PCFIXIT Business I.T Solutions

19/06/2026

A massive data breach has affected over 13 million accounts at an edtech giant. It is a stark reminder that even trusted educational platforms are targets. When was the last time you changed your passwords or enabled two-factor authentication?

Education publishing giant McGraw-Hill has confirmed a data breach following an extortion attempt, with more than 100GB of stolen data now publicly distributed online, exposing the personal information of approximately 13.5 million users.

18/06/2026

In May 2026, a cyber incident involving Resly (Resly Pty Ltd), a provider of online booking and property management software for the accommodation sector, led accommodation providers to notify guests of a potential exposure of payment card information.

Guest notifications indicate that compromised user accounts may have been used to gain unauthorised access to cardholder data stored within the platform.

The incident underscores the ongoing risks associated with phishing attacks, credential compromise, and unauthorised access to cloud-based business systems.

If you have received a notification from an accommodation provider regarding this incident, review your account activity carefully and contact your financial institution immediately if you identify any suspicious transactions.

07/05/2026

Security Advisory - Canvas Platform Incident

Important Information for Parents & Carers

The Queensland Department of Education is aware of recent media reports regarding a global security incident involving the Canvas platform provided by Instructure, which is used by educational institutions worldwide.

The department uses Canvas for staff and student training and is currently working closely with Instructure and the Queensland Government Cyber Security Unit (QGCSU) in response to this matter.

At this stage, the department has advised that staff and students’ financial information and passwords are not believed to be at risk.

As with any widely publicised cyber security incident, there is an increased risk of phishing attempts and scam activity. Parents, carers, and students are encouraged to remain vigilant and continue following safe cyber security practices:

- Be cautious of phishing emails, text messages, or phone calls requesting personal information.
- Avoid clicking suspicious links or downloading unexpected attachments.
- Monitor student accounts for unusual activity and contact your school if you have concerns.
- Do not share personal information unless you are certain the request is legitimate.
- Ensure devices are kept updated with the latest security and software patches.

More information: https://marketing.pcfixit.com.au/sp/a222a0860e2

07/05/2026

Is the new M5 MacBook Air the ultimate midrange laptop? It just got a serious processing boost and enhanced wireless connectivity for a starting price of $1,099. Will this finally convince you to ditch your old laptop?

The 2026 MacBook Air doesn’t reinvent the design—instead, Apple's boosts in CPU power and storage will give this old favorite a new edge.

06/05/2026

Using Google Chrome? It's time to click that "Update" button! Two new zero-day vulnerabilities are being actively exploited in the wild right now. Staying secure is just a quick browser restart away.

Google has released emergency security updates to patch two high-severity Chrome vulnerabilities exploited in zero-day attacks.

05/05/2026

As a business owner, do you actually know what your staff are doing on their work devices?

- Are personal phones being linked to company PCs?
- Are messages syncing across devices?
- Are authentication codes showing up on endpoints you don’t control?

With tools like Microsoft Phone Link (and similar setups), this is more common than most realise.

And with recent malware activity, it’s now a real risk.

If a PC is compromised,
SMS codes and MFA logins can be exposed through that connection.

No phone breach required.

This isn’t just an IT issue.
It’s a business risk and a control gap.

If you’ve got a team using Microsoft 365 and haven’t reviewed this recently, there’s a high chance something’s been missed.

Comment CHECK or message us — our team will review your setup and tell you exactly where you stand.

05/05/2026

Heads up, business owners! A critical Microsoft SharePoint flaw is currently being exploited by attackers to run remote code. Don't wait around; make sure your IT team has applied the latest patches! Read the full security alert below.

A critical Microsoft SharePoint vulnerability patched in January is now being exploited in attacks, the Cybersecurity and Infrastructure Security Agency (CISA) warned.

05/05/2026

Don’t treat Microsoft OneDrive or Google Drive as a guaranteed backup.

Many people assume that if their network gets hit by ransomware, they can just log into their cloud account and restore an older version of their files.

The problem is that modern ransomware can sync encrypted files to your cloud account, overwriting clean versions and potentially targeting version history or recycle bin contents before you even realize you have been attacked.

When malicious software reaches a synced laptop, the damage does not stay on that single device.

Because your cloud drive is designed to sync changes instantly, the system automatically uploads those locked, encrypted files straight into your company cloud.

It directly overwrites your clean data.

Cloud storage connects your data, without isolating it.

To have a higher level of security, you need a separate backup system that is completely offline or locked down.

You need an isolated copy of your files that a compromised network account cannot reach, alter, or delete.

04/05/2026

Mobile photographers, rejoice! The iPhone 18 Pro is rumored to get an exclusive telephoto camera upgrade with a larger aperture for stunning low-light shots. Is a better camera your main reason for upgrading?

iPhone 18 Pro and Pro Max are coming, and rumors indicate they’ll get at least one exclusive camera upgrade: a larger aperture Telephoto.

03/05/2026

Your web browser might be the biggest security blind spot in your company! A new 2026 report reveals how AI tools and SaaS apps are turning browsers into prime targets. Is your business data truly protected?

The browser is becoming the operating system for modern work, yet many enterprises still treat it as an extension of network or endpoint security. Keep Aware's 2026 State of Browser Security Report shows 41% of employees used AI web tools while browser-based phishing, extensions, and social engineer...