Jypra Group

30/09/2026

🚨 Vulnerability Update: SharePoint servers under active attack

If your business runs SharePoint on its own servers, this one needs your attention today.

Attackers are now exploiting CVE-2026-65660, a remote code ex*****on flaw in Microsoft SharePoint Server 2016, 2019 and Subscription Edition. Microsoft fixed it back in August. The attacks only started after researchers published the technical details last week. For anyone who skipped the August updates, the clock is now running.

Here's what makes it serious:
🔹 An attacker needs only a basic user account, not admin rights
🔹 Attackers have been spotted trying to plant hidden backdoors (webshells)
🔹 Microsoft first labelled it a medium-risk issue, so plenty of teams may have pushed it down the list

What to do now:
✅ Apply Microsoft's August 2026 SharePoint security updates
✅ Make sure SharePoint isn't directly exposed to the internet
✅ Check your servers for unfamiliar files or unusual activity
✅ Review who has site member access, and remove old or unused accounts

This is a good reminder that "patched months ago" and "patched on our servers" aren't the same thing.

Not sure if your SharePoint environment is up to date? The Jypra Group team can check it for you. Get in touch.

29/09/2026

⚠️ Patched, but already breached

This month, Aussie edtech platform Mathspace confirmed that over a million students, parents and school staff across Australia and New Zealand had their details stolen.

The way in wasn't the learning platform. It was an internal reporting tool with a known flaw. Mathspace did patch it, but the attackers had been inside for almost three weeks and had already taken the data.

A few things every business should take from this:

👉 Treat internal tools like production. Reporting dashboards and admin consoles often hold the keys to your most sensitive databases.

👉 Patch, then check. When a flaw is already being exploited, updating isn't enough. Look for new accounts, odd logins and data exports from before the fix.

👉 Keep admin tools off the public internet. Put them behind a VPN or access controls.

👉 Don't hold data you no longer need. Former users' records were part of this breach. Data you've deleted can't be stolen.

If you're a parent or teacher, watch out for convincing phishing emails that use your real name or school.

Not sure what's exposed in your own environment? Jypra Group can help you find out.

17/09/2026

⚠️ We’re a small business. Why would hackers target us?

That’s what many business owners think until a security incident brings everything to a standstill.

The truth is, cybercriminals don’t care how big your business is. They look for weak passwords, unprotected systems, and gaps in security. One compromised account can lead to stolen data, financial losses, and a lot of sleepless nights.

You’ve worked hard to build your business. Don’t let a preventable security incident put it at risk.

👉 Cybersecurity isn’t just for big businesses. It’s for every business.

At Jypra Group, we help businesses strengthen their security, protect what matters, and keep growing with confidence.

16/09/2026

🚨 Imagine your remote support tool turning against you, not because someone broke into your network, but because the tool itself became the infection vector.

That's essentially what's happening with ConnectWise ScreenConnect right now. A critical flaw (CVE-2026-84869, CVSS 9.9) in how the platform handles file transfers lets attackers push and run files through an active session with zero authorisation.⚠️

Once in, the malware doesn't stop at one machine — it spreads to the next device that connects, and the next, using the very tool that's meant to keep systems supported and secure.🔄

CISA has flagged it as actively exploited in the wild. ConnectWise has released a fix in version 26.6.5, covering both cloud and on-premise deployments.

Running ScreenConnect? Update now. Can't patch immediately? Disable file transfer permissions as a stopgap, and take a pass through your session logs for anything that looks unfamiliar.

🔍Here's the real takeaway: the tools we trust most to keep our systems running are often exactly what attackers are most interested in. One compromised session can become the doorway into every client, site, or environment that tool touches.

If you're not sure whether this reaches you, that's worth finding out before someone else finds out for you.

15/09/2026

Most small businesses don't get breached because they lack security tools. They get breached because of one wrong assumption.

"We moved to the cloud, so Microsoft/Google handles our security."

❌ Not quite.

Cloud providers secure the infrastructure — data centres, servers and networks. Everything above that layer — who has access, how it's configured and whether your backups actually work — is your responsibility.

It's called the Shared Responsibility Model, and it's the gap attackers exploit every day. 🎯

🔍 A few things worth checking this week:

→ Enable MFA on every account, especially admin and email accounts. Most breaches start with one stolen password.

→ Turn on audit logging in your cloud platform. Without logs, investigating an incident becomes much harder.

→ Test your backup restores, not just the backup job. A backup you've never restored is a guess, not a plan.

→ Review admin access quarterly. Remove ex-employees, ex-contractors and unnecessary temporary access.

→ Write down who to call during an incident. The first hour matters, and preparation saves time.

💡 None of this requires a huge budget. It requires someone actually checking, on a schedule, rather than assuming it's handled.

That's usually the real gap — not the tools, but the follow-through.

It's what we help SMBs close at Jypra Group.

11/09/2026

🚨 153 MILLION Driver’s Licenses. One Vendor Breach.

That’s the scale of the identity data reportedly found for sale on a dark web marketplace called Nexus — including front-and-back scans, with some containing infrared and UV security features. 😳

The FBI is investigating, and IDScan has confirmed that its cloud systems were breached.

🔐 Here’s the uncomfortable lesson:

Those brands didn’t necessarily have to be hacked directly.

Their third-party vendor was compromised.

And when your business outsources identity or age verification, your customers’ data can still become your risk — even when the breach happens somewhere else.

Ask yourself:

❓ How long does your ID-verification provider retain customer documents?
❓ Where is that data stored?
❓ Who has access to it?
❓ Is it encrypted throughout its lifecycle?
❓ What happens when the vendor suffers a breach?
❓ Have you actually assessed their cloud security posture?

Third-party risk isn’t just about contracts and compliance anymore.

It’s about protecting the data your customers trusted you with. 🛡️

At Jypra Group, we help organisations strengthen third-party risk management, cloud security, governance, risk and compliance, and identify weaknesses before attackers do.

🔎 Your security is only as strong as the ecosystem around you.

10/09/2026

🚨The biggest law firm breaches this year didn’t always start with malware. They started with a person.

A major U.S. law firm recently disclosed that sensitive information, including **Social Security numbers and health records**, had been accessed without authorisation.

What makes this especially concerning is the pattern emerging across the legal sector. Several significant law firm incidents this year have involved social engineering and impersonation — where someone was deceived into providing access or information.

No sophisticated exploit.
No ransomware payload.
No complex technical attack.

Just a convincing person, a sense of urgency, and a process that failed to verify the request. 🎭

For law firms handling highly sensitive **client, financial and medical information**, this is an uncomfortable reality:

👉 Your biggest security risk may not always be your technology. It may be whether your people can recognise a convincing lie under pressure.

# # # 🔎 Worth checking this week:

• Does your firm verify identity before releasing client or case information — even when the request appears legitimate?

• Would your staff know how to respond if a “client”, “partner” or executive created pressure to act quickly?

• Are verification procedures documented and consistently followed, or are they simply assumed?

Strong cybersecurity isn't just about protecting systems. It's about protecting people, processes and the information they are trusted with.🛡️

A security awareness and process review can help identify these gaps before an attacker does.

10/09/2026

07/09/2026

When disruption strikes, how quickly can your business recover?

Jypra’s High Availability (HA) and Disaster Recovery (DR) solutions help organisations minimise downtime, protect critical systems, and maintain business continuity when unexpected events occur.

From system failures and cyber incidents to major disruptions, being prepared can make the difference between a quick recovery and costly downtime.

Watch our video to discover how Jypra can help your organisation stay resilient, available, and prepared.

03/09/2026

🛡️ We’re too small for hackers to bother with.

That mindset is exactly what can make small accounting firms an attractive target.

Recently, Australian accounting and bookkeeping practices were reportedly targeted by ransomware and data theft incidents, with highly sensitive client information allegedly compromised — including tax file numbers, SMSF records, superannuation details, and financial data affecting thousands of clients.

These weren't large organisations with extensive cybersecurity teams.

That’s exactly the point.

Cybercriminals increasingly target small and mid-sized businesses because they often hold valuable data without having the same level of security controls as larger enterprises.

Sometimes, it only takes:

• One unpatched system
• One compromised password
• One phishing email clicked by an employee

The consequences can be significant — financially, operationally, and reputationally.

The good news? Effective cybersecurity doesn't always require an enterprise-level budget.

Practical controls such as:

🔐 Multi-factor authentication (MFA)
💾 Secure, protected backups
🎓 Cybersecurity awareness training
📋 A clear incident response plan

can significantly reduce the risk.

At Jypra Group, we help small and mid-sized Australian accounting firms strengthen their cybersecurity with practical solutions designed around their team, operations, and budget.

If you're running a 10–50 person accounting practice and haven't recently reviewed your cybersecurity posture, now is a good time to start the conversation.