A  serious cyber-security threat that forced critical platforms offline is a timely warning for New Zealand businesses to prepare for what happens when digital systems are compromised, cyber response experts say.

Critical flaws in PHP, a technology used by nearly 70 per cent of the world’s websites, were exposed before fixes were ready.

In the hours following, millions of hacking attempts were reported as businesses scrambled to protect their systems.

For cyber resilience expert Wendy Bennett (Outfox) and crisis communications expert Jacky James (First Response), this incident reinforces that New Zealand businesses, no matter their size, cannot be complacent about their cyber security.

“In a cyber crisis, IT teams and business leaders are put under significant pressure as the situation evolves,” Bennett says.

“Having robust plans in place well before a crisis hits gives businesses the best chance of recovering quickly and minimising harm.

“But fixing the technical problem is only one part of the response.”

While the IT team works to protect systems and data, James says leadership has an equally important role.

“Protecting trust and reputation is often overlooked when the pressure is on.”

“Keeping stakeholders informed in the critical hours is vital for safeguarding trust and preventing long-term damage.

“The decisions you make, the questions you ask and the way you communicate will determine how well your organisation responds and recovers.

“Cyber security and crisis communication are different disciplines, but they need to work as one.”

Outfox and First Response have joined forces to bring The First 72 Hours, a practical cyber resilience and crisis communications workshop, to businesses across New Zealand.

Using plain-English guidance, real case studies – like PHP – and interactive exercises, the workshop will help business leaders understand what happens during a cyber crisis and teach them how to respond when the pressure is on.

“The PHP situation is the perfect example of how quickly cyber risks can snowball, and it reinforces how important it is for businesses to be ready before an incident happens,” James says.

“Cyber incidents are no longer a case of if, but when.

“Preparation can make all the difference to how well your organisation responds and recovers.”

The workshops will be held in Hamilton, Rotorua, Tauranga and Lower Hutt from 9–12 November.

Registrations are open to business owners, CEOs, GMs, directors and managers through https://firstresponsecyber.co.nz/toolkits/workshops/

Recent Posts

  • Stark rise in serious cyber incidents a wake-up call for NZ businesses

    24th June, 2026

  • Your reputation firewall needs more than legal and technical advice

    24th June, 2026

  • The missing piece in Cyber Security: what comes after

    24th June, 2026

  • The reputational risk hiding in everyday AI use

    24th June, 2026

Categories