Craig Rowley

Cyber Security Threats to the Australian Education Sector: Insights from Penetration Testing (2022-2024) The document highlights the significant cybersecurity vulnerabilities faced by the Australian education sector due to rapid digital transformation and reliance on cloud services. ​ Key findings from penetration tests conducted between 2022 and 2024 reveal critical weaknesses in internal networks, external applications, and cloud infrastructures, exposing institutions to data breaches, operational disruptions, financial losses, and reputational damage. Key Findings: * Internal Vulnerabilities: - Outdated protocols and weak security practices. - Use of end-of-life operating systems like Windows Server 2012. - Lack of LDAP signing, making systems vulnerable to man-in-the-middle attacks. * External Vulnerabilities: - Weak password management on external portals. - Use of outdated web components and libraries. - Directory indexing enabled, exposing sensitive information. - Weak SSL/TLS protocols and missing security headers. * Cloud Vulnerabilities: - Weak password management and lack of Multi-Factor Authentication (MFA). - Missing conditional access policies. - Unmanaged accounts and devices. - Excessive user permissions. Source: https://lnkd.in/g7b-Xqmi Company: Spartans Sec - https://lnkd.in/gqatya9t #SpartansSec #CyberSecurity #EducationSector #DataProtection #MFA #CloudSecurity #PenetrationTesting

14

1 Comment

DID YOU GET BSOD TOO? #CROWDSTRIKE It's not just you! Laptop blue screen errors.. Due to a recent end point protection update by Crowdstrike, a number of laptops are suffering a bluescreen of death error and are unable to successfully reboot. This issue has impacted a significant number of organisations within Australia. Crowdstrike is currently investigating the issue as a top priority. Workaround Steps: 1. Boot Windows into Safe Mode or the Windows Recovery Environment 2. Navigate to the C:\Windows\System32\drivers\CrowdStrike directory 3. Locate the file matching “C-00000291*.sys”, and delete it. 4. Boot the host normally.

9

What a blast it was! The See Yourself in Cyber - career event for high school students promised great things and delivered great results. 🏫 Bringing in over 60 years 9-12 students and teachers from 8 schools, it was clear that our program is now well established to continue into the future. Students heard from NSW Department of Education’s charlie sukkar Stephen Darragh Andrew Jackson Ruanne Kelly and Alex Smith to understand the diversity of experiences and qualifications. They also met with and heard from our guest from the Australian Department of Home Affairs and our partners- CyberCX, IBM and KPMG Australia about their cyber security journey. Students discussed fictional scenarios and competed in a capture the flag competition. Learnings outcomes ticked: ✅Cyber Security careers are diverse. ✅Women have a well-defined place in cyber. ✅It is not essential to go to university, there are pathways. ✅Technical expertise while desired is not essential. ✅Help is available if you need. ✅Having a problem solving mindset is important. We are very grateful to Jakub Zverina Amrit S. Celia Yap Jasper Davis Charlotte Moss Elysha Padasian and Jess Thomas for giving up your day for the students. It is critical that we keep building young people’s interest in cyber security to meet the needs of Shield 5 of the 2023-2030 Australian Cyber Security Strategy. #cybersecuritycareers #onlinesafety #cybermarvel Tony Chapman Michelle M.

30

9 Comments

The State of Cloud Security Platforms and DevSecOps: A new survey by Cisco and Enterprise Strategy Group reveals the true contours of cloud native application development and security

1

Drowning in forms? 😩 Feel like a “Chief Paper Shuffler” instead of an NDIS Provider? It’s time to take control! 💪 Our Process Mapping Workshop & Automation Package will: 👉 Sort out your messy workflows 👉 Cut down your admin time 👉 And show those forms who’s boss! Add our automation option, and let tech handle the boring stuff—no big tech spend required. 😉 Ready to break up with admin stress? Swipe through the carousel and let’s get started! ❤️ #NDIS #ProcessMapping #AdminChaos #StreamlineYourBusiness #NDISProviders

1

I just completed Datacom's Cybersecurity on @[Forage](urn:li:organization:68514998). In the simulation I: * Completed a simulation focussed on how Datacom's cybersecurity team helps protect it's clients * Investigated a cyberattack and produced a comprehensive report documenting findings and outlining key recommendations to improve a client's cybersecurity posture * Conducted a comprehensive risk assessment Check out the simulation here: https://lnkd.in/gW3WGjhS

1

🇦🇺 𝐈𝐦𝐩𝐫𝐨𝐯𝐢𝐧𝐠 𝐀𝐮𝐬𝐭𝐫𝐚𝐥𝐢𝐚’𝐬 𝐜𝐲𝐛𝐞𝐫 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐜𝐨𝐧𝐬𝐢𝐬𝐭𝐞𝐧𝐭 𝐰𝐢𝐭𝐡 𝐢𝐭𝐬 2023-2030 𝐂𝐲𝐛𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐲 The Government has released a legislative package known as the 𝐂𝐲𝐛𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐁𝐢𝐥𝐥 2024 that implements a range of initiatives aimed at improving cyber security. These initiatives include: ➡️ Mandatory standards for improving the security of Internet of Things (𝐈𝐨𝐓) devices ➡️ Australian businesses will have to report ransomware payments within 72 hours of being made ➡️ Establishing a cyber review board to investigate serious cyber security incidents ➡️ Making changes to security of critical infrastructure legislation relating to data storage systems ➡️ Establishing a National Cyber Security Coordinator 💥 These initiatives are still undergoing review but if passed before the end of the year will require organisations to act and start focussing a lot more on cyber! 💥 #Cybersecurity #Informationsecurity #Australia

6

Penetration Tester to Application Security Engineer Remote (Must be in Australia) $150k package Not many jobs come around where you can get employed for your current skills and get training on the job to transition to your next role. Are you ready to turn from a breaker to a builder? Our customer believes software should be the status quo. Their aim is to fundamentally change the approach to secure software, ensuring it influences every aspect of software engineering and customer experience. If this resonates with you, this could be the transition you’ve been looking for. Maybe you’re frustrated with finding bugs but not solving the real issues. And you like the idea of getting closer to the root cause. This is a mid-level role, meaning you’ll be dedicated to a customer for a period of time, predominantly focused on testing web apps. You’ll need to have experience working as a pentester. It wouldn’t be suitable for someone who believes engineers are the problem; instead, they are looking for someone that wants to support, educate, and influence. You need experience in coding/scripting. You should be able to write and understand code in any language. You can be taught manual code review and help build your skills in the application security industry. You’ll work on solving problems and improving secure software, influencing software engineering functions and customer experience. As part of the interview process, you will take part in a coding challenge. It’s not about syntax but about thinking like a programmer. Tasks could include reversing a linked list or building an algorithm to count a grid of emotions. The goal is to demonstrate your ability to think and write software. The other day I posted about this role and highlighted that it was in Australia and did not offer sponsorship. 99% of people who reached out to me were from overseas, unfortunately, people that the customer can’t hire. For clarification, you can’t be considered for this role if you aren’t in Australia and don’t have working rights; you won’t be eligible. I had several people say something like, “Don’t worry about the visa, I can sort it, just get me an offer.” Sorry, but visas in Australia don’t work like that. If you like the idea of switching from breaker to builder, reach out to Yas Bourne for more info.

76

3 Comments

🚨 Big News in Cyber Security! 🚨 Australia has just passed its first Cyber Security Act—a huge leap forward in tackling the growing cyber threat landscape. 🛡️ This new legislation will enforce minimum security standards across businesses, raising the bar for how we all protect our data and systems. But let’s be real—cybercriminals aren’t going to pack up and leave just because the government tells them to! The ball’s in your court to make sure your business is protected. That’s where ARCSEC IT steps in. We’re all about keeping it simple, no scare tactics, just solutions—helping you meet compliance and safeguard your business without drowning in tech jargon. 💡 Not sure where to start? We’ve got you covered. Check out our tailored IT and security packages—we’ll meet you where you are and help you level up: https://lnkd.in/giYmCw2v Because at the end of the day, it’s not just about ticking boxes. It’s about having the confidence to focus on your business while we’ve got your back. So don’t wait until it’s too late—let’s lock it down together! 🔒

9

I just completed Datacom's Cybersecurity on @[Forage](urn:li:organization:68514998). In the simulation I: * Completed a simulation focussed on how Datacom's cybersecurity team helps protect it's clients * Investigated a cyberattack and produced a comprehensive report documenting findings and outlining key recommendations to improve a client's cybersecurity posture * Conducted a comprehensive risk assessment Check out the simulation here: https://lnkd.in/dKXZhYqH

4

1 Comment

Gain professional development in cyber security with Essential Eight Training! 💻 In today’s digital landscape, strong cyber security skills are essential. This course, designed by the Australian Signals Directorate, Australian Cyber Security Centre and delivered by TAFEcyber, equips cyber security and IT professionals with the knowledge and hands-on training needed to thrive. Throughout the course, you’ll delve into the Essential Eight strategies, gaining insights to assess and enhance your organisation’s cyber security posture effectively. With a mix of expert-led sessions and practical exercises, you'll develop the skills to identify vulnerabilities, implement robust security measures, and stay ahead of potential threats. Whether you’re looking to upskill, advance your career or ensure your organisation’s safety, this course is your pathway to success! Ready to take the next step? Discover more and enrol for Term 4 👉 https://lnkd.in/dDxnj9M4 #TAFEcyber #EssentialEight #CyberSecurity #ProfessionalDevelopment

31

2 Comments

Another Australian business affected through a 3rd party cyber incident, though in this article great pains are taken to explain that it is not their own systems but rather a 3rd party, yet who owns the data that has been exfiltrated and is now showing up on third party sites? Likening this to a personal situation, if I have household items and valuables stored at a storage facility, I will be damned certain that the storage facility is fully secure and I will expect them through the T&Cs of our agreement to have security in place. Always know what data you are sharing with your third party providers, in this case it would appear to be an unacceptable type of data (sensitive information) without sufficient security of that data, if it did need to be shared with this 3rd party provider. Data that must be shared with a third party, must be: - As little as possible to provide the service - For as short a time as possible to provide the service - At least as securely as your data security policies Thanks Brandon Dunlop for sharing https://lnkd.in/ggurmxhs

11

5 Comments

🌐 Google Cloud Accidentally Deletes UniSuper’s $125 Billion Pension Account – An Urgent Lesson in Cybersecurity & Cloud Backup 🛡️ In a startling incident, Google Cloud accidentally deleted the account of UniSuper – a major Australian pension fund valued at $125 billion. This misstep left around 600,000 users without access to their accounts for nearly two weeks. UniSuper's choice of cloud service aimed at streamlining processes ended up becoming a nightmare due to unforeseen data deletions caused by a misconfiguration issue. 1. Importance of Redundant Backups: Even as a reputable organization, Google Cloud's incident underscores the necessity of maintaining backups across multiple platforms. 2. Risk Mitigation Strategies: Companies should adopt a multi-cloud strategy to prevent reliance on a single provider and ensure swift recovery in the event of data loss. 3. Consistent Vigilance: Regular audits and compliance verifications could help identify and rectify all potential risks before causing significant disruptions. 4. Recovery Preparedness: Having diverse and readily accessible backup solutions determines the efficiency of recovery processes amid unexpected data loss. This incident epitomizes why merely using cloud services like Microsoft, Google, or Dropbox isn't ample protection. You must have a robust cybersecurity strategy, including third-party cloud backup to secure your private practice, hospital, specialty pharmacy, or any other healthcare enterprise's email and cloud storage systems. 🥅 Read the full article initially posted in SPICEWORKS to gain deeper insights into the UniSuper debacle and enhance your organization’s cybersecurity stance - https://bit.ly/454QAJU 🔒Act Now! Secure your data with ICU Computer Solutions – your go-to experts for cloud backup and network security assistance. Visit our website https://bit.ly/3dG5ZK2 or request your FREE Cybersecurity Scan Report via this link > >> https://bit.ly/49hvaJP #CloudBackup #Cybersecurity #DataProtection #CloudComputing #Misconfiguration #DisasterRecovery #DataRecovery #ITSecurity #UniSuper #GoogleCloud #RiskMitigation #ITConsulting #CloudServices #CyberThreats #DataLossPrevention #TechNews #BusinessContinuity #CloudMigration #TechIndustry #InformationSecurity #DataManagement #BackupSolutions #NetworkSecurity #SecurityBreach #ITSupport #CloudInfrastructure #DigitalTransformation #BusinessSecurity #TechSupport #CyberAwareness

1

🌐 Google Cloud Accidentally Deletes UniSuper’s $125 Billion Pension Account – An Urgent Lesson in Cybersecurity & Cloud Backup 🛡️ In a startling incident, Google Cloud accidentally deleted the account of UniSuper – a major Australian pension fund valued at $125 billion. This misstep left around 600,000 users without access to their accounts for nearly two weeks. UniSuper's choice of cloud service aimed at streamlining processes ended up becoming a nightmare due to unforeseen data deletions caused by a misconfiguration issue. 1. Importance of Redundant Backups: Even as a reputable organization, Google Cloud's incident underscores the necessity of maintaining backups across multiple platforms. 2. Risk Mitigation Strategies: Companies should adopt a multi-cloud strategy to prevent reliance on a single provider and ensure swift recovery in the event of data loss. 3. Consistent Vigilance: Regular audits and compliance verifications could help identify and rectify all potential risks before causing significant disruptions. 4. Recovery Preparedness: Having diverse and readily accessible backup solutions determines the efficiency of recovery processes amid unexpected data loss. This incident epitomizes why merely using cloud services like Microsoft, Google, or Dropbox isn't ample protection. You must have a robust cybersecurity strategy, including third-party cloud backup to secure your private practice, hospital, specialty pharmacy, or any other healthcare enterprise's email and cloud storage systems. 🥅 Read the full article initially posted in SPICEWORKS to gain deeper insights into the UniSuper debacle and enhance your organization’s cybersecurity stance - https://bit.ly/454QAJU 🔒Act Now! Secure your data with ICU Computer Solutions – your go-to experts for cloud backup and network security assistance. Visit our website https://bit.ly/3dG5ZK2 or request your FREE Cybersecurity Scan Report via this link > >> https://bit.ly/49hvaJP #CloudBackup #Cybersecurity #DataProtection #CloudComputing #Misconfiguration #DisasterRecovery #DataRecovery #ITSecurity #UniSuper #GoogleCloud #RiskMitigation #ITConsulting #CloudServices #CyberThreats #DataLossPrevention #TechNews #BusinessContinuity #CloudMigration #TechIndustry #InformationSecurity #DataManagement #BackupSolutions #NetworkSecurity #SecurityBreach #ITSupport #CloudInfrastructure #DigitalTransformation #BusinessSecurity #TechSupport #CyberAwareness

2

🌐 Google Cloud Accidentally Deletes UniSuper’s $125 Billion Pension Account – An Urgent Lesson in Cybersecurity & Cloud Backup 🛡️ In a startling incident, Google Cloud accidentally deleted the account of UniSuper – a major Australian pension fund valued at $125 billion. This misstep left around 600,000 users without access to their accounts for nearly two weeks. UniSuper's choice of cloud service aimed at streamlining processes ended up becoming a nightmare due to unforeseen data deletions caused by a misconfiguration issue. 1. Importance of Redundant Backups: Even as a reputable organization, Google Cloud's incident underscores the necessity of maintaining backups across multiple platforms. 2. Risk Mitigation Strategies: Companies should adopt a multi-cloud strategy to prevent reliance on a single provider and ensure swift recovery in the event of data loss. 3. Consistent Vigilance: Regular audits and compliance verifications could help identify and rectify all potential risks before causing significant disruptions. 4. Recovery Preparedness: Having diverse and readily accessible backup solutions determines the efficiency of recovery processes amid unexpected data loss. This incident epitomizes why merely using cloud services like Microsoft, Google, or Dropbox isn't ample protection. You must have a robust cybersecurity strategy, including third-party cloud backup to secure your private practice, hospital, specialty pharmacy, or any other healthcare enterprise's email and cloud storage systems. 🥅 Read the full article initially posted in SPICEWORKS to gain deeper insights into the UniSuper debacle and enhance your organization’s cybersecurity stance - https://bit.ly/454QAJU 🔒Act Now! Secure your data with ICU Computer Solutions – your go-to experts for cloud backup and network security assistance. Visit our website https://bit.ly/3dG5ZK2 or request your FREE Cybersecurity Scan Report via this link > >> https://bit.ly/49hvaJP #CloudBackup #Cybersecurity #DataProtection #CloudComputing #Misconfiguration #DisasterRecovery #DataRecovery #ITSecurity #UniSuper #GoogleCloud #RiskMitigation #ITConsulting #CloudServices #CyberThreats #DataLossPrevention #TechNews #BusinessContinuity #CloudMigration #TechIndustry #InformationSecurity #DataManagement #BackupSolutions #NetworkSecurity #SecurityBreach #ITSupport #CloudInfrastructure #DigitalTransformation #BusinessSecurity #TechSupport #CyberAwareness

4

🌐 Google Cloud Accidentally Deletes UniSuper’s $125 Billion Pension Account – An Urgent Lesson in Cybersecurity & Cloud Backup 🛡️ In a startling incident, Google Cloud accidentally deleted the account of UniSuper – a major Australian pension fund valued at $125 billion. This misstep left around 600,000 users without access to their accounts for nearly two weeks. UniSuper's choice of cloud service aimed at streamlining processes ended up becoming a nightmare due to unforeseen data deletions caused by a misconfiguration issue. 1. Importance of Redundant Backups: Even as a reputable organization, Google Cloud's incident underscores the necessity of maintaining backups across multiple platforms. 2. Risk Mitigation Strategies: Companies should adopt a multi-cloud strategy to prevent reliance on a single provider and ensure swift recovery in the event of data loss. 3. Consistent Vigilance: Regular audits and compliance verifications could help identify and rectify all potential risks before causing significant disruptions. 4. Recovery Preparedness: Having diverse and readily accessible backup solutions determines the efficiency of recovery processes amid unexpected data loss. This incident epitomizes why merely using cloud services like Microsoft, Google, or Dropbox isn't ample protection. You must have a robust cybersecurity strategy, including third-party cloud backup to secure your private practice, hospital, specialty pharmacy, or any other healthcare enterprise's email and cloud storage systems. 🥅 Read the full article initially posted in SPICEWORKS to gain deeper insights into the UniSuper debacle and enhance your organization’s cybersecurity stance - https://bit.ly/454QAJU 🔒Act Now! Secure your data with ICU Computer Solutions – your go-to experts for cloud backup and network security assistance. Visit our website https://bit.ly/3dG5ZK2 or request your FREE Cybersecurity Scan Report via this link > >> https://bit.ly/49hvaJP #CloudBackup #Cybersecurity #DataProtection #CloudComputing #Misconfiguration #DisasterRecovery #DataRecovery #ITSecurity #UniSuper #GoogleCloud #RiskMitigation #ITConsulting #CloudServices #CyberThreats #DataLossPrevention #TechNews #BusinessContinuity #CloudMigration #TechIndustry #InformationSecurity #DataManagement #BackupSolutions #NetworkSecurity #SecurityBreach #ITSupport #CloudInfrastructure #DigitalTransformation #BusinessSecurity #TechSupport #CyberAwareness

1