Don't Be A Sitting Duck Podcast

Leigh Kefford

Cybercriminals are evolving—are you keeping up? Don’t Be A Sitting Duck is the podcast for business leaders and professionals who want to stay one step ahead of the latest cyber threats. In each bite-sized episode, we dive into real-world cyber breaches, phishing scams, and ransomware attacks, sharing actionable advice to help you protect your business. Looking for more insights and resources? Visit sittingduck.com.au to explore educational content designed to help you navigate today’s complex cybersecurity landscape. If you’re ready to embrace proactive protection and outsmart cyber threats, this podcast is for you. New episodes every day —subscribe now!

  1. 1 DAY AGO

    Cyberattacks on Pharmacy, Brewer & UK Nursery

    In this episode of the Don’t Be A Sitting Duck Podcast, Leigh Kefford unpacks three alarming cyber incidents that reveal just how far attackers are willing to go: Toowoomba Pharmacy Ransomware Attack – The Friendly Society Dispensary hit by the DragonForce group, with nearly 36GB of sensitive staff and patient data stolen.Asahi Group Cyberattack in Japan – A global beverage giant forced to halt factory operations when IT systems collapsed, disrupting orders, shipping, and production.UK Nursery Chain Hack – Kido nurseries breached by hackers claiming to hold data on more than 8,000 children, including names, photos, and safeguarding reports. These cases show a disturbing reality: no industry is off-limits, and cybercriminals are increasingly targeting healthcare, manufacturing, and even childcare. Leigh explains how the attacks unfolded, why they matter, and—most importantly—what actions your business can take to avoid becoming the next headline. This podcast was produced by National PC, delivering expert cyber security services in Townsville and Cairns through our Empower Managed IT solutions—secure, reliable, and built for North Queensland businesses. View Shownotes and full transcript here: https://sittingduck.com.au/podcast/cyberattacks-pharmacy-brewer-uk-nursery/

    5 min

  2. 1 SEPT

    Chinese APT Threats Targeting Australian Critical Infrastructure

    In this episode, we unpack the alarming rise of state‑sponsored Chinese cyber actors compromising critical infrastructure—from backbone routers to military and government networks. You'll learn how these Advanced Persistent Threat groups maintain stealthy, long‑term access, and why this matters for national and business security. We break down how the attacks happen, explain the global coordination behind recent advisories, and offer smart, actionable steps you can take now to protect your organisation. This podcast was produced by National PC, delivering expert cyber security services in Townsville and Cairns through our Empower Managed IT solutions—secure, reliable, and built for North Queensland businesses. View Shownotes and full transcript here: https://sittingduck.com.au/podcast/chinese-state%e2%80%91sponsored-cyber-threat/

    6 min

  3. 1 SEPT

    Microsoft 365 Calendar Phishing: Don’t Let Invites Fool You

    This episode uncovers a stealthy cyber‑attack slipping through inbox filters: Microsoft 365 calendar phishing. Scammers send fake billing alerts—like “Payment Failed” or “Account Suspended”—directly to your calendar. Without clicking anything, the threat arrives. We explain how they exploit default invite settings, why deleting or responding can put you on their radar, and most importantly, how you and your team can defend against it. You’ll learn actionable steps: ignore suspicious invites, use inbox tools wisely, verify via official channels, and empower your business with layered protection. This podcast was produced by National PC, delivering expert cyber security services in Townsville and Cairns through our Empower Managed IT solutions—secure, reliable, and built for North Queensland businesses.

    5 min

  4. 1 AUG

    FileFix Attack: Clipboard‑Based Threat Every Business Must Know

    In this episode, we dig into the newly discovered FileFix attack—a clever and stealthy cyber trick that exploits how people use their clipboard. No malware. No download. Just voice‑less manipulation of Windows Explorer and the clipboard to execute hidden PowerShell commands. We’ll break down how it works, why it’s so dangerous, and what businesses should do today to stay protected.Click here for full Transcript, shownotes and resources This podcast was produced by National PC, delivering expert cyber security services in Townsville and Cairns through our Empower Managed IT solutions—secure, reliable, and built for North Queensland businesses.

    3 min
  5. Qantas Data Breach: Customer Info Leaked via Vendor

    2 JUL

    Qantas Data Breach: Customer Info Leaked via Vendor

    Qantas has joined the long list of major companies hit by cybercrime — this time, through a third-party contact centre platform. In this special Don’t Be A Sitting Duck episode, Leigh Kefford unpacks how customer data was leaked, what it means for businesses, and why vendor risk can no longer be ignored. What You’ll Learn: Which customer details were compromisedWhy third-party platforms are your biggest hidden riskSteps to audit your vendors and protect your businessWhat cyber insurers now expect as minimum standards

    4 min
  6. Ransomware Realities: What You Need to Know

    1 JUL

    Ransomware Realities: What You Need to Know

    Ransomware is more dangerous — and more accessible — than ever before. In this episode of Don’t Be A Sitting Duck, Leigh Kefford breaks down what’s really happening behind the scenes, how local businesses are being impacted, and the 5 non-negotiable actions your business must take to stay protected. In This Episode: Why ransomware is exploding in 2025The biggest risks for regional businessesHow phishing, patching, and backups can make or break your responseWhat every business needs to qualify for cyber insuranceThe #1 tool to assess your risk — for free Key Takeaways: Most ransomware attacks are preventable with the right systems.Employee awareness is as important as firewalls.Recovery depends on preparation — not luck. This podcast was produced by National PC, delivering expert cyber security services in Townsville and Cairns through our Empower Managed IT solutions—secure, reliable, and built for North Queensland businesses. View Shownotes and full transcript here: https://sittingduck.com.au/podcast/ransomware-realities-what-every-business-must-know/

    3 min
  7. CPS 234: What It Means for Your Business in 2025

    6 JUN

    CPS 234: What It Means for Your Business in 2025

    Is your business really ready for a cyberattack? If you’re in banking, insurance, or superannuation — APRA’s CPS 234 isn’t just a suggestion, it’s mandatory. In this extended episode, Leigh Kefford unpacks the what, why, and how of CPS 234 — Australia’s leading information security standard for regulated financial entities. But even if you’re not regulated, there’s a lot to learn here. What CPS 234 requires from boards, management, and ITWhy third-party accountability still lands on your shouldersWhat actions your business can take today — even as an SMEWhy this isn’t just about compliance — it’s about survivalGet the full show notes and resources at ⁠sittingduck.com.auThis podcast was produced by ⁠National PC⁠, delivering expert cyber security services in ⁠Townsville ⁠and ⁠Cairns ⁠through our ⁠Empower Managed IT⁠ solutions—secure, reliable, and built for North Queensland businesses.

    6 min
  8. Ransomware Payment Laws Now Mandatory: What You Must Report

    5 JUN

    Ransomware Payment Laws Now Mandatory: What You Must Report

    From 30 May 2025, Australian businesses earning over $3 million per year must report any ransomware or cyber extortion payments to the government within 72 hours. In this episode, Leigh explores: What qualifies as a reportable ransomware or cyber extortion payment Who needs to report and how to calculate turnover thresholds What’s included in the 72-hour reporting requirement Why these reports matter for Australia’s national cyber defence How to prepare your business now before penalties kick in 🎯 Book your free Empower Systems Assessment at ⁠nationalpc.com.au/empower⁠ 🎧 Get the audiobook ⁠Sitting Duck - The Phone Call You Don’t Want to Receive now⁠ on Spotify. This podcast was produced by ⁠⁠National PC⁠⁠, delivering expert ⁠⁠cyber security services⁠⁠ in ⁠⁠Townsville ⁠⁠and ⁠⁠Cairns⁠ ⁠through our ⁠⁠Empower Managed IT⁠⁠ solutions—secure, reliable, and built for North Queensland businesses.

    7 min
See All (38)

About

Cybercriminals are evolving—are you keeping up? Don’t Be A Sitting Duck is the podcast for business leaders and professionals who want to stay one step ahead of the latest cyber threats. In each bite-sized episode, we dive into real-world cyber breaches, phishing scams, and ransomware attacks, sharing actionable advice to help you protect your business. Looking for more insights and resources? Visit sittingduck.com.au to explore educational content designed to help you navigate today’s complex cybersecurity landscape. If you’re ready to embrace proactive protection and outsmart cyber threats, this podcast is for you. New episodes every day —subscribe now!

Information