Security Blog
Practical cybersecurity guides for NZ businesses

How to Run a Tabletop Cyber Incident Exercise: A Template for Small IT Teams
A tabletop cyber incident exercise is one of the cheapest, highest-impact ways to prepare your team for a real attack. Here's a ready-to-run template built for small New Zealand IT teams — including scenarios, roles, and a debrief checklist.

Blue Hammer Analysis: What the MS Defender LPE Vulnerability Means for NZ Businesses
A recent analysis from Exploit Pack uncovered a local privilege escalation (LPE) vulnerability in Microsoft Defender, dubbed Blue Hammer. Here's what it means for New Zealand businesses and how to protect your endpoints, email, and identity layer.

Inbound SPF, DKIM and DMARC: How to Stop Spoofed Emails Reaching Your Inbox
Most guides focus on outbound SPF, DKIM and DMARC — but how you handle inbound authentication is just as critical. Here's how to configure your mail server to reject spoofed emails before they reach your team.

Edge Under Siege: How NZ Businesses Can Defend Against State-Sponsored Perimeter Attacks
A recent Trend Micro report reveals how state-sponsored actors are systematically targeting edge devices like VPNs, firewalls, and email gateways. Here's what New Zealand businesses need to know — and the practical steps you can take today to protect your perimeter.

Windows Defender Turned Weapon
Security researchers have revealed how Windows Defender Application Control (WDAC) can be weaponised by attackers to disable EDR tools and move silently through networks. Here's what New Zealand businesses need to know — and how to harden their defences.
The Gentlemen Ransomware: What NZ Businesses Need to Know About This Fast-Rising Threat
A new ransomware group calling itself 'The Gentlemen' has rapidly emerged as a serious threat to businesses worldwide. Here's what New Zealand organisations need to know about their tactics — and how to stay protected.
From Reactive to Resilient: How TrendAI is Reinventing Cybersecurity with Digital Twin Technology
Discover how TrendAI's cybersecurity digital twin technology enables organisations to simulate attacks, validate defences, and shift from reactive security to anticipatory resilience.
Email Spoofing vs Phishing vs Impersonation: What NZ Staff Need to Know
Email Spoofing vs Phishing vs Impersonation: What NZ Staff Need to Know Email remains the single most common delivery mechanism for cyber attacks on New Zealand businesses. According to the NCSC, 40% of incidents responded to in Q4 202
Trend Micro Rebrands Enterprise Business to TrendAI: What NZ Businesses Need to Know
Trend Micro has announced a major rebrand of its enterprise business to TrendAI, signalling a strategic pivot toward AI-driven cybersecurity. Here's what the change means for New Zealand businesses and how to prepare.