Cyooda Security - Leading provider of cyber security services for law firms in Australia

Stay Ahead of Cyber Threats with Expert Insights

Practical cybersecurity guidance, incident response expertise, and industry intelligence for Australian law firms and businesses.

Get the 'Cybersecurity Loop' newsletter delivered to your inbox:

CYOODA - Newsletter

Thoughts and articles by Cyooda

All

All
Cybersecurity
Detection Engineering
How To Guides
Ransomware Insights
Security Insights

Ransomware Hits 118 Australian Businesses

118 Australian Businesses Hit by Ransomware in 2025 | What Leaders Must Know

December 16, 2025

According to data tracked by ransomware.live, 118 Australian organisations have already been publicly impacted by ransomware this year. The victims span almost every sector of the economy - airlines, telecommunications...

Australian Clinical Labs Case: Lessons in Cyber Response & Communication

October 24, 2025

The judgment in brief In this case, ACL acquired the assets of Medlab Pathology Pty Ltd on 19 December 2021. It assumed control of Medlab's IT systems, which over 223,000...

Business Email Compromise why you need AbnormalAI

Beyond the Gateway: Why Traditional Email Security Can’t Stop BEC Attacks Targeting M&A Deals and Trust Accounts

October 2, 2025

The email your conveyancing solicitor just received looks perfect. It's a continuation of an existing thread about a property settlement, references the correct property address, includes previous conversation history, and...

The Hidden Battlefield: Why Traditional EDR Leaves Your Identity Layer Exposed

October 2, 2025

Modern cybersecurity has a blind spot problem. Organisations invest heavily in Endpoint Detection and Response (EDR) solutions, believing they've fortified their defences. Yet attackers continue to move laterally through networks,...

Cybersecurity news from around the world

[Aggregator] Downloaded image for imported item #73388

Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild

December 13, 2025

Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its Safari web browser to address two security flaws that it said have been exploited in...

[Aggregator] Downloaded image for imported item #73315

Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work

December 12, 2025

The browser has become the main interface to GenAI for most enterprises: from web-based LLMs and copilots, to GenAI‑powered extensions and agentic browsers like ChatGPT Atlas. Employees are leveraging the...

[Aggregator] Downloaded image for imported item #73287

MITRE shares 2025’s top 25 most dangerous software weaknesses

December 12, 2025

MITRE has shared this year's top 25 list of the most dangerous software weaknesses behind over 39,000 security vulnerabilities disclosed between June 2024 and June 2025. The list was released...

[Aggregator] Downloaded image for imported item #69964

UK fines LastPass over 2022 data breach impacting 1.6 million users

December 12, 2025

The UK Information Commissioner's Office (ICO) fined the LastPass password management firm £1.2 million for failing to implement security measures that allowed an attacker to steal personal information and encrypted...

[Aggregator] Downloaded image for imported item #72462

MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants

November 28, 2025

Cybersecurity researchers have shed light on a cross-tenant blind spot that allows attackers to bypass Microsoft Defender for Office 365 protections via the guest access feature in Teams. "When users...

[Aggregator] Downloaded image for imported item #72460

OpenAI discloses API customer data breach via Mixpanel vendor hack

November 27, 2025

OpenAI is notifying some ChatGPT API customers that limited identifying information was exposed following a breach at its third-party analytics provider Mixpanel. Mixpanel offers event analytics that OpenAI uses to...

[Aggregator] Downloaded image for imported item #72220

ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access

November 24, 2025

A recently patched security flaw in Microsoft Windows Server Update Services (WSUS) has been exploited by threat actors to distribute malware known as ShadowPad. "The attacker targeted Windows Servers with...

[Aggregator] Downloaded image for imported item #71591

Google Sues China-Based Hackers Behind $1 Billion Lighthouse Phishing Platform

November 13, 2025

Google has filed a civil lawsuit in the U.S. District Court for the Southern District of New York (SDNY) against China-based hackers who are behind a massive Phishing-as-a-Service (PhaaS) platform...