Cyber Security for Small Businesses

Anthropic's Mythos AI model found a 27-year-old vulnerability in OpenBSD that human reviewers missed for decades — and that's just the beginning of the patching wave hitting every business. This episode breaks down how AI-driven code analysis has exploded Microsoft's monthly patches from 83 in March to 964 in September, and what proper patch management now looks like for SMBs.

Key learnings: • How Mythos chains low-severity vulnerabilities together to create critical exploits that static analysis tools miss • Why Google Chrome went from 20 patches in February to 967 in June under Project Glasswing • What a risk-based patching strategy prioritises when hundreds of thousands of vulnerabilities need remediation

Shownotes and more at https://cybersecurity4smallbusiness.com/podcast/

What happens when attackers breach two sites of the same company within 60 minutes on a Saturday night? This episode walks through a real incident response where Huntress SOC alerts caught credential dumping and lateral movement in progress — and how 24/7 monitoring stopped what was likely a ransomware attack before it crippled the business.

Key learnings: • Why abandoned POS machines with open RDP ports became the attack vector six months after decommissioning • How Mimikatz and WebBrowserPassView extracted both Windows and browser credentials within the first hour • What application whitelisting would have blocked that antivirus missed entirely

Check out the free ACSC Essential 8 self assessment audit tool. After completing the audit, you will be have a bespoke action plan, based on your type of business and your current security measures to achieve the right ACSC Maturity Level for your business.

Cyber Security 4 Small Business is a set of resources to help small business owners understand the Cyber Threat and be able to defend their network in the most cost-effective way possible.

We believe that 95% of Cyber Security and Cyber Resilience can be achieved through good systems administration and good processes, without all the expense of engaging cyber security experts.

Check out the show notes for this episode.

This episode looks at managing a Cyber Incident in your Small or Medium Sized Business. After listening to this episode, your will be better equipped to understand how a cyber incident response should go, what to look for and how to manage it. Even if you have an IT company to do incident response, this will help you work with them and ensure that they know what they are doing.

We discuss the PICERL methodology for incident response:

Preparation Identify Containment Eradication Recovery Lessons Learnt

Check out the free ACSC Essential 8 self assessment audit tool. After completing the audit, you will be have a bespoke action plan, based on your type of business and your current security measures to achieve the right ACSC Maturity Level for your business.

Cyber Security 4 Small Business is a set of resources to help small business owners understand the Cyber Threat and be able to defend their network in the most cost-effective way possible.

We believe that 95% of Cyber Security and Cyber Resilience can be achieved through good systems administration and good processes, without all the expense of engaging cyber security experts.

Check out the show notes for this episode.

A Cyber Incident can be an intimidating process for any business owner and management team. Sadly, Cyber Incidents, especially email attacks are increasing. This episode looks at Cyber Incident Response planning specifically from the point of view of a Business Owner. What are the steps you can use to make the process easier.

• We discuss the PICERL methodology. Preparation, Identification, Containment, Eradication, Recovery and Lessons Learnt.
• The most important part of the process is preparation. Without it, the rest of the process is a lot more difficult.

This podcast has a range of lessons for SMEs looking to prepare for a Cyber Incident and work towards making sure that the process is managed to the best of the ability of your company.

Have a listen and find out the steps you can take before an incident to prepare for a cyber incident.

Check out the free ACSC Essential 8 self assessment audit tool. After completing the audit, you will be have a bespoke action plan, based on your type of business and your current security measures to achieve the right ACSC Maturity Level for your business.

Cyber Security 4 Small Business is a set of resources to help small business owners understand the Cyber Threat and be able to defend their network in the most cost-effective way possible.

We believe that 95% of Cyber Security and Cyber Resilience can be achieved through good systems administration and good processes, without all the expense of engaging cyber security experts.

Check out the show notes for this episode.

This cyber security podcast discusses an email fraud attack on an Australian business that cost $190,000.

• A Business Email Compromise attack on a Mobius, an electrical contractor in Western Australia. They crafted emails to Inoteq, a contractor to Rio Tinto and $235,400 was paid into a hackers account ;
• Mobius took Inoteq to the District Court in Perth.
• What was the finding and why did the Court make it's ruling?

This podcast has a range of lessons for SMEs looking to protect their finances and looking at some of the legal aspects of this surprising court decision.

Check out the free ACSC Essential 8 self assessment audit tool. After completing the audit, you will be have a bespoke action plan, based on your type of business and your current security measures to achieve the right ACSC Maturity Level for your business.

Cyber Security 4 Small Business is a set of resources to help small business owners understand the Cyber Threat and be able to defend their network in the most cost-effective way possible.

We believe that 95% of Cyber Security and Cyber Resilience can be achieved through good systems administration and good processes, without all the expense of engaging cyber security experts.

Check out the show notes for this episode.

Credential Stuffing is a fairly common way that attackers can gain access to your network, email and even banking.

This cyber security podcast discusses:

• What is credential stuffing;
• How does it impact business networks; and
• How you can protect your business and your staff.

Check out the free ACSC Essential 8 self assessment audit tool. After completing the audit, you will be have a bespoke action plan, based on your type of business and your current security measures to achieve the right ACSC Maturity Level for your business.

Cyber Security 4 Small Business is a set of resources to help small business owners understand the Cyber Threat and be able to defend their network in the most cost-effective way possible.

We believe that 95% of Cyber Security and Cyber Resilience can be achieved through good systems administration and good processes, without all the expense of engaging cyber security experts.

Check out the show notes for this episode.

We discuss 2 free tools to help you understand your Cyber Security risk and how your Small or Medium sized business. Using these tools will highlight ways to improve security, many of which are free and easy to implement.

We discuss the Free ACSC Essential 8 self assessment tool and the Microsoft Secure Score - 2 great ways to understand your companies risk. Both of these tools are free and simple to use.

Check out the free ACSC Essential 8 self assessment audit tool. After completing the audit, you will be have a bespoke action plan, based on your type of business and your current security measures to achieve the right ACSC Maturity Level for your business.

Cyber Security 4 Small Business is a set of resources to help small business owners understand the Cyber Threat and be able to defend their network in the most cost-effective way possible.

We believe that 95% of Cyber Security and Cyber Resilience can be achieved through good systems administration and good processes, without all the expense of engaging cyber security experts.

Check out the show notes for this episode.

This episode looks at the Australian Cyber Security Essential 8 Checklist and discusses how it can be used by Small Businesses to improve their cyber resilience.

The ACSC Essential 8 is a key resource from the Federal Government that all small businesses should understand to and use to improve their cyber security.

Cyber Security 4 Small Business is a set of resources to help small business owners understand the Cyber Threat and be able to defend their network in the most cost-effective way possible.

We believe that 95% of Cyber Security and Cyber Resilience can be achieved through good systems administration and good processes, without all the expense of engaging cyber security experts.

Check out the show notes for this episode.

This episodes looks at the common mistakes people make with their passwords, best practices for passwords and how you can decrease the chances of a password breach in your small business.

Cyber Security 4 Small Business is a set of resources to help small business owners understand the Cyber Threat and be able to defend their network is the most cost effective way possible.

We believe that 95% of Cyber Security and Cyber Resilience can be achieved through good systems administration and good processes, without all the expense of engaging cyber security experts.

Check out the show notes for this episode.

Business Email Compromises were the most prevalent attacks we saw on Australian Small Businesses in 2022. We look at what they are and the steps you can take to protect your business and your bank account.

Cyber Security 4 Small Business is a set of resources to help small business owners understand the Cyber Threat and be able to defend their network is the most cost effective way possible.

We believe that 95% of Cyber Security and Cyber Resilience can be achieved through good systems administration and good processes, without all the expense of engaging cyber security experts.

Check out the show notes for this episode.