teams has seen massive growth this March, expanding by 37 percent in just one a week. The obvious question for those who haven’t yet tried it is ‘What makes Teams so great?’ The short answer is that it is the hub for teamwork in Microsoft 365; if you’re new to Teams, check out this great video from Microsoft Mechanics. The longer answer is that when working from home (or anywhere), Teams acts like the glue which keeps your actual teams together. It does that by combining chat, video and voice call into a single solution, facilitating group conferences and virtual meetings with colleagues, customers and suppliers. Used in combination with Planner, you can see where your team members are, what they are working on, and when they are available to take on new tasks. And with SharePoint, group spaces facilitate rapid and convenient collaborative work, directly targeting that most common of bugbears, versioning. Teams means it doesn’t matter where people are, because everyone is just a mouse click away. Right from one interface, you’re video chatting, using Instant Messenger, sharing screens and documents and more. With inclusion being such a challenge in today’s climate, Teams goes a long way to help make everyone feel like they’re on board and pulling in the same direction to achieve more Security has never been more important Coming back to EMS and the strange state businesses everywhere find themselves in, it’s arguable that sound security practices have never been more important. Corporate security policies and enterprise grade security must reach right into the homes of every team member, but at the same time, facilitating ease of collaboration has never been more important too. That’s where EMS absolutely shines. What makes this combination of security essentials so good is its tight integration with the applications you’re already using every day (see the full detail of the EMS products here). Along with the disruption of dispersing your operations, the threat environment is heightened as hackers won’t let a crisis go to waste – multiple ‘Covid-19-themed’ threats are emerging, so vigilance is needed along with great software. Microsoft has given mobile worker security a lot of thought, making things not only secure but (crucially) conveniently so. PowerApps and PowerBI While Microsoft 365 is a ‘one size fits all’ solution in as much as the general productivity applications are concerned, there’s (even) more to it than that. With PowerApps and PowerBI, custom connections and applications which do specific things for your business, and your business alone, are now on the table. You can see further into your own organisation and the broader world out there. As the name implies, PowerApps enables building ‘low-code’ custom apps. It’s great for bridging gaps in processes, taking care of minor automations and integrations and – well, once you start using PowerApps with its built-in AI components and extensibility into Azure, your own horizons of the possible will expand. PowerBI, on the other hand, puts sophisticated data analysis and visualisation in your hands. This is a tour de force because just as business continuity was once seriously costly (but now doesn’t cost anything extra), PowerBI puts business intelligence and valuable insights squarely in your hands. And I’ll stress the visualisation bit again, because not only do you get analysis, but the results are presented in a truly engaging way – one which doesn’t require a PhD to understand! Business as usual, just not in the office For those who have moved to Microsoft 365, the benefits are abundantly clear, particularly in the present climate. It’s keeping the Mercury IT staff working, connected, and engaged. Many of our customers are experiencing the same benefits, even if having to conduct business from home wasn’t an original reason for making the leap. Data is safe and secure – crucial for us as a Managed Services Provider, and crucial for every organisation. Along with flexible licensing which allows installation to up to 5 devices (recognising the fact most of us have several gadgets we use together), Microsoft 365 is affordable, powerful and to many, ourselves included, indispensable. We’re bringing the future to you this April For tips and insights from IT thought leaders, register now for Mercury IT’s free webinar series. Wherever you’re based – at home or in the office – we’ll help you bring the future into focus with the Microsoft cloud. Author- Sally-Ann Bird Chief Sales Officer --- # Behind Closed Doors... URL: https://mercuryit.com.au/behind-closed-doors/ If there is one lesson about humanity you can take away from time spent delving into the murky digital ocean of the internet it is this. Given time, access and even a small modicum of privacy and people will find a way to have sex on, in or around almost anything. In fact—take the criteria of time, access and privacy and pick any two. Good times! So how does this lesser-known law of humanity apply to the burgeoning field of technology? And no I don’t mean having sex with robots for those who immediately jumped to that conclusion…or not just sex with robots at any rate—which is totally a thing apparently. Robot’s aside, it doesn’t take any great stretch of the imagination to understand how technologies such as virtual reality and augmented reality are going to be impacted. Artificial Intelligence, on the other hand, is a bit harder to extrapolate. Already we’ve seen the development of some unexpected (and in some cases disturbing) implications. One good example of how advanced algorithms and processing can be used that we’ve already seen this is with technology such as DeepFake and the ability to take video and digitally modify it to make someone appear younger, older or to look like any well-known person you can imagine. The possibilities here are almost endless and blur the boundaries between reality and fantasy to a degree that it boggles the mind to think about just where we might end up. On a slightly different front, and one you may not have put too much thought into (or if you have then please find my contact details below), is driverless cars. Take a vehicle with a bunch of cameras all facing outward and no requirement for anyone to really be watching the road and you have a pretty significant opportunity for people to be looking for interesting distractions. Ok, so there are a couple of pitfalls with this. First up is the presence of those pesky windows making it an indecent exposure charge waiting to happen. Why do we even need them? It probably won’t happen immediately, but particularly as non-autonomous vehicles are phased out and self-driving tech becomes so reliable that we cease bothering with the ability for manual overrides, it becomes a very real possibility to remove windows entirely. Wait, you might be thinking, if you remove the windows then it might suddenly feel very close in the cabin…and not in a fun way. The sense of movement without a point of reference might also result in an increase in motion sickness which definitely wouldn’t be fun. With the structural benefits of removing the glass, however, maybe we will see digital displays showing the outside world as we whip extatically past. Either way, nobody can see in, and why should they need to. It should be fine to drink alcohol and use your mobile phone just fine right? The AI driving is the one who needs to be responsible. Which brings us to another interesting thought—seatbelts. In a world where accidents are reduced to near obsolescence it would be understandable to believe that the necessity for the stately seatbelt might be repealed, or at the very least made optional. If so, it seems like virtually all impediments to the true mobile enjoyment of vehicular technology drop away entirely and our lifestyles take yet another turn to follow the hedonistic paths of empire seen previously by such as ancient Romans and Greeks. Should we continue such mimicry, only time will tell if this will be just another step on the eventual decline of our society. But perhaps we peer too far into an uncertain future and instead should take more immediate lessons from the ever-burgeoning romance of sex and technology. I personally plan to be completely practical about this trend. Indeed, now is the time to invest in the development of personal blacklight devices. --- # Home Work Has Risks URL: https://mercuryit.com.au/helpful-tips-for-working-remotely-2/ General Manager, Martin O'Riordan spoke with journalist Alister Thomson from the Gold Coast Bulletin about the impact of cyber crime and the potential risks for those now working remotely. --- # Helpful Tips for Working Remotely URL: https://mercuryit.com.au/helpful-tips-for-working-remotely/ We understand that it is an unsettling time for both business and employees, many people are having to re-think the traditional way of work and adapt to the current, uncertain situation. The team at Mercury IT have had the ability to work remotely for a number of years and we do so on a regular basis, some staff in fact only work from home. As such our staff are well suited to this type of work environment and we thought we would share some of our top tips for working from home. Communicate, communicate, communicate.... Your work schedule might look different when working from home compared to working in the office. You may be balancing work and other duties at the same time. Communicate your schedule to your co-workers so that they know when to reach out to you and when you are available. For Mercury IT one of the best team tools we use is Microsoft teams this assists us to chat, meet, call and collaborate all in one place. Download Microsoft Teams for free. Maintain work-life balance Without the normal workday routine, like driving to work, it can be harder to unplug. Make sure to stay hydrated, take breaks and give yourself opportunities to “clock out” from remote work at the end of the day. This can be one of the most challenging aspects for remote work beginners, as the world is becoming increasingly connected. Team collaboration Working remotely can feel a bit isolating, especially if it is new to you. It’s important to create opportunities for the whole team to virtually get together, whether it’s large brainstorms with online tools or daily check-ins over a virtual coffee. Morale Stay aligned with company culture. Even though working remotely can drastically change interactions since you're no longer together in person, you can still make sure that the little things you did in the office continue. You might choose to send funny, work-appropriate GIFs over Teams, text, or email; chatting about sports or your family or anything else you would normally do by the coffee machine. These little things help reduce feelings of isolation and anxiety and work towards team morale. --- # Of Questionable Intelligence URL: https://mercuryit.com.au/of-questionable-intelligence/ Take away the hype and all the excitement around artificial intelligence and you quickly begin to realise that, as a term, AI is horribly misused and misunderstood in general--and it’s largely its own fault. Lacking a clear and precise (or at least widely accepted) definition, AI is riddled with the sort of vagaries that lead to the blanketing of whole swathes of the technology landscape and attract the buzz of marketing flies like the corpse of a bloated technological whale. Type in a search for AI into the internet and you are likely to find a dizzying array of differing definitions and proposed sub-types. Like so many concepts, Artificial Intelligence was first coined by Science Fiction authors peering myopically (or perhaps more grimly--with surprising clarity) into our dystopian futures. From those minds sprung the concept of intelligence ascribed not to a human but instead to a machine itself. More specifically, a machine demonstrating a thinking process similar to or capable of being mistaken as human. Why exactly any machine should aspire to the dubious pinnacle that is human intelligence remains a mystery to me. By example, with decades of accumulated experience and wisdom with which to guide informed decision-making, you would think I would know better than to get drunk and message my ex but here we are—lofty aspirations indeed. If there’s one thing humans can do with absolute dependability it is make bad decisions—and often the same bad decisions apparently. Personal shortcomings aside, the concept of AI being anything where technology is able to pass for human or perform tasks which could be seen to be normally ascribed to a human is both incredibly subjective and loose enough to invite gross misuse. In fairness, you don’t see many other plants and animals doing basic math but by that definition my calculator qualifies as being artificial intelligence. In more recent times, the term AI seems to have been narrowed at least in common parlance to cover three broad areas: processes which involve algorithms, machine learning and deep learning. Deep learning follows the basic premise of processing large quantities of data through a complex logic structure to draw conclusions. Machine learning, on the other hand, involves parsing large quantities of data through an algorithm that is automatically iterated to improve its accuracy and capability. Interestingly, one thing that both machine learning and deep learning have in common is that both are designed to perform very specific tasks with often surprising levels of skill and accuracy (eg. Playing Go). ‘Processes which involve algorithms’ on the other hand encompasses such a vast range of possibilities it has almost the same issue as the term AI. I have two fundamental issues with these types of AI in relation to the broader definition. The first is that the current implementations we are seeing are designed to perform specific tasks well. If the concept of AI from its very roots was the idea of a machine being mistaken for human then surely it should need to be assessed on its ability to adapt and perform in a wide array of functions. The human eye is an absolute marvel capable of performing a very specific task with amazing ability. That said, an eyeball on its own isn’t exactly going to be mistaken for being human because it does one thing well. The second issue is that just any task or process completed through the application of an algorithm should be ascribed the title of artificial intelligence. Surely, if the algorithm was designed solely by a human, applied by a human and provided with data by a human, then why are we in such a rush to palm the credit for the process off to an intelligence other than human. Is it that the idea of a machine having come up with the idea is somehow more enticing or is it that we, as a whole, are so painfully aware of how fallible we are that the idea of blaming the whole thing on the machine running the code just seems like a sensible deflection for when we invariably end up being wrong. As imprecise as some of the terms and definitions surrounding artificial intelligence may be, that is not to say that the progress made in this area has not been impressive—quite the opposite in fact. Who knows, given enough time maybe machines really will progress so far as to be indistinguishable from humans. At least I’ll feel safe in the knowledge that, at that point, any of them planning on world domination will no doubt be too lazy to get off the couch for long enough to make it happen. --- # Collaboration in the Modern Workplace Event URL: https://mercuryit.com.au/collaboration-in-the-modern-workplace-national-event/ Mercury IT recently presented a national sold out event “Collaboration in the Modern Workplace” with global technology leader Microsoft and premium paddock to bottle Husk Distillers. The 150 attendees learnt how to design a collaborative culture at work and teamwork without boundaries, a highlight of the event was the national Gin & Rum tasting including the world-famous Ink Gin and the NEW Sloe & Berry Gin! Topics covered at the event included workplace efficiency, environmental impact, travel time and the cost to business. Questions considered throughout the presentation; Would you like to know how to bring remote employees together to enable teamwork anywhere? Are you concerned about the impact your business travel has on the environment? Would you like to minimise your commute time to meetings? Do you want to increase your business’s profit by lowering business travel costs and eliminating travel times for employees? Keynote Speakers for the Event: Martin O’Riordan – General Manager and Head of Cyber Security at Mercury IT, introduction to 'Collaboration in the Modern Workplace' Philip Meyer - Partner Technology Strategist at Microsoft, presented 'Engage and Empower Teams' with Microsoft Teams Brett Murray - Director Surface Commercial at Microsoft, presented 'Collaboration in the Modern Workplace' with Microsoft Surface for Business Quentin Brival - Head Distiller / Production Manager at Husk Distillers, presented Husk Distillers Gin & Rum Tasting A big thank you to our sponsors Microsoft and Ingram Micro for giving Mercury IT the opportunity to share best technology practices with Australian and New Zealand businesses. If you would like to be added to our mailing list for future Business Technology Events please email events@mercuryit.com.au --- # Topgolf Cybersecurity Event URL: https://mercuryit.com.au/topgolfcybersecurityevent/ Mercury IT recently hosted an event at Topgolf for Queensland Business and IT Leaders in partnership with Microsoft, Cisco and Ingram Micro. Topics covered cybersecurity trends, key insights and how to create a multi-layered approach to Cyber Defence. Most noteworthy was the expert panel including; Martin O'Riordan – General Manager and Head of Cybersecurity at Mercury IT. Sean Beaumont - Territory Channel Manager, Modern Workplace Lead at Microsoft (Sydney) Anthony Miller - Cyber Security Partner Specialist in Australia and New Zealand Cisco (Sydney). Alan Downey - Cybersecurity Specialist and Sales Engineer at Cisco (Sydney). Dan Boucaut - Security Solution Specialist at Cisco (Brisbane). James Heasman - Professional Services Manager at Mercury IT who is a Microsoft Specialist. All attendees enjoyed the afternoon and not only had the chance to improve their golf swing but also the opportunity to learn more about best cybersecurity practices. Finally, a big thank you to our main sponsor Ingram for giving Mercury IT the opportunity to share best technology practices with Australian and New Zealand businesses. If you would like to be added to our mailing list for future Business Technology Events please email events@mercuryit.com.au --- # A crash course in Microsoft 365 Business URL: https://mercuryit.com.au/microsoft-365-business-crash/ Achieve more in your business with an integrated security, management and productivity solution — all in one. --- # Online Cyber Risk Assessment URL: https://mercuryit.com.au/online-cyber-risk-assessment-2/ SMEs are at risk now more than ever before. Doing nothing is no longer an option. Complete our online cyber risk assessment to determine where your business is most at risk. Share these reports internally and benchmark your results with businesses of similar size and/or in similar industries. --- # Are your credentials on the dark web? URL: https://mercuryit.com.au/credentials-on-dark-web/ We go into the Dark Web so you don’t have to. How Dark Web ID Protects Your Business: Delivers the same advanced credential monitoring capabilities used by Fortune 500 companies. Connects to multiple Dark Web services, including Tor, I2P and Freenet, to search for compromised credentials, without requiring you to connect any of your software or hardware to these high-risk services directly. Provides awareness of compromised credentials before identity theft or data breaches occur. Are your Company’s Credentials for Sale on the Dark Web? Digital credentials, such as usernames and passwords, connect you and your employees to critical business applications, as well as online services. Unfortunately, criminals know this — and that’s why digital credentials are among the most valuable assets found on the Dark Web. 81% of hacking-related breaches leverage either stolen and/or weak passwords 60% of SMBs will go out of business within 6 months of a cyber incident 43% of cyber attacks are on SMBs A Dark and Dangerous Place The Dark Web is made up of digital communities that sit on top of the Internet, and while there are legitimate purposes to the Dark Web, it is estimated that over 50% of all sites on the Dark Web are used for criminal activities, including the disclosure and sale of digital credentials. Far too often, companies that have had their credentials compromised and sold on the Dark Web don’t know it until they have been informed by law enforcement — but by then, it’s too late. How Does This Happen? When your employees use their work email on third party websites, like the types listed below, it makes your business vulnerable to a breach. With our Dark Web Monitoring, we can detect if your company is at risk due to exposed credentials on those websites. HR & Payroll Email Services CRM Travel Sites Banking Social Media What You Can Do To Protect Your Business? By utilizing Dark Web ID™, a combination of human and sophisticated Dark Web intelligence with search capabilities, you are able to identify, analyze and proactively monitor for your organization’s compromised or stolen employee and customer data. We Go Into The Dark Web To Keep You Out Of It. PREVENT Attacks on networks may be inevitable, but proactive monitoring of stolen and compromised data allows you to respond to a threat immediately to prevent a major breach. REPORT With 80,000+ compromised emails daily, the platform provides extensive reporting capabilities to track and triage incidents. MONITOR 24/7/365 Hidden chat rooms Private websites Peer-to-peer networks IRC (internet relay chat) channels Social media platforms Black market sites 640,000+ botnets PREDICT Dark Web ID allows us to see industry patterns long before they become trends, and offers the intelligence to keep you and your employees more protected. How Dark Web ID Protects Your Business Connects to multiple Dark Web services including Tor, I2P and Freenet, to search for compromised credentials, without requiring you to connect to these high-risk services directly. Provides intelligent awareness of compromised credentials before breaches occur. Why It’s Important Compromised credentials are used to conduct further criminal activity. Employees often use the same password for multiple services, such as network login, social media, and SaaS business applications, exponentially increasing the potential damage from a single compromised credential. Limited visibility when credentials are stolen; over 75% of compromised credentials are reported to the victim’s organization by a third party, such as law enforcement. --- # Identity Theft is not as trendy as you think... URL: https://mercuryit.com.au/identity-theft-not-trendy/ As an events manager producing monthly business technology events I need to keep up with all the latest IT trends & IT New Topics... By now you would have seen the viral trend app that a lot of people are sharing on social media called "FaceApp." This is where you can take a photo and the app re-imagines that person with an extra 50 years, however I urge you not to follow this trend as as you may be exposing yourself to identity theft. So why should you be concerned? Beware of application T&C's when you download them. According to a news.com.au article, the terms and conditions users agree to when they purchase the app, they “grant Face App a perpetual, irrevocable, non-exclusive, royalty-free, worldwide” license to “use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute and display your content.” Lawyer Elizabeth Potts Weinstein tweeted a screenshot of the terms with a warning: “If you use Face App you are giving them a license to use your photos, your name, your username, and your likeness for any purpose including commercial purposes (like on a billboard or internet ad),” This has been retweeted almost 17,000+ times. The Russian developers have responded to the accusations yesterday and in a geek.com.au article and said they delete your photos after 48 hours, but not all the bio-metric data they have collected. How can your bio-metric data be used? They could use your data or sell it on the dark web. It could also be used to create a fake video called a deepfake. In an abc article last year How hard is it to make a believable deepfake? it says: "a new wave of artificial intelligence technology could make it so easy to create fake videos that it will undermine the public’s ability to trust what they see." Click on the image below to see the video on the article of Barack Obama from publicly available footage, controlled by the footage of the man against the green background: Brandon Downey, IT Service Technician from Mercury IT, said "a perfect example of correctly storing and using bio-metric data is Apple's FaceID. It does not send anything out from your phone when using it. The bio-metric data is locally stored on the phone, and is wiped when the phone is reset. Apple can not retrieve any of the bio-metric data from the phone which was a big concern when the iPhone X was released, and they put the rumor to bed immediately." What should you do if you think someone has stolen had your identity? Chris Haigh, Chief Information Security Officer (CISO) at Mercury IT, wrote an article "Identity theft 6 steps" with tips on how to keep you safer online. He says "If you have found that you are a victim of identity fraud, you can contact IDCARE if you are in Australia or New Zealand for assistance" https://www.idcare.org/ If you are an owner or operator of a business it would be a good idea to to discuss implementing Cyber awareness training for your staff to educate identity theft and Phishing attempts - just like OH&S awareness all those year ago! --- # Are Passwords Still Important? URL: https://mercuryit.com.au/passwords-still-important/ There has been a lot written about passwords in the last few days, and the industry is trying to move people away from passwords with FIDO (Fast IDentity Online), but passwords will still be around for a while, and they are critical in protecting your data. Here are my thoughts. The latest advice from NIST and Microsoft indicate you only need eight character passwords with no complexity and no expiry because if you enforce some controls, your users will create weaker passwords. Ok, I say this a bit tongue-in-cheek, the advice does go into specifics around using password checking against known bad passwords and using MFA, but honestly, people don't read that, they just see I need an eight character password...happy days! How passwords are made up depends on what it's protecting. Here is my advice: The password length is still relevant. An eight character random password with just lowercase characters will take about 5 seconds to crack*. Increase that to 10 characters, and it will take about an hour, 12 is 4 weeks, and 14 is 51 years. This example is just lowercase characters, so yes, the length is still important. If you just stick several basic words together that makes a 15 character password it won't be strong...we do need to think about it. Using 'blackblackblack' or any repeating pattern to meet a 15 character minimum password length will create an easily guessed password. Add some complexity to your password. It does not have to be complicated, adding a capital letter and a number or two can significantly increase the time it would take to crack the password. If we go back to our example 8 character password and replace two of the letters with a number and a capital letter, it takes us from 5 seconds to 2 hours and if I replace another letter with a non-alphanumeric character like @ then the time extends out to 9 hours. The 14 character password with a number and an uppercase character becomes 10 million years to crack. How do you remember such a long password? That is a good question, and the best way is to use a password manager, but there may be times that you just need to remember the password. This is where you may have seen articles referring to passphrases and not passwords. The idea is you use a much longer passphrase, but it's easy for you to remember, such as a short sentence, add some complexity to this and you have a good passphrase. An example may be the sentence 'i like black dogs', adding some complexity to this may become 'I like 5 black dogs', this example would take 117 Quintilian years to break, and that's a large number! Use Multi-Factor Authentication, MFA, where you can. Multi-factor authentication (MFA), 2FA or two-step authentication is where you use another form of authentication in addition to your username and password. This is usually a text message to your phone, an email code, a one time password using an app or a push notification. Check the website you are using in their security or password section to see where to turn this on and use it. Push notification is better than a text message, so pick that if you can. MFA is not entirely secure, so don't go using a weak password thinking MFA will save you. Turning on MFA is just another layer of security you should enable. Don't reuse passwords or similar ones. Criminals will find a compromised account of yours and try that password or similar passwords on different platforms. So they may have your password from a LinkedIn breach so they will use that on Facebook, Insta etc to try to take over those accounts. The best way to combat this is to use completely different passwords on different websites. This creates the next problem of how to remember them, which then leads to weak passwords again like using the service name such as Facebook or FB with a common or root password, such as 'strongpass-FB' and 'strongpass-Insta' etc. A password manager such as LastPass or 1Password can help with this, and I strongly suggest you use one. Stay aware and a little paranoid. It sounds like a joke, but honestly, the easiest way for a criminal to get your password is to simply ask for it. Social engineering tactics, such as phishing, is a growing threat. Be wary of emails that ask for any information or get you to click on links. Common ones will pretend to be security related, and you need to reset your password or there is a refund, or to cancel an order etc. Think before you click, hover your mouse over the links, do they look correct? Try this exercise for fun, https://phishingquiz.withgoogle.com - you can click on this :-) no? Ok, search google for phishing quiz and give it a go, you may learn something. There are a lot of different opinions around passwords and the management of them, and this depends on the person or organisation. These are just some of my observations and tips. I hope some of them have been useful. Stay safe out there. --- # Identity Theft - 6 Tips URL: https://mercuryit.com.au/identity-theft-tips/ “Identity theft and identity fraud are terms used to refer to all types of crime in which someone wrongfully obtains and uses another person’s personal data in some way that involves fraud or deception, typically for economic gain” Last week I was reminded of how easy it could be for criminals to misuse your identity when I was going through an excellent presentation by Tom Mason. A hacker only needs 3 pieces of information about you to assume your identity Your name Your address Your Date of Birth Here are some tips to keep you and your family safer online: With the three pieces of information in mind be very careful about the information you are giving away, especially on social media sites. Check-ins give away where you are and what services you use, and this can be a basis of a phishing attack. If you need a date of birth for social media, make up a 2nd birthday to use for that purpose. If it's not government or medical, they probably don't need your date of birth. If your privacy settings are not set correctly, that FB birthday video can give away your date of birth. Facebook, LinkedIn etc. change their privacy settings often. You should be reviewing your privacy and security settings every three months. Enable 2-factor authentication on everything. They may call it 2FA or MFA. This is where the website can send you a code to your phone, or you have to enter a one time code from an authentication application on your phone with your username and password. Although MFA is not foolproof, it makes it way more complicated to attack, so it's an excellent deterrent for a would-be thief. Be careful about how you share photos. Smartphones will attach EXIF data which has information about the phone you used, software versions, GPS, the direction you were facing etc. You can use a EXIF app to view and scrub this data. Social media sites will generally strip this data, but if you email or SMS a photo, the data can be read. You can sign up to have your credit file watched and alert you if there is are credit enquiries, like when the criminal is trying to get a loan in your name. This alert will be your early warning sign. If you have found that you are a victim of identity fraud, you can contact IDCARE if you are in Australia or New Zealand for assistance. --- # Is Cyber Insurance expensive? URL: https://mercuryit.com.au/is-cyber-insurance-expensive/ As organisations have become increasingly dependent on technology to do business, cyber insurance has developed into one of the most important types of coverage for today's businesses to carry. Yet, cyber insurance is also one of the least understood types of cover on the market. This series will help clear up any misunderstandings you might have about cyber insurance and how it can protect your business. True or false? Cyber insurance is expensive Not if you have a claim! Cyber risks are becoming an increasing threat to businesses. According to PWC ,in the last two years, 45% of Australian companies were attacked by online criminals. Yet many SMEs believe that their operation is too insignificant to interest cybercriminals. This is backed up by research, which has shown that most of us look at the statistical likelihood of suffering a loss, and assume it won't happen to us. Cyber insurance then seems like a costly and unnecessary expense. Yet, should the unthinkable happen, having a 24/7 Emergency Breach Response Unit on hand and ready to act is invaluable. And, it’s included automatically as part of our policy. Like a more complex, cyber risk version of roadside assistance, The Emergency Response Unit specialises in handling data breach and cybercrime incidents. Taking a huge strain off you dealing with an incident personally. Edmund's cyber insurance solution includes Emergency Response powered by KMPG. Ultimately, you should think about cyber insurance as a win-win. Every year you pay your premiums and don't claim, you've done well to avoid a cyber breach. However, should you make a claim, the premium in that year will be a small fraction of the total claim you’d receive. And should you ever need to make a claim there will be a moment you realise you’re glad to have cyber insurance and it's been worth every cent. Get a quote & save 12.5% on your Cyber Cover premium through Edmund. To secure your discount use the Code MERC7612 Get your Cyber Insurance Quote in Minutes --- # Notifiable Data Breach (NDB) URL: https://mercuryit.com.au/notifiable-data-breach-ndb/ Summary The Notifiable Data Breach NDB legislation came into effect on February 22, 2018 It affects a significant number of businesses including all those who have turned over $3million in revenue since 2001, it captures a number of other businesses regardless of turnover based on a number of different criteria Data breaches that cause serious harm to individuals are reportable In the event of non-compliance, the Office of the Information Commissioner (OAIC) can: Apply for civil penalty orders of up to $420,000 for individuals (such as directors and sole traders) and $2.1million for organisations and; The Commissioner can also make organisations pay compensation for damages and issue a public apology What is the Notifiable Data Breaches scheme? The Privacy Amendment (Notifiable Data Breaches) Act 2017, also known as Notifiable Data Breach (NDB) legislation is an amendment to the Privacy Act 1988 that came into effect on February 22, 2018. The legislation is regulated by the Office of the Australian Information Commissioner (OAIC). The NDB scheme requires organisations covered by the Australian Privacy Act 1988 (Privacy Act) to notify any individuals likely to be at risk of serious harm by a data breach. What is a Notifiable Data Breach? A Notifiable Data Breach is a data breach that is likely to result in serious harm to any of the individuals to whom the information relates. A data breach occurs when personal information held by an organisation is lost or subjected to unauthorised access or disclosure.[1] Identifying whether an eligible data breach has occurred involves considering whether there has been a data breach; that is, unauthorised access to or unauthorised disclosure of personal information, or a loss of personal information (s 26WE(2)). The Privacy Act 1988 (Cth) (Privacy Act) does not define these terms.[2] The OAIC does provide some examples of what the ordinary meaning of what those terms mean: Unauthorised Access: someone gains access to information that they should not have access Unauthorised Disclosure: is someone gives access to information to an unauthorised person Loss: is losing control of information, i.e. losing a laptop with data or disposing of a hard drive incorrectly What is Serious Harm? Serious harm may include: serious physical, psychological, emotional, financial, or reputational harm[3]. Understanding whether serious harm is likely or not will generally rely on an evaluation of the context of a data breach — including the types of personal information involved, who has access to it, whether the data breach can be contained, and more.[4] To determine serious harm, a ‘reasonable person’ from the entity breached, who is properly informed, must from their perspective determine if ‘serious harm’ has or is likely to occur.[5] The likelihood of harm increases based on a number of factors: The number of people impacted – the greater the number the more likely harm will occur to at least one of the people increases The type of information – sensitive or financial information for instance has a higher chance of causing harm Whether the information has security protection like encryption, obscurity through diversity The type of people who have the information – a hacker who has deliberately obtained the data is more likely to use the information than someone that has received the information by mistake for instance The OAIC also very helpfully notes that the ‘nature of the harm’ and the ‘other relevant matters’ also increases the likelihood of harm[6] Who must comply with the NDB scheme? Generally, organisations and entities that are already covered by the Privacy Act 1988 (Cth) must comply with the NDB scheme[7] and more precisely it applies to those entities covered under the Australian Privacy Principles (APP).[8] This covers any business, sole trader, body corporate, partnership, unincorporated association or trust that has an annual turnover of more than $3million in any financial year since 2001. Additionally, if a business falls into any of the following categories the $3million turnover threshold does not apply, so every organisation in these categories is captured under the scheme regardless of turnover: entities that provide health services[9] entities related to an APP entity entities that trade in personal information credit reporting bodies employee associations registered under the Fair Work (Registered Organisations) Act 2009 entities that ‘opt-in’ to APP coverage under s 6EA of the Privacy Act If a Small Business Operator (SBO) carries on any of the following activities it must comply with the APPs, and therefore must comply with the NDB scheme, but only in relation to personal information held by the entity for the purpose of, or in connection with, those activities: providing services to the Commonwealth under a contract operating a residential tenancy data base reporting under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 conducting a protected action ballot, and information retained under the mandatory data retention scheme, as per Part 5-1A of the Telecommunications (Interception and Access) Act 1979. Complying with the Legislation If you have information that is subject to unauthorised access or disclosure or loss, and it has the potential to create serious harm, organisations captured under the scheme must: Notify the individuals effected or; All individuals at risk of serious harm and; The Commissioner of the OAIC If you cannot practically contact the individuals, you have to publish the notice you sent to the OAIC on the organisation’s website Non-compliance The Commissioner has a range of enforcement powers including: Applying for civil penalty orders of up to $420,000 for individuals (such as directors and sole traders) and $2.1million for organisations[10] and; The Commissioner can also make organisations pay compensation for damages and issue a public apology [1] OAIC 2017, oaic.gov.au [2] https://www.oaic.gov.au/privacy/notifiable-data-breaches/ [3] OAIC 2017, oaic.gov.au [4] https://www.oaic.gov.au/agencies-and-organisations/app-guidelines/chapter-b-key-concepts#app-entity --- # BIGGEST Data Breach In History??!! URL: https://mercuryit.com.au/biggest-data-breach/ Do you have a Netflix, Gmail, PayPal Account? I know I do! Over a BILLION login and password details listed on the Dark Web. Some of the file names listed mentioned Netflix, Gmail, LastFM, MySpace and PayPal. If you think that you wont be targeted by Cyber Criminals "hackers" you are wrong... Forbes Article Other businesses affected by a Data breach... HILTON: were given a $700,000 penalty, 363,000+ credit card numbers were exposed UBER: paid hackers $100,000, hackers accessed 57Mil customers & drivers How will this affect your business? Apart from your business's reputation - you can be fined... The Australian Government's Notifiable Data Breach NDB legislation is coming into effect on February 22, 2018. It will affect a significant number of businesses including all those who have turned over $3million in revenue since 2001, it captures a number of other businesses regardless of turnover based on a number of different criteria. Data breaches that cause serious harm to individuals are reportable. In the event of non-compliance, the Office of the Information Commissioner (OAIC) can: Apply for civil penalty orders of up to $340,000 for individuals (such as directors and sole traders) and $1.7million for organisations and; The Commissioner can also make organisations pay compensation for damages and issue a public apology More Info? Privacy Amendment (Notifiable Data Breaches) Act 2017 read here How to protect your business... Mercury IT worked with our technology partners CISCO & WEBROOT to bundle 5 of the world’s best products in Cyber Defence creating a cost effective, multi-layered defence platform for all your business needs. We would like to work with you to increase the security of your IT environment and protect you against the most advanced Cyber-attacks. --- # AI Readiness- A Boardroom Briefing URL: https://mercuryit.com.au/video/ai-readiness-a-boardroom-briefing/ Did you know that 70% of employees are already using AI tools at work—often without approval? This growing trend of “shadow AI” poses serious risks, including data leakage, compliance breaches, and reputational harm. Yet, AI is also becoming a powerful driver for efficiency, productivity, and competitive advantage. --- # Why Software Updates Are MORE Important Than You Think! URL: https://mercuryit.com.au/video/why-software-updates-are-more-important-than-you-think/ Keeping your devices up-to-date isn’t just about getting the latest features—it’s about staying protected. Software updates often include critical security patches that fix vulnerabilities hackers can exploit. Delaying or ignoring them leaves your devices and data at risk. --- # Phishing Attacks are on the Rise! URL: https://mercuryit.com.au/video/phishing-attacks-are-on-the-rise/ Phishing attacks are on the rise, and staying ahead of them can be challenging for any business. Chief Information Security Officer, Chris Haigh, simplifies it all in this quick video—an essential watch for anyone looking to strengthen their cybersecurity and avoid phishing attacks! --- # The True Cost of a Cyber Attack | Preparing for Resilience URL: https://mercuryit.com.au/video/the-true-cost-of-a-cyber-attack/ Ever wondered how your business would cope with a cyber-attack? How much would it cost, how many days would you be down, what are the legal ramifications, and not to mention reputation damage? Join our experts, Martin O’Riordan, Head of Cybersecurity and Chris Haigh, Chief Information Security Officer as they run through a real-life cyber-attack, discussing its impact and the aspects involved in recovery efforts. They will then cover what your business could put in place now to help mitigate damage, reduce costs, and become more cyber-resilient against such attacks. --- # Rise of the Machines | Are You Robot Replaceable? URL: https://mercuryit.com.au/video/rise-of-the-machines-are-you-robot-replaceable/ Join Martin O'Riordan and Andrew Corbett as they explore artificial intelligence in the workforce. As the pandemic enveloped the world over the last two years, businesses increasingly turned to automation to address rapidly changing conditions. The drive to replace humans with machinery continues to accelerate as companies struggle to avoid workplace infections of COVID-19 and to keep operating costs low. --- # Cybercriminals...How they get in and how to keep them out! URL: https://mercuryit.com.au/video/cybercriminals-how-they-get-in/ Cyber experts Martin O'Riordan and Chris Haigh from Mercury IT share how cybercriminals can infiltrate your business, the ease in which they can access your information and a few simple steps you can take to keep the bad guys out! --- # Let's Talk Scams | Webinar URL: https://mercuryit.com.au/video/lets-talk-scams/ Mercury IT are pleased to partner with Scamwatch for Scam Awareness Week. We recognise how widespread and serious scams can be, often with long-lasting effects on the individual or business involved. We are committed to helping raise awareness as part of the Scamwatch initiative and hope that everyone will gain some knowledge about what to look out for and how to avoid scams in business and everyday life. --- # Cybersecurity Roadmap | Webinar URL: https://mercuryit.com.au/video/cybersecurity-roadmap/ Join cybersecurity experts Martin O'Riordan and Chris Haigh from Mercury IT as they explain the elements of the cybersecurity roadmap and how this could help your business avoid future cyber attacks. --- # Ransomware, Our New Normal | Webinar URL: https://mercuryit.com.au/video/ransomware-our-new-normal-webinar/ Join cybersecurity experts Martin O'Riordan and Chris Haigh from Mercury IT as they share real life examples of Ransomware. Learn how these attacks happened and what you can do to avoid a ransomware attack on your business - this webinar could save you millions. --- # The Future of Work | On-Demand Webinar URL: https://mercuryit.com.au/video/the-future-of-work/ What will the workplace look like post COVID-19? If you are not incorporating flexible hybrid working conditions as part of your long-term strategy, your business may not be as resilient in the future. Remote work is here to stay, your business needs to be able to adapt and provide flexibility to survive. Join our experts to find out more. --- # Social Media-The Good, The Bad & The Ugly URL: https://mercuryit.com.au/video/social-media-the-good-the-bad-and-the-ugly/ This event is to help educate our community and businesses about cyber hygiene and how to control your information in an online world. Join Martin O'Riordan and Chris Haigh from Mercury IT as they navigate the complexity of social media and share with you how to minimise risk and keep your family safe. --- # Reduce Business Costs to Survive | On-Demand Webinar URL: https://mercuryit.com.au/video/reduce-business-costs-to-survive/ This event looked at how outsourcing your IT can actually help reduce and streamline costs without impacting business operations. Join Martin O'Riordan, Mercury IT and Tim Wakeham, KINETIC as they discuss the benefits of outsourcing and how it can help your business in these uncertain times. --- # Business Cybersecurity Risk Webinar Series-Part 5- RECOVER URL: https://mercuryit.com.au/video/business-cybersecurity-risk-webinar-series-part-5-recover/ Discover how the RECOVER function identifies appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to a cybersecurity incident. Join Chris Haigh, CISO at Mercury IT and Frank Briguglio, CISSP, Public Sector Identity Governance Strategist at SailPoint to learn about recovery planning, communications and improvements. --- # Business Cybersecurity Risk Webinar Series-Part 4- RESPOND URL: https://mercuryit.com.au/video/business-cybersecurity-risk-webinar-series-part-4-respond/ Discover how the RESPOND function assists in outlining the appropriate actions to take regarding a detected cybersecurity incident, whilst also supporting the ability to contain the impact of a potential threat. Join Chris Haigh, CISO at Mercury IT and Martin O'Riordan, General Manager and Head of Cybersecurity at Mercury IT to learn more. --- # Business Cybersecurity Risk Webinar Series-Part 3- DETECT URL: https://mercuryit.com.au/video/business-cybersecurity-risk-webinar-series-part-3-detect-2/ Discover how the DETECT function defines the appropriate activities to help identify the occurrence of a cybersecurity event and also enable timely discovery. Join Chris Haigh, CISO at Mercury IT and guest speaker Matt Carling. Architect, Security and Trust Organisation, Cisco to learn more about the three main elements of detecting risk in your business. --- # Business Cybersecurity Risk Webinar Series-Part 2- PROTECT URL: https://mercuryit.com.au/video/business-cybersecurity-risk-webinar-series-part-2-protect/ Discover how the PROTECT function helps support the ability to limit or contain the impact of a potential cybersecurity event. Join Chris from Mercury IT and Jacqueline from KnowBe4 to learn more about cybersecurity awareness education for your team to help them with their duties and responsibilities consistent with related policies, procedures, and agreements. --- # Business Cybersecurity Risk Webinar Series- Part 1- IDENTIFY URL: https://mercuryit.com.au/video/business-cybersecurity-risk-webinar-series-part-1-identify/ Join Chris and Philip to discover how the IDENTIFY function assists in developing an organisational understanding for managing cybersecurity risk to systems, people, assets, data, and capabilities. Check out the recording and learn more about: Asset Management, Business Environment, Governance, Risk Management and Risk Management Strategy. --- # Set Up Multi-Factor Authorisation for Microsoft 365 Business URL: https://mercuryit.com.au/video/multi-factor-authentication-in-microsoft-365-business/ Multi-factor authentication provides more security for your business. Follow these steps to set it up. --- # The Modern Worker Webinar with Cisco Meraki URL: https://mercuryit.com.au/video/the-modern-worker-webinar/ Mercury IT have partnered with global technology leader Cisco Meraki to bring you this informative, relatable business technology webinar on 'The Modern Worker'. Learn how to work anywhere with technology and create the ultimate workplace flexibility. --- # Is Your Future Secure Webinar URL: https://mercuryit.com.au/video/is-your-future-secure/ 'Is Your Future Secure' presented by James Heasman is the final webinar of our 4 Part Mini Webinar Series covering the future of business technology. James discusses how to help keep your business secure by enabling advanced safety features in Microsoft 365, this intelligent security helps proactively protect your employees, your data and customer information. --- # Power Up Your Business With BI Webinar URL: https://mercuryit.com.au/video/power-up-your-business-with-bi/ 'Power Up Your Business With BI' presented by Martin O'Riordan is Part 3 of our 4 Part Mini Webinar Series covering the future of business technology. In this webinar Martin will explain how to create a data-driven culture with business intelligence helping enable everyone at every level of your organisation make confident decisions. --- # Streamline Your Workflow Webinar URL: https://mercuryit.com.au/video/streamline-your-workflow/ 'Streamline Your Workflow' presented by Paul Walters is Part 2 of our 4 Part Mini Webinar Series covering the future of business technology. In this webinar Paul will explain how to boost productivity, quickly and securely automate, put intelligent workflows to work and help your team become as efficient as possible. --- # Collaboration in Tomorrow's World Webinar URL: https://mercuryit.com.au/video/collaboration-in-tomorrows-world/ 'Collaboration in Tomorrow's World' presented by Andrew Corbett is Part 1 of our 4 Part Mini Webinar Series covering the future of business technology. In this webinar Andrew demonstrates how to effectively integrate Microsoft tools to assist you with training your team remotely. --- # Work Smart, Stay Safe Cybersecurity Webinar URL: https://mercuryit.com.au/video/work-smart-stay-safe-webinar/ Join Chris Haigh, Chief Information Security Officer (CISO) at Mercury IT, to learn 7 ways to improve your Cybersecurity while working remotely…these cost-free tips will assist you in staying secure online. --- # Remote Digital Pedagogy with Microsoft URL: https://mercuryit.com.au/video/remote-digital-pedagogy-with-microsoft/ This webinar provides tips to educators and education sector administrators on how to effectively deliver digital pedagogy and utilise technology to create a safe and effective remote learning environment. Learn tips from Microsoft’s leading Technology Strategist in Education on how to create an integrated, connected, engaged and authentic digital classroom experience. --- # Teamwork without boundaries: Microsoft Surface Hub 2S URL: https://mercuryit.com.au/video/introducing-microsoft-teams-2/ Experience teamwork without boundaries with new Surface Hub 2S, a modern, all-in-one collaborative canvas and meetings platform that brings the power of Windows 10 to teams. It’s, light, thin, and easy to integrate into any work space. Wherever your teams go, Surface Hub 2S can go too. --- # Cisco Meraki Wireless Cloud Managed Security Cameras URL: https://mercuryit.com.au/video/how-wireless-cloud-managed-security-cameras-work/ Learn about the ways in which the Meraki Camera as a Sensor can provide a source of actionable data for businesses, directly through the Meraki dashboard and via API. Presented on the 10th of June 2019 by George Bentinck, Product Manager at Cisco Meraki. If you are wondering why he is wearing a hat? George collects hats from all over the world – this one was from San Diego for Tech Field Day Extra at Cisco Live US 2019. --- # Cisco Meraki Wireless Cloud Managed Smart Cameras URL: https://mercuryit.com.au/video/cloud-managed-smart-cameras/ Cisco Meraki MV12 Wireless Enterprise-Grade Security cameras are impossibly simple to deploy, configure and manage. MV provides reliable security and valuable business insights to organisations of any scale. --- # Duo vs. Traditional Two-Factor Authentication URL: https://mercuryit.com.au/video/two-factor-authentication/ For organisations of all sizes that need to protect sensitive data at scale, Duo’s trusted access solution is a user-centric zero-trust security platform for all users, all devices and all applications. --- # Meet Microsoft Teams - 13million daily users and growing URL: https://mercuryit.com.au/video/meet-microsoft-teams/ Microsoft Teams is the new chat-based workspace in Office 365. It’s designed to empower every team to achieve more by letting them collaborate in their own unique way. It is the fastest growing business application with 13 million daily users. --- # What is Microsoft 365? URL: https://mercuryit.com.au/video/office-365/ Empower your employees with the tools they need to collaborate efficiently, communicate on the go, and access files with ease. Run your business with Microsoft's must-have Business Apps, allowing you to manage bookkeeping, customer scheduling, referrals and more. --- # Microsoft Teams customer success stories: Best-in-class URL: https://mercuryit.com.au/video/introducing-microsoft-teams/ Introducing Microsoft Teams, the chat-based workspace in Office 365. When teams have a dedicated place designed to help them be more effective together, there's no limit to what they can achieve. --- # The Modern Workplace: Microsoft Teams Background Blur URL: https://mercuryit.com.au/video/background-blurmicrosoft-teams/ Sometimes working from “anywhere” is less than ideal. So, now you can blur your background in Microsoft Teams. It keeps your team focused on the conversation, not the cat doing parkour behind you.