Weekly Cyber Brief: fake help desks, exploited VPNs and a hack the business missed

Weekly Cyber Brief: fake help desks, exploited VPNs and a hack the business missed

This week's risks came in through tools staff use every day: chat, remote access and free software.

  • The help desk that wasn't. Attackers flood a staff member's inbox, then message them in Microsoft Teams posing as IT support and talk them into opening a remote access tool.
  • Two VPNs under attack. Flaws in Cisco and Ivanti remote access products were exploited, and the fixes are out.
  • A hack the business missed. The Australian Signals Directorate found an intrusion the business had missed.

Each story ends with what to check this week.

Read this week's brief

Read more briefings in the Cyber Brief.

Related news & insights

Why healthcare leads Australia's data breach notifications

Why healthcare leads Australia's data breach notifications

Health service providers made 149 of the 667 data breach notifications received by Australia's privacy regulator from January to June 2026, more than any other sector. ...

Firewall and VPN security: why attackers target the devices meant to keep them out

Firewall and VPN security: why attackers target the devices meant to keep them out

Firewalls and VPNs have to be reachable from the internet, and most can't run the security tools that watch laptops and servers. That makes them an attractive way in. ...

Free download: the Government's cyber threat report, in two pages

Free download: the Government's cyber threat report, in two pages

The Australian Signals Directorate's Annual Cyber Threat Report 2025-26 is 68 pages long. We've pulled out the five facts that matter most to mid-sized organisations, plus ten questions to put...

Get the Cyber Brief

Clear, practical updates on the cyber threats facing Australian businesses, and what to do about them. Sent every Tuesday morning.