This post breaks down a real phishing attempt that targeted ITP NZ members using a spoofed display name. It wasn’t a compromised account, but a crafted message designed to exploit familiarity and provoke a reply. By unpacking how this tactic works and what subtle signals gave it away, we hope to sharpen member awareness, encourage better reporting practices, and help readers think like an adversary. If you receive something suspicious, please send it as an attachment to info@itp.nz so the headers can be analysed properly. 

CERT NZ is gone — but as cyber threats grow, we must ensure the public still has somewhere clear, trusted, and user-friendly to turn to for help.

A exploit of server editions of Microsoft SharePoint has raced around the world, with hundreds of breaches detected and IT teams scrambling to apply patches.

Starlink’s military approval in NZ raises alarms: is relying on Elon Musk’s satellite network, with its Palantir and DOGE connections, worth the cybersecurity and privacy risks?

Senior White House officials were wrong to share details of highly sensitive military operations via the signal app, but an academic says there’s a lot to like about Signal’s security features.

If Temu transitions into a more conventional marketplace, how will its low-cost offerings stack up against Amazon? Temu has disrupted the online retail landscape, but can its aggressive pricing strategy stand the test of time?