People are the weakest link
This sounds like a nightmare too impossible to happen. US soldiers putting sensitive information online in non-secure third party websites. It defies belief, yet we’re reading that it happened. The story popped up on ‘Gizmodo’
It is alleged that US Soldiers were saving sensitive information on a couple of common flashcard sites, presumably of things they were trying to memorise and learn. Even worse, their settings were on ‘public’ not ‘private’
It’s a classic warning about the risk of people, however well intentioned, saving critical data online in places the organisation is unaware of, and can’t control. That’s why our new KARE for Security S2 plan helps identify use of these sites in your organisation.
US Soldiers Accidentally Leaked Nuclear Weapons Secrets: Report (gizmodo.com)
Shadow IT
Shadow IT is one of the largest threats to data privacy in organisations today.
It’s not necessarily because these sites are going to be hacked, although that’s always possible, but just because if you don’t know the tools are in use, then there is no way that you can manage them!
The first step to maintaining this data is to identify it! That’s why you need new tools that are cloud focused. If you’re still using the same old security tools that you used to use prior to the cloud, then you are not keeping up and we need to talk!
NZ Government “NCSC Minimum Cyber Security Standards”
The NCSC’s new Minimum Cyber Security Standards replace the old Critical Controls checklist with outcomes. What’s in them and what to do next.
Passkeys Explained: A Beginner’s Guide to Signing In Without a Password
What passkeys are, why they’re safer than passwords, and what Microsoft’s 2026 and 2027 sign-in changes mean for your business.
Your Staff Are Already Using AI. Do You Know How, and With What Data?
Shadow AI is already in most businesses. Why visibility matters and how a Business AI Assessment shows what is really happening.
We Have Copilot. Nobody’s Using It. What Should We Do?
Bought Copilot licences but nobody is using them? Why adoption stalls and what the businesses getting real value do differently.
30 Years of Change, and One Thing That Hasn’t
Three decades of IT, from NetWare and dial-up to AI. The technology has changed completely. What matters most has not.
Every Client Is Suddenly Asking Us the Same 3 Questions
Productivity, security and spend: the three questions every leader should ask their IT provider, with straight answers.
Webinar Replay: Microsoft 365 Business Premium, What You’re Probably Not Using (But Should Be)
Most businesses use less than 20% of Microsoft 365 Business Premium. The security features, Copilot and apps you are probably missing.
New Zealand’s Cyber Security Agency Warns Businesses to Get Control of AI Usage
The NCSC has published guidance on managing AI security and data risks. What it says and how to find out where AI is used in your business.
Making Sense of the AI Engines
Which AI engine for which job? A plain-English guide to the models from OpenAI, Anthropic, Google, DeepSeek, xAI, Meta and Mistral.
Why Would a Hacker Bother to Target Me?
Kaspersky’s 2026 SMB Threat Report shows why small businesses are prime targets, and why fake AI tools are the newest lure.