This week's risks came in through tools staff use every day: chat, remote access and free software.
- The help desk that wasn't. Attackers flood a staff member's inbox, then message them in Microsoft Teams posing as IT support and talk them into opening a remote access tool.
- Two VPNs under attack. Flaws in Cisco and Ivanti remote access products were exploited, and the fixes are out.
- A hack the business missed. The Australian Signals Directorate found an intrusion the business had missed.
Each story ends with what to check this week.
Read more briefings in the Cyber Brief.