Straight-talking articles on cyber security and IT for small and medium businesses. We explain the threats that matter and what to actually do about them.
The VLSB+C keeps cyber security on its 2026 risk list, and cites a near $1 million trust-account theft. Here are the controls it expects, starting with the three to fix first.
Read articleAttackers who get into an email account often set one hidden forwarding rule and leave. It quietly leaks everything for months. How to find it, and shut it down.
Read articleFrom 1 July 2026 the AML reforms pull law firms, accountants and conveyancers into the Privacy Act, even under $3m turnover. What changed, and what to do about it.
Read articleA new wave of attacks hands your Microsoft 365 account to criminals using Microsoft's own genuine login page and your own MFA. No fake site, no stolen password. Here's how it works and how to stop it.
Read articleASD has confirmed it will retire the Essential Eight within two years. If that sounds alarming, it shouldn't. The fundamentals don't change, and most small businesses are already covered.
Read articleA staff member clicks one email — and minutes later an attacker controls everything. The twist: it wasn't even an admin account. Here's how it happens, and the simple switches that stop it.
Read articleMost attacks on small businesses are stopped by a handful of simple controls. Here are the five basics — in plain English, no jargon.
Read articleMicrosoft 365 prices rise up to 33% from July 2026. What's changing, what it costs, and how Copilot Chat differs from full Microsoft 365 Copilot.
Read articleIn 2024 the VLSB+C set minimum cyber security expectations for Victorian law firms. Here's what they cover, why they matter, and the practical steps to meet them.
Read articleA mailbox sending emails no one wrote. Files renamed overnight. What you do in the first hour after a breach usually matters more than anything you bought before it.
Read articleYou don't need an AI strategy. You need to pick one annoying, repetitive task and make it disappear. Here are practical automations a small team can start with.
Read articleSince 30 May 2025, many Australian businesses that pay a ransomware demand must report it to the government within 72 hours. Here's who's caught, and the better way to never face that clock.
Read articleAI is genuinely useful in a law firm, just not for the part clients pay for. Here's where it saves real time, the hard lines to keep, and how to start without putting client confidentiality at risk.
Read articleMost businesses assume that because their email and files live in Microsoft 365, they're backed up. They're not, not the way you'd expect. Here's the gap, and how to close it.
Read articleMost paperless projects fail because they just move the mess onto a shared drive. Here's what good document management looks like for a law firm, and how to make it stick.
Read articleThe government's Essential Eight sounds like something only a big corporate worries about. It's really eight plain-English habits, and most attacks on small businesses would be stopped by them.
Read articleA password you set years ago is probably sitting in a database criminals can search right now. Not because you slipped up, but because a company you trusted got breached. Here's what to do.
Read articleThe 2024 privacy reforms made headlines for the doxxing offences. The bigger story for any business holding personal information is quieter, and worth understanding.
Read articleAI tools will invent court cases that look completely real, with fake judges, citations and quotes. It's already cost lawyers here and overseas. Here's why it happens and the simple habit that prevents it.
Read articleA new starter who can't log in on day one learns one thing fast: this place is disorganised. Getting their IT ready in an hour isn't luck. It's a process, and it doubles as good security.
Read articleTwice a year the privacy regulator publishes who got breached, and the sector that includes law firms is a regular near the top. That's not bad luck, and the causes are very fixable.
Read articleMost businesses use Microsoft 365 for email and Word and stop there. You're paying for a full toolbox and using two tools in it. Here's what else is already in your subscription.
Read articleYour team works from home, the train, a cafe, a client's office. Done right, security is what makes that possible, not what gets in the way. Here's how to set it up properly.
Read articleIn February 2024 a global coalition dismantled LockBit, the most prolific ransomware gang on the planet. Days later it was back online. Here's the uncomfortable lesson for your business.
Read articleDays before settlement, your client gets your trust account details and transfers the funds. Except the email wasn't from you, and the money is gone in minutes. Here's how this scam works, and how to shut it down.
Read articleIn 2023 one of Australia's largest law firms had over a million documents stolen and dumped online. If it can happen to a firm that size, the takeaway for a small practice isn't 'spend more'.
Read articleThe 2022 breaches were the moment cyber security became a kitchen-table topic in Australia. The companies were huge, but the lessons scale all the way down to a business of five.
Read articleNo articles in this category yet. View all insights.
Every article here comes from how we look after Melbourne businesses every day. See where your business stands, and what “actively managed” really feels like.
Or explore cyber security in Melbourne.