Stay Ahead of Cyber Threats with Expert Insights
Practical cybersecurity guidance, incident response expertise, and industry intelligence for Australian law firms and businesses.
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders. Threats, regulatory shifts, and practical tools from the field. No fluff.
CYOODA - Newsletter
1,205 Breaches. A Record Year. And Your Sector Is a Fixture in the Top Five.
The privacy regulator just published the worst annual breach numbers since mandatory reporting began - and legal services made the most-affected list again. This fortnight: a record year the OAIC...
‘Months, Not Years’: The Five Eyes AI Warning No Law Firm Should Scroll Past.
Your next phishing email won't have a single typo - because a machine wrote it. This fortnight: an unprecedented Five Eyes warning that AI-powered attacks are close, a professional-services firm...
68 days. That’s how long attackers are hiding in Australian networks before anyone notices.
Your device management tool just became a weapon. This fortnight: Iran-linked hackers wipe 200,000 devices using Microsoft's own admin tools, an Australian healthcare software vendor hit by ransomware this week,...
Thoughts and articles by Cyooda
All
- All
- Cybersecurity
- Detection Engineering
- How To Guides
- Ransomware Insights
- Security Insights
Your Help Desk Is the Easiest Way Into Your Firm
Your Help Desk Is the Easiest Way Into Your Firm I'll tell you how a recent engagement actually went, because the result deserves to be uncomfortable. We were engaged to...
AI Acceptable Use Policy for Law Firms: What It Should Say | Cyooda
Your firm already has an AI policy. You just didn't write it. Right now, in the absence of anything official, every member of your staff is making their own individual...
You Just Became a Data Target. AML Tranche 2 and the Security Bill Nobody Costed.
Since 1 July, your firm has been a reporting entity under the AML/CTF regime. If you're like most of the firms I talk to, the last six months have been...
The Email That Never Arrived: Inside a Real Business Email Compromise
The picture above is thirty years old, yet its message still hold true today. Our legal and business systems are built on the assumption that we know who we're dealing...
Cybersecurity news from around the world
The Shift: A New Era of AI Regulation
Explore how recent US export controls on frontier AI models like Anthropic's Fable signal a new era of regulatory uncertainty. Learn how security leaders can build resilient AI strategies by...
NTP server that traveled back in time caused massive Aussie mobile outage
Telstra skipped a patch, didn't record changes, had no idea it was an accident waiting to happen What Happened During planned maintenance, a Telstra NTP server restarted with its clock...
![[Aggregator] Downloaded image for imported item #75059](data:image/svg+xml;base64,PHN2ZyB2aWV3Qm94PSIwIDAgNDcwIDQ3MCIgd2lkdGg9IjQ3MCIgaGVpZ2h0PSI0NzAiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PC9zdmc+ "[Aggregator] Downloaded image for imported item #75059")
Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices
Google has significantly degraded NetNut, one of the biggest networks that turns home devices into rented relays for other people's traffic. Working with the FBI, Lumen, and others, Google's Threat...
![[Aggregator] Downloaded image for imported item #75086](data:image/svg+xml;base64,PHN2ZyB2aWV3Qm94PSIwIDAgMzgwIDM4MCIgd2lkdGg9IjM4MCIgaGVpZ2h0PSIzODAiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PC9zdmc+ "[Aggregator] Downloaded image for imported item #75086")
What the Numbers Say About FIFA 2026 Cyber Risk
The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been built, staged, and partially deployed....
![[Aggregator] Downloaded image for imported item #74767](data:image/svg+xml;base64,PHN2ZyB2aWV3Qm94PSIwIDAgNTc4IDU3OCIgd2lkdGg9IjU3OCIgaGVpZ2h0PSI1NzgiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PC9zdmc+ "[Aggregator] Downloaded image for imported item #74767")
Spring cleaning your browser
There's something so satisfying about a good spring cleaning: the kind where you open the windows, clear the clutter, and finally deal with the things you've been ignoring all winter...
![[Aggregator] Downloaded image for imported item #73388](data:image/svg+xml;base64,PHN2ZyB2aWV3Qm94PSIwIDAgNDEzIDQxMyIgd2lkdGg9IjQxMyIgaGVpZ2h0PSI0MTMiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PC9zdmc+ "[Aggregator] Downloaded image for imported item #73388")
Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild
Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its Safari web browser to address two security flaws that it said have been exploited in...
Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work
The browser has become the main interface to GenAI for most enterprises: from web-based LLMs and copilots, to GenAI‑powered extensions and agentic browsers like ChatGPT Atlas. Employees are leveraging the...
MITRE shares 2025’s top 25 most dangerous software weaknesses
MITRE has shared this year's top 25 list of the most dangerous software weaknesses behind over 39,000 security vulnerabilities disclosed between June 2024 and June 2025. The list was released...
Lvl 17, Angel Place,
123 Pitt Street,
Sydney
NSW 2000
(02) 7230 1350
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders.