Stay Ahead of Cyber Threats with Expert Insights
Practical cybersecurity guidance, incident response expertise, and industry intelligence for Australian law firms and businesses.
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders. Threats, regulatory shifts, and practical tools from the field. No fluff.
CYOODA - Newsletter
1,205 Breaches. A Record Year. And Your Sector Is a Fixture in the Top Five.
The privacy regulator just published the worst annual breach numbers since mandatory reporting began - and legal services made the most-affected list again. This fortnight: a record year the OAIC...
‘Months, Not Years’: The Five Eyes AI Warning No Law Firm Should Scroll Past.
Your next phishing email won't have a single typo - because a machine wrote it. This fortnight: an unprecedented Five Eyes warning that AI-powered attacks are close, a professional-services firm...
68 days. That’s how long attackers are hiding in Australian networks before anyone notices.
Your device management tool just became a weapon. This fortnight: Iran-linked hackers wipe 200,000 devices using Microsoft's own admin tools, an Australian healthcare software vendor hit by ransomware this week,...
Thoughts and articles by Cyooda
All
- All
- Cybersecurity
- Detection Engineering
- How To Guides
- Ransomware Insights
- Security Insights
Your Help Desk Is the Easiest Way Into Your Firm
Your Help Desk Is the Easiest Way Into Your Firm I'll tell you how a recent engagement actually went, because the result deserves to be uncomfortable. We were engaged to...
AI Acceptable Use Policy for Law Firms: What It Should Say | Cyooda
Your firm already has an AI policy. You just didn't write it. Right now, in the absence of anything official, every member of your staff is making their own individual...
You Just Became a Data Target. AML Tranche 2 and the Security Bill Nobody Costed.
Since 1 July, your firm has been a reporting entity under the AML/CTF regime. If you're like most of the firms I talk to, the last six months have been...
The Email That Never Arrived: Inside a Real Business Email Compromise
The picture above is thirty years old, yet its message still hold true today. Our legal and business systems are built on the assumption that we know who we're dealing...
Cybersecurity news from around the world
![[Aggregator] Downloaded image for imported item #70474](https://cyooda.com/wp-content/uploads/bb-plugin/cache/AWS-1024x576-square-997fae0246c9e465a43d9589f1106768-.jpg "[Aggregator] Downloaded image for imported item #70474")
Amazon: This week’s AWS outage caused by major DNS failure
Amazon says a major DNS failure was behind a massive AWS (Amazon Web Services) outage that took down many websites and online services on Monday. As BleepinComputer reported earlier this...
![[Aggregator] Downloaded image for imported item #69837](https://cyooda.com/wp-content/uploads/bb-plugin/cache/oracle-flaw-hack-square-24a7428e206624b93d61f35e697a2332-.webp "[Aggregator] Downloaded image for imported item #69837")
New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login
Oracle on Saturday issued a security alert warning of a fresh security flaw impacting its E-Business Suite that it said could allow unauthorized access to sensitive data. The vulnerability, tracked...
![[Aggregator] Downloaded image for imported item #69827](https://cyooda.com/wp-content/uploads/bb-plugin/cache/Velociraptor-DFIR-square-6d2baabdeee1f9b5eba55fa8f3294c75-.webp "[Aggregator] Downloaded image for imported item #69827")
Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks
Threat actors are abusing Velociraptor, an open-source digital forensics and incident response (DFIR) tool, in connection with ransomware attacks likely orchestrated by Storm-2603 (aka CL-CRI-1040 or Gold Salem), which is...
![[Aggregator] Downloaded image for imported item #66768](https://cyooda.com/wp-content/uploads/bb-plugin/cache/Apple_logo-1024x576-square-708e675b36ba12d630d8252a02c41a8c-.jpg "[Aggregator] Downloaded image for imported item #66768"){kind=logo}
Apple now offers $2 million for zero-click RCE vulnerabilities
Apple is announcing a major expansion and redesign of its bug bounty program, doubling maximum payouts, adding new research categories, and introducing a more transparent reward structure. Since the program launched in...
![[Aggregator] Downloaded image for imported item #69756](https://cyooda.com/wp-content/uploads/bb-plugin/cache/Family_Stock-deepfake-creation-shutterstock-1024x576-square-729005ac8c4af651883b45fd93e6535d-.jpg "[Aggregator] Downloaded image for imported item #69756")
Deepfake Awareness High at Orgs, But Cyber Defenses Badly Lag
AI-augmented deepfakes are becoming more and more common in cyberattacks on businesses and government agencies, and most organizations are aware of the danger. However, there's a preparation paradox at work:...
![[Aggregator] Downloaded image for imported item #68610](https://cyooda.com/wp-content/uploads/bb-plugin/cache/vegas-casino-1024x576-square-a68618b7999b9fd6724664d687d19436-.jpg "[Aggregator] Downloaded image for imported item #68610")
Boyd Gaming discloses data breach after suffering a cyberattack
US gaming and casino operator Boyd Gaming Corporation disclosed it suffered a breach after threat actors gained access to its systems and stole data, including employee information and data belonging...
![[Aggregator] Downloaded image for imported item #68641](https://cyooda.com/wp-content/uploads/bb-plugin/cache/crypto-scam-square-7f91be81a2717863eb9db4eada48ed8e-.webp "[Aggregator] Downloaded image for imported item #68641")
Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries
Law enforcement authorities in Europe have arrested five suspects in connection with an "elaborate" online investment fraud scheme that stole more than €100 million ($118 million) from over 100 victims...
![[Aggregator] Downloaded image for imported item #68543](https://cyooda.com/wp-content/uploads/bb-plugin/cache/Heathrow_Airport-1024x576-square-0261988caa3675ef1ab25c295440bfb9-.png "[Aggregator] Downloaded image for imported item #68543")
Airport disruptions in Europe caused by a ransomware attack
The disruptions over the weekend at several major European airports were caused by a ransomware attack targeting the check-in and boarding systems. Among the airports suffering technical difficulties are Heathrow...
Lvl 17, Angel Place,
123 Pitt Street,
Sydney
NSW 2000
(02) 7230 1350
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders.