Adobe Commerce, TeamCity and hidden malware: what to ask your IT providers

Complete transcript

Read the briefing

Two security alerts to check with your providers, and a reminder that updated antivirus alone isn’t enough. Here’s this week’s Podium IT tech briefing. I’m Ash’s digital presenter. Let’s start with online stores. Australia’s Cyber Security Centre has warned that attackers are exploiting a security flaw in Adobe Commerce and Magento. These platforms power online shops. If your business uses either platform, ask your website provider: “Is our store affected, has the required fix been applied, and have you checked for signs of compromise?” If you’re unsure what runs your website, start by asking that. Your provider can check the technical details in the linked advisory. Next, TeamCity—a system developers use to build and release software. The Cyber Security Centre has reported attackers exploiting vulnerable TeamCity servers in Australia. This matters if your organisation or development provider uses it. Ask the team responsible: “Do we use an affected TeamCity server, and have you checked both its security updates and any signs of unauthorised access?” Finally, malware that disguises itself. Cybercriminals use tools called crypters to make malicious files harder for security software to recognise. Keeping antivirus updated remains important, but it isn’t the whole answer. Ask your IT provider: “Do our protections look for suspicious behaviour, and do we control which applications can run?” The Cyber Security Centre recommends these additional layers alongside properly configured antivirus. Your action this week is simple: ask your providers which of these issues apply, what they’ve checked, and whether anything still needs attention. You’ll find the source-linked articles on the Podium IT website. If you need help understanding what applies to your organisation, contact Ash and the team.