IT specialists

Practical information on keeping systems and data safe from attack.

CERT TEC 180518 WEB 295 v2

News

Online recruitment scams

Looking for a new job can be stressful at the best of times. It’s even more challenging when people use the opportunity

10 September 2020

Guide

Securing access to Microsoft 365

We see a large number of Microsoft 365 (formally known as Office 365) branded phishing attacks, due to it being such a c

CERT TEC 180518 WEB 265

Critical Controls

Network segmentation and separation

When paired together, segmentation and separation can add an additional level of access control and security to your net

Advisory

Vulnerability in Apple iOS reportedly being actively exploited

28 January 2021

Advisory

Vulnerability in Fortinet firewalls being exploited

1 December 2020

Guide

Mitigating the impact of incidents in M365

CERT NZ has seen a lot of phishing attacks on Microsoft 365, due to it being a commonly used cloud platform. A percentag

2019 05 30 MTP 1674 v2

Critical Controls

Securing internet-exposed services

Limiting and securing your internet-exposed services will help you prevent unauthorised access.

CERT TEC 180518 WEB 8 v2

News

COVID-19: operating your business under Alert Levels 1 and 2

Auckland is at Alert Level 2 and the rest of New Zealand at Alert Level 1. It’s important you run your business in line

28 September 2020

2019 05 30 MTP 1664 v2

Critical Controls

Secure defaults for macros

While macros have a valid business function, they are often used by attackers too. Using secure default configurations w

Advisory

Critical vulnerability in Microsoft Windows Server

15 July 2020

CERT TEC 180518 WEB 245

News

COVID-19: operating your business at all alert levels

We’ve got some advice to help you make adjustments to the way you work so you can keep your business operating safely un

13 August 2020

Guide

Preparing for denial-of-service incidents

Denial-of-service (DoS) attacks aim to exhaust your resources and take your operations offline. They can have a signific

Guide

Mitigating denial-of-service attacks

There are multiple ways to manage a denial-of-service (DoS) incident and the way you respond depends on the controls yo

2019 05 16 MTP 0632

News

Using Zoom safely

Since moving into Alert Levels 3 and 4, more New Zealanders than ever have been exploring new ways of connecting online.

11 May 2020

Advisory

Targeted attacks exploiting vulnerabilities in Microsoft Windows

24 March 2020

2019 05 16 MTP 1212

Critical Controls

Password manager

Providing a password manager for your staff to store their passwords, or other secrets like alarm codes, is a great way