AI & Automation
6 min readNew
Copilot oversharing: fix SharePoint permissions before you roll out
Microsoft 365 Copilot shows people files they could already open but never knew about. How to find overshared SharePoint sites and fix them first.
Insights
Practical guides on managed IT, Microsoft 365, cyber security and AI, from the Geidi team.
Latest insights
Showing all 27 articles
- AI & Automation
6 min readNew
Copilot oversharing: fix SharePoint permissions before you roll out
Microsoft 365 Copilot shows people files they could already open but never knew about. How to find overshared SharePoint sites and fix them first.
- Cyber Security
5 min read
SharePoint ToolShell (CVE-2025-53770): patch, rotate keys, then hunt
How the July 2025 ToolShell attacks on on-premises SharePoint worked, who is affected, and why patching alone does not remove the attacker.
- Cyber Security
7 min read
Hit by a cyber attack in WA? Who to call and what to do first
A first-hours guide for Perth and WA organisations hit by ransomware, a hacked mailbox or a scam: what to do first, and who to report it to.
- Cyber Security
6 min read
Infostealers and stolen session cookies: why MFA didn't stop it
How infostealer malware such as Lumma steals browser passwords and session cookies, why MFA doesn't stop a stolen session, and the settings that do.
- AI & Automation
6 min read
Using ChatGPT at work: Business and Enterprise plans and your data
How ChatGPT Business and Enterprise handle your data compared with personal accounts: training, retention, connected apps, sharing and admin settings.
- Cyber Security
5 min read
Node2Shell: the Node.js Brotli flaw and how to patch it
A high-severity flaw in Node.js's Brotli decoder (CVE-2026-111497) can let crafted compressed data run code. Who is exposed and which versions fix it.
- Cyber Security
8 min read
WA's new privacy law: what the PRIS Act means for your business
How WA's Privacy and Responsible Information Sharing Act 2024 reaches businesses that work for WA government, what has started, and what to do now.
- Cyber Security
6 min read
Device code phishing: how a real Microsoft sign-in gives access away
How device code phishing tricks staff into approving an attacker's Microsoft 365 sign-in on the real Microsoft page, and the policy that blocks it.
- Cyber Security
6 min read
PHP2Shell: what the critical PHP flaws mean for your website
PHP2Shell is two critical PHP flaws that let attackers run code on web servers without logging in. The versions that fix them and what to check now.
- AI & Automation
6 min read
Using Claude at work: Team and Enterprise plans and your data
What happens to your business data in Anthropic's Claude Team and Enterprise plans: training, retention, single sign-on, connectors and admin controls.
- Cyber Security
6 min read
ConnectWise Cloud Backup (SkyKick) breach: what to check in M365
A stolen ConnectWise Cloud Backup (SkyKick) credential was used to sign in to Microsoft 365 tenants. How it worked, what to disable and what to check.
- Cyber Security
7 min read
The WA Government Cyber Security Policy: what suppliers need to know
What the 2024 WA Government Cyber Security Policy asks of agencies and their suppliers, from the Essential Eight to 24 hour incident reporting.
- Managed IT & Support
5 min read
Windows Server 2016 end of support: 12 January 2027
Windows Server 2016 stops getting security updates on 12 January 2027. What that means, your Extended Security Update options and how to plan the upgrade.
- AI & Automation
5 min read
Copilot Chat or the paid Microsoft Copilot licence: what's different?
The free Copilot Chat in Microsoft 365 versus the paid Copilot licence: what each can see, how your data is protected, agents, and when paying makes sense.
- Managed IT & Support
8 min read
How to choose a managed IT provider in Perth
Comparing managed IT service providers in Perth or regional WA? The questions to ask on service desk hours, onsite support, admin accounts and exit terms.
- Cyber Security
7 min read
FortiGate vulnerabilities: what to patch and what to check
The FortiGate and FortiOS flaws attackers have used since 2024, the versions that fix them, and the checks to run if your firewall was exposed.
- AI & Automation
6 min read
ChatGPT, Claude or Microsoft Copilot: which one suits your business?
A fair comparison of ChatGPT, Claude and Microsoft Copilot business plans: data use, training, admin controls, and where each one fits best.
- Cyber Security
6 min read
Citrix Bleed 2 (CVE-2025-5777) and the NetScaler flaws that followed
What Citrix Bleed 2 leaked, which NetScaler builds fix it and the 2025 and 2026 flaws after it, and why you must kill sessions after patching.
- Managed IT & Support
6 min read
Windows 10 end of support: what to do a year later
Windows 10 support ended in October 2025. What Extended Security Updates cover and cost, what unsupported means, and whether to upgrade or replace.
- Cyber Security
5 min read
Business email compromise and fake invoice fraud in Australia
How changed bank details and fake invoice emails trick Australian businesses into paying criminals, and the checks that stop the money leaving.
- Cyber Security
8 min read
ClickFix: the fake "verify you are human" page that installs malware
How ClickFix fake CAPTCHA pages trick staff into running malware themselves, and the Windows and Microsoft 365 settings that stop it.
- Cloud & Business Systems
5 min read
SPF, DKIM and DMARC explained, and how to get to reject safely
What SPF, DKIM and DMARC do, why Gmail, Yahoo and Outlook now insist on them, and a safe path to a DMARC reject policy in Microsoft 365.
- Cyber Security
6 min read
The Essential Eight maturity levels, in plain English
What the Essential Eight is, what maturity levels zero to three mean, which level suits your organisation, and a practical way to reach level one.
- Managed IT & Support
5 min read
Backups that survive ransomware: immutable, offline and tested
Ransomware goes after backups first. How 3-2-1-1-0, immutable copies, separate credentials and restore tests keep yours usable, and the Essential Eight link.
- AI & Automation
5 min read
Is your business ready for AI? Four questions to ask first
Before buying AI tools, check four things: your information, your permissions, the process you want to improve and who owns the result.
- Cloud & Business Systems
7 min read
Microsoft 365 licensing, explained for growing businesses
Basic, Standard, Premium, E3 or E5? Microsoft 365 and Office 365 licensing in plain English, the July 2026 price changes, and where Copilot fits.
- Cyber Security
6 min read
Notifiable data breaches: what Australian businesses must do
Who the Notifiable Data Breaches scheme covers, what counts as an eligible data breach, the 30 day assessment, and the Privacy Act changes to know.
One partner for the whole environment.
Tell us about your existing IT. We would be pleased to review your current system and give you an overview as to how Geidi may be able to deliver and enhance your IT operations.