If you don’t where it is, you can’t protect it.
Do you know where ALL your organisation’s data is – not physically, but on which web and cloud services?
Here’s the problem. If you don’t where it is, then you can’t protect it. The secondary problem is finding out, because not everyone in your organisation will be onboard. It is common for people to sign up to web services because they offer something useful that helps them do their job.
They sign up using their email address and creating a password. There is the first headache – how does anyone track what has been signed up to across your organisation, let alone who has access to it? If that person leaves, no one will change the account credentials if they don’t know about it, but your ex-colleague still has access.
Secondly, what data do they upload? Is that data that you have a legal or moral responsibility for?
There’s nothing noble about Nobelium.
This isn’t theory – it’s real. USAID is a pretty important US organisation – promoting democracy and human rights around the world. Turns out, someone there was using a well-known email database tool called Constant Contact. But their account wasn’t well protected. Worse still, their account had a huge mailing set up, and of course, it had all the official USAID templates.
So, these Nobelium people, allegedly a Russian state-sponsored hacker group, compromised the Constant Contact account and sent a bulletin out. The bulletin contained malware that allowed the hackers to take command and control over victims computers. Ironically the fake email alleged interference in the US federal elections.
So, what can you do?
The first step is knowing what SaaS tools your people are using. We call this SHADOW IT and it is inevitable. Rather than stopping it, the job IT has is to identify it and manage it. The second step is to secure those platforms. That’s why our KARE for Security S2 plan contains a useful tool to help you identify what services your people are using.
Refer : What We Know About The Apparent Russian Hack Exploiting USAID : NPR
Webinar Replay: Rethinking Endpoint Security: Smarter Strategies for a Safer Business
Cyber-protection keeps getting more complex, more restrictive and more expensive. This month we are talking with expert Thomas Shobbrook. He updates us on the latest security trends and help us understand how well protected your device is out-of-the-box. We ask...
What happened when a client’s client got hacked?
Sometimes the best way to understand cybersecurity isn't through theory, but through real examples. Recently, one of our clients experienced a perfect demonstration of why layered security matters – and how our KARE security suite can stop threats before they cause...
Coming soon to Windows 11 – a new Start Menu
Microsoft offers a glimpse into the future of Windows 11. If you're running the Windows 11 Dev Channel, you’ll likely have noticed a new build hitting your systems: Build 26200.5641. This isn’t a major feature drop, but it’s a solid update packed with improvements,...
GPT5 Has Landed — But Don’t Expect Fireworks (Yet)
OpenAI’s GPT5 just dropped, and as expected, tech circles are buzzing. Improved reasoning! Smoother tone! Even “vibe coding”! But let’s be clear: this isn’t a moon landing. It’s a refined evolution, not a revolution. If GPT4 was the charismatic genius who...
Does Generative AI Still Needs a Human Eye ?
It’s no secret that generative AI tools have become powerful assistants in modern work. From drafting emails and reports to generating insights and summarising complex documents, the productivity gains are real. But there’s a catch. A big one. Generative AI needs a...
July’s AI Headlines: Progress, Problems & Public Concerns
AI re-Investment causes job cuts at Microsoft: Microsoft has announced plans to reduce its workforce by up to 9,000 employees, representing approximately 4% of its global staff, as part of the latest round of job reductions this year. While the company has not...
5 Quick IT Wins That Cut Costs in 90 Days
5 Quick IT Wins That Cut Costs in 90 Days A survival guide for NZ professional services, charities & manufacturers under pressure.Cheaper Biscuits & No Colour Printing? Yep, times are tough. The NZ economy is putting pressure on every dollar. The lunchroom...
Webinar Replay – Securing the Mobile Frontier: Cybersecurity Essentials for Phones and Tablets for Modern Businesses
As mobile devices become the backbone of modern business operations, they also present a growing target for cyber threats. Apple or Android - they're both important. Every time you use these to access your Teams, Email or anything else, you are relying on them to be...
Can Copilot tame your Outlook Inbox?
Is your email inbox overflowing? You’re not alone. Managing a busy inbox can be time-consuming and draining. The average professional deals with around 100+ emails a day, and over half of those could be spam or trivial notifications2. Every new email interrupting your...
Meet our upgraded Remote Engineering Team
Listening to your feedback You've told us that we need to step up our initial call contacts. We understand. These days, responsive and efficient support is not just a value-add—it is a necessity. As organisations grow, so too does the complexity of their...