Stay Ahead of Cyber Threats with Expert Insights
Practical cybersecurity guidance, incident response expertise, and industry intelligence for Australian law firms and businesses.
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders. Threats, regulatory shifts, and practical tools from the field. No fluff.
CYOODA - Newsletter
1,205 Breaches. A Record Year. And Your Sector Is a Fixture in the Top Five.
The privacy regulator just published the worst annual breach numbers since mandatory reporting began - and legal services made the most-affected list again. This fortnight: a record year the OAIC...
‘Months, Not Years’: The Five Eyes AI Warning No Law Firm Should Scroll Past.
Your next phishing email won't have a single typo - because a machine wrote it. This fortnight: an unprecedented Five Eyes warning that AI-powered attacks are close, a professional-services firm...
68 days. That’s how long attackers are hiding in Australian networks before anyone notices.
Your device management tool just became a weapon. This fortnight: Iran-linked hackers wipe 200,000 devices using Microsoft's own admin tools, an Australian healthcare software vendor hit by ransomware this week,...
Thoughts and articles by Cyooda
All
- All
- Cybersecurity
- Detection Engineering
- How To Guides
- Ransomware Insights
- Security Insights
When Your IT Provider Is Part of the Incident
If your firm had a serious cyber incident tomorrow, who would investigate it, who would pay for that, and who would they report to? In most mid-sized firms the honest...
The Invoice Was Real. The Bank Details Were Not
The invoice was genuine. The matter was genuine. The email came from the right firm, in the right thread, with the right signature block. Only the account number had changed....
How Far Back Can Your Firm Actually See?
There is one question I ask in a first meeting that changes the temperature of the room. If someone had been reading your partners' email since March, how far back...
Your Help Desk Is the Easiest Way Into Your Firm
Your Help Desk Is the Easiest Way Into Your Firm I'll tell you how a recent engagement actually went, because the result deserves to be uncomfortable. We were engaged to...
Cybersecurity news from around the world
![[Aggregator] Downloaded image for imported item #74767](https://cyooda.com/wp-content/uploads/bb-plugin/cache/Screenshot-2026-05-04-at-2.24.30-PM-1024x578-square-b828bd4b84581b861ff271093298743f-.png "[Aggregator] Downloaded image for imported item #74767")
Spring cleaning your browser
There's something so satisfying about a good spring cleaning: the kind where you open the windows, clear the clutter, and finally deal with the things you've been ignoring all winter...
![[Aggregator] Downloaded image for imported item #73388](https://cyooda.com/wp-content/uploads/bb-plugin/cache/apple-update-square-c4b79d4983770df9416215854e05d806-.webp "[Aggregator] Downloaded image for imported item #73388")
Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild
Apple on Friday released security updates for iOS, iPadOS, macOS, tvOS, watchOS, visionOS, and its Safari web browser to address two security flaws that it said have been exploited in...
![[Aggregator] Downloaded image for imported item #73315](https://cyooda.com/wp-content/uploads/bb-plugin/cache/ai-square-688edccd3afcaf4b934a7bd22fcd3b46-.webp "[Aggregator] Downloaded image for imported item #73315")
Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work
The browser has become the main interface to GenAI for most enterprises: from web-based LLMs and copilots, to GenAI‑powered extensions and agentic browsers like ChatGPT Atlas. Employees are leveraging the...
![[Aggregator] Downloaded image for imported item #73287](https://cyooda.com/wp-content/uploads/bb-plugin/cache/Bugs-1024x576-square-549cd4b0c83e8bbecebc7ba30d459003-.jpg "[Aggregator] Downloaded image for imported item #73287")
MITRE shares 2025’s top 25 most dangerous software weaknesses
MITRE has shared this year's top 25 list of the most dangerous software weaknesses behind over 39,000 security vulnerabilities disclosed between June 2024 and June 2025. The list was released...
![[Aggregator] Downloaded image for imported item #69964](https://cyooda.com/wp-content/uploads/bb-plugin/cache/LastPass-headpic-1024x576-square-ea707a72ed4991a6f4c760549ccef41a-.jpg "[Aggregator] Downloaded image for imported item #69964")
UK fines LastPass over 2022 data breach impacting 1.6 million users
The UK Information Commissioner's Office (ICO) fined the LastPass password management firm £1.2 million for failing to implement security measures that allowed an attacker to steal personal information and encrypted...
![[Aggregator] Downloaded image for imported item #72462](https://cyooda.com/wp-content/uploads/bb-plugin/cache/msteams-square-7efc9a029636400ef752f18f2409ee26-.webp "[Aggregator] Downloaded image for imported item #72462")
MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants
Cybersecurity researchers have shed light on a cross-tenant blind spot that allows attackers to bypass Microsoft Defender for Office 365 protections via the guest access feature in Teams. "When users...
![[Aggregator] Downloaded image for imported item #72460](https://cyooda.com/wp-content/uploads/bb-plugin/cache/OpenAI-1024x512-square-ad21dbb10e5f667d0872c60241c87ad1-.jpg "[Aggregator] Downloaded image for imported item #72460")
OpenAI discloses API customer data breach via Mixpanel vendor hack
OpenAI is notifying some ChatGPT API customers that limited identifying information was exposed following a breach at its third-party analytics provider Mixpanel. Mixpanel offers event analytics that OpenAI uses to...
![[Aggregator] Downloaded image for imported item #72220](https://cyooda.com/wp-content/uploads/bb-plugin/cache/windows-square-5c4f64bcb260331644dce41db4e35fd2-.webp "[Aggregator] Downloaded image for imported item #72220")
ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access
A recently patched security flaw in Microsoft Windows Server Update Services (WSUS) has been exploited by threat actors to distribute malware known as ShadowPad. "The attacker targeted Windows Servers with...
Lvl 17, Angel Place,
123 Pitt Street,
Sydney
NSW 2000
(02) 7230 1350
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders.