Stay Ahead of Cyber Threats with Expert Insights
Practical cybersecurity guidance, incident response expertise, and industry intelligence for Australian law firms and businesses.
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders. Threats, regulatory shifts, and practical tools from the field. No fluff.
CYOODA - Newsletter
1,205 Breaches. A Record Year. And Your Sector Is a Fixture in the Top Five.
The privacy regulator just published the worst annual breach numbers since mandatory reporting began - and legal services made the most-affected list again. This fortnight: a record year the OAIC...
‘Months, Not Years’: The Five Eyes AI Warning No Law Firm Should Scroll Past.
Your next phishing email won't have a single typo - because a machine wrote it. This fortnight: an unprecedented Five Eyes warning that AI-powered attacks are close, a professional-services firm...
68 days. That’s how long attackers are hiding in Australian networks before anyone notices.
Your device management tool just became a weapon. This fortnight: Iran-linked hackers wipe 200,000 devices using Microsoft's own admin tools, an Australian healthcare software vendor hit by ransomware this week,...
Thoughts and articles by Cyooda
All
- All
- Cybersecurity
- Detection Engineering
- How To Guides
- Ransomware Insights
- Security Insights
How Far Back Can Your Firm Actually See?
There is one question I ask in a first meeting that changes the temperature of the room. If someone had been reading your partners' email since March, how far back...
Your Help Desk Is the Easiest Way Into Your Firm
Your Help Desk Is the Easiest Way Into Your Firm I'll tell you how a recent engagement actually went, because the result deserves to be uncomfortable. We were engaged to...
AI Acceptable Use Policy for Law Firms: What It Should Say | Cyooda
Your firm already has an AI policy. You just didn't write it. Right now, in the absence of anything official, every member of your staff is making their own individual...
You Just Became a Data Target. AML Tranche 2 and the Security Bill Nobody Costed.
Since 1 July, your firm has been a reporting entity under the AML/CTF regime. If you're like most of the firms I talk to, the last six months have been...
Cybersecurity news from around the world
The Invoice Was Real. The Bank Details Were Not
The invoice was genuine. The matter was genuine. The email came from the right firm, in the right thread, with the right signature block. Only the account number had changed....
Ransomware gangs skip the CEO, head straight for the 40-something IT manager
Ransomware gangs are changing who they target. The most valuable account may no longer belong to the CEO or a domain administrator - it may belong to the manager who...
The Shift: A New Era of AI Regulation
Explore how recent US export controls on frontier AI models like Anthropic's Fable signal a new era of regulatory uncertainty. Learn how security leaders can build resilient AI strategies by...
NTP server that traveled back in time caused massive Aussie mobile outage
Telstra skipped a patch, didn't record changes, had no idea it was an accident waiting to happen What Happened During planned maintenance, a Telstra NTP server restarted with its clock...
![[Aggregator] Downloaded image for imported item #75059](data:image/svg+xml;base64,PHN2ZyB2aWV3Qm94PSIwIDAgNDcwIDQ3MCIgd2lkdGg9IjQ3MCIgaGVpZ2h0PSI0NzAiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PC9zdmc+ "[Aggregator] Downloaded image for imported item #75059")
Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices
Google has significantly degraded NetNut, one of the biggest networks that turns home devices into rented relays for other people's traffic. Working with the FBI, Lumen, and others, Google's Threat...
![[Aggregator] Downloaded image for imported item #75086](data:image/svg+xml;base64,PHN2ZyB2aWV3Qm94PSIwIDAgMzgwIDM4MCIgd2lkdGg9IjM4MCIgaGVpZ2h0PSIzODAiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PC9zdmc+ "[Aggregator] Downloaded image for imported item #75086")
What the Numbers Say About FIFA 2026 Cyber Risk
The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been built, staged, and partially deployed....
![[Aggregator] Downloaded image for imported item #74767](data:image/svg+xml;base64,PHN2ZyB2aWV3Qm94PSIwIDAgNTc4IDU3OCIgd2lkdGg9IjU3OCIgaGVpZ2h0PSI1NzgiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PC9zdmc+ "[Aggregator] Downloaded image for imported item #74767")
Spring cleaning your browser
There's something so satisfying about a good spring cleaning: the kind where you open the windows, clear the clutter, and finally deal with the things you've been ignoring all winter...
![[Aggregator] Downloaded image for imported item #73388](data:image/svg+xml;base64,PHN2ZyB2aWV3Qm94PSIwIDAgNDEzIDQxMyIgd2lkdGg9IjQxMyIgaGVpZ2h0PSI0MTMiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PC9zdmc+ "[Aggregator] Downloaded image for imported item #73388")
Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild
Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its Safari web browser to address two security flaws that it said have been exploited in...
Lvl 17, Angel Place,
123 Pitt Street,
Sydney
NSW 2000
(02) 7230 1350
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders.