We all know the seven traditional steps to fight ransomware, but are they still holding up? Also, how do they scale in the cloud? In the following article, we briefly look at the infrastructure as code and the zero-trust models and how your ransomware strategy can benefit from them. Infrastructure as Code The Infrastructure as Code (IaC) approach can enable organisations to fight ransomware on their cloud platforms. IaC has been around for about a decade allowing IT professionals to deploy and operate complex cloud environments with no effort. Comparing the most popular IaC tools. (Source: Me ..read more

Ransomware is a global cyber threat affecting individuals, businesses, and government entities. Most experts agree that the ransomware industry is still growing in 2022, and consequently, organisations will continue paying a high price in damages and lost revenue. Furthermore, the new year brings new operating models, highly targeted attacks, and additional battlegrounds into the ransomware industry. Therefore, decision-makers need to seek innovative technologies to protect their organisations from evolving threats in 2022. The Ransomware Status Quo According to a recent Sophos survey, one in ..read more

A few years back, when the major data breach of credit bureau Equifax occurred, there was a lot of discussion about open-source code and how secure it is. Fast forward to today, and it’s widely acknowledged that open-source code poses extensive benefits for consumers and businesses alike. Using community-developed software speeds up development times and reduced the costs of commercial software by removing the need to build entire applications from scratch. But as open-source becomes increasingly popular, the key question remains: Is open-source software secure? To help you understand open-so ..read more

Two out of three small business owners believe a cyberattack to their business is unlikely, but in reality, the same proportion of businesses has been victims of cyber attacks, according to Keeper Security. The direct consequences of a cyberattack is disruption of your business, loss of productivity and revenue, which may lead to the loss of business reputation, the loss of existing and future clients and unwanted media attention. Therefore, it is critical to keep your small business secure from cyber attacks, but how? With the following three simple measures, you can quickly improve the risk ..read more

Australian small businesses are the most likely to be targeted by scammers – according to the Australian Competition and Consumer Commission (ACCC). The regulator reports a sudden increase of email-based scams (also known as ‘Business email compromise’ scams) contributing $3.8m extra to the losses reported to Scamwatch in 2018. According to the ACCC, any organisation managing money via bank accounts is a potential target cyber scams such as email-based attacks. The good news is that Australian businesses can avoid these losses with professional email solutions with built-in protection from th ..read more

Why is it so that SMBs are so vulnerable to technology issues? Unforeseen events like data glitches, ransomware attacks and system crashes can lead to significant problems threatening the mere existence of your company. In the following article, we explain what the leading IT and cybersecurity risks of any small business are, and how a managed IT services provider can help business owners address them. Lack of IT Strategy Tiny IT budgets and the lack of experience often leaves small businesses without an adequate IT strategy. Why is planning so important? A well-thought-out IT strategy can id ..read more

IT outsourcing is an ever-increasing practice within the professional services sector. If your business is spending too many resources on managing computers, email accounts, servers, printers, and telephones, it is time to consider getting external help from the professionals. Since managing an IT department can be a daunting task, a Managed IT Services Provider (MSP) can relieve your business from the stressful experience of dealing with technology problems. The practice of outsourcing allows small business owners to focus on their core business areas instead of burning their valuable resour ..read more

Information Technology, or IT, can increase a law practice’s productivity, enable higher quality services and facilitate client introductions and engagement. It is imperative, however, that law practices – and small businesses in general – are aware of the inherent risks associated with IT, as financial and reputational damage due to hacking, data loss and other adverse events has put some legal practices out of business. For example, if your practice relies on email for communication, your business is potentially exposed to phishing, business email compromise fraud, payment redirection scams ..read more

Safer Internet Day is an opportunity to raise awareness about the safe and positive use of digital technology, and to explore the role we can all play in creating a better and safer internet in our community. On Tuesday, 5 February 2019 we are celebrating Safer Internet Day! Coordinated by the Office of the eSafety Commissioner in Australia and celebrated in over 130 countries, this year’s Safer Internet Day theme is: ‘Together for a better internet’. The campaign's slogan, "Together for a better internet", is a call to action for all stakeholders to join together and play their part in creat ..read more

Ever wondered how you can deliver security awareness training to staff in your organisation that they will love? In this article, we are revealing the techniques we find useful in our training sessions which should help you get started with your first phishing awareness training session for your organisation. Iron Bastion delivers tailored phishing awareness training to businesses in Australia to raise awareness around phishing and social engineering. Our experience has gained us some insights into and how raise awareness in organisations in effective, fun and informative ways. Why Phishing N ..read more