Cyooda, Digital Forensics and Cybersecurity

Stay Ahead of Cyber Threats with Expert Insights

Practical cybersecurity guidance, incident response expertise, and industry intelligence for Australian law firms and businesses.

The Legal Cyber Brief — monthly cyber intelligence for law firm leaders. Threats, regulatory shifts, and practical tools from the field. No fluff.

CYOODA - Newsletter

Thoughts and articles by Cyooda

All

All
Cybersecurity
Detection Engineering
How To Guides
Ransomware Insights
Security Insights

IT provider data breach and independence

When Your IT Provider Is Part of the Incident

October 21, 2026

If your firm had a serious cyber incident tomorrow, who would investigate it, who would pay for that, and who would they report to? In most mid-sized firms the honest...

Payment Fraud and Business Email Compromise

The Invoice Was Real. The Bank Details Were Not

October 13, 2026

The invoice was genuine. The matter was genuine. The email came from the right firm, in the right thread, with the right signature block. Only the account number had changed....

How Far Back Can Your Firm Actually See?

September 28, 2026

There is one question I ask in a first meeting that changes the temperature of the room. If someone had been reading your partners' email since March, how far back...

Your Help Desk Is the Easiest Way Into Your Firm

July 21, 2026

Your Help Desk Is the Easiest Way Into Your Firm I'll tell you how a recent engagement actually went, because the result deserves to be uncomfortable. We were engaged to...

Cybersecurity news from around the world

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands

October 22, 2026

Google on Tuesday said it's rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social engineering...

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t

October 21, 2026

PHP2Shell: Critical Vulnerabilities Expose the Limits of Temporary Security Fixes Two critical vulnerabilities in PHP, the programming language underpinning millions of websites, have prompted urgent warnings from security researchers. Dubbed...

The MFA you have isn’t the MFA you think you have

September 30, 2026

Having MFA Enabled Doesn't Mean Your Accounts Are Secure Multi-factor authentication (MFA) has long been considered one of the most effective defences against account compromise. But not all MFA methods...

Ransomware gangs skip the CEO, head straight for the 40-something IT manager

August 10, 2026

Ransomware gangs are changing who they target. The most valuable account may no longer belong to the CEO or a domain administrator - it may belong to the manager who...

The Shift: A New Era of AI Regulation

July 17, 2026

Explore how recent US export controls on frontier AI models like Anthropic's Fable signal a new era of regulatory uncertainty. Learn how security leaders can build resilient AI strategies by...

NTP server that traveled back in time caused massive Aussie mobile outage

July 16, 2026

Telstra skipped a patch, didn't record changes, had no idea it was an accident waiting to happen What Happened During planned maintenance, a Telstra NTP server restarted with its clock...

[Aggregator] Downloaded image for imported item #75059

Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices

July 3, 2026

Google has significantly degraded NetNut, one of the biggest networks that turns home devices into rented relays for other people's traffic. Working with the FBI, Lumen, and others, Google's Threat...

[Aggregator] Downloaded image for imported item #75086

What the Numbers Say About FIFA 2026 Cyber Risk

June 30, 2026

The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been built, staged, and partially deployed....