Stay Ahead of Cyber Threats with Expert Insights
Practical cybersecurity guidance, incident response expertise, and industry intelligence for Australian law firms and businesses.
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders. Threats, regulatory shifts, and practical tools from the field. No fluff.
CYOODA - Newsletter
1,205 Breaches. A Record Year. And Your Sector Is a Fixture in the Top Five.
The privacy regulator just published the worst annual breach numbers since mandatory reporting began - and legal services made the most-affected list again. This fortnight: a record year the OAIC...
‘Months, Not Years’: The Five Eyes AI Warning No Law Firm Should Scroll Past.
Your next phishing email won't have a single typo - because a machine wrote it. This fortnight: an unprecedented Five Eyes warning that AI-powered attacks are close, a professional-services firm...
68 days. That’s how long attackers are hiding in Australian networks before anyone notices.
Your device management tool just became a weapon. This fortnight: Iran-linked hackers wipe 200,000 devices using Microsoft's own admin tools, an Australian healthcare software vendor hit by ransomware this week,...
Thoughts and articles by Cyooda
All
- All
- Cybersecurity
- Detection Engineering
- How To Guides
- Ransomware Insights
- Security Insights
When Your IT Provider Is Part of the Incident
If your firm had a serious cyber incident tomorrow, who would investigate it, who would pay for that, and who would they report to? In most mid-sized firms the honest...
The Invoice Was Real. The Bank Details Were Not
The invoice was genuine. The matter was genuine. The email came from the right firm, in the right thread, with the right signature block. Only the account number had changed....
How Far Back Can Your Firm Actually See?
There is one question I ask in a first meeting that changes the temperature of the room. If someone had been reading your partners' email since March, how far back...
Your Help Desk Is the Easiest Way Into Your Firm
Your Help Desk Is the Easiest Way Into Your Firm I'll tell you how a recent engagement actually went, because the result deserves to be uncomfortable. We were engaged to...
Cybersecurity news from around the world
![[Aggregator] Downloaded image for imported item #69756](https://cyooda.com/wp-content/uploads/bb-plugin/cache/Family_Stock-deepfake-creation-shutterstock-1024x576-square-729005ac8c4af651883b45fd93e6535d-.jpg "[Aggregator] Downloaded image for imported item #69756")
Deepfake Awareness High at Orgs, But Cyber Defenses Badly Lag
AI-augmented deepfakes are becoming more and more common in cyberattacks on businesses and government agencies, and most organizations are aware of the danger. However, there's a preparation paradox at work:...
![[Aggregator] Downloaded image for imported item #68610](https://cyooda.com/wp-content/uploads/bb-plugin/cache/vegas-casino-1024x576-square-a68618b7999b9fd6724664d687d19436-.jpg "[Aggregator] Downloaded image for imported item #68610")
Boyd Gaming discloses data breach after suffering a cyberattack
US gaming and casino operator Boyd Gaming Corporation disclosed it suffered a breach after threat actors gained access to its systems and stole data, including employee information and data belonging...
![[Aggregator] Downloaded image for imported item #68641](https://cyooda.com/wp-content/uploads/bb-plugin/cache/crypto-scam-square-7f91be81a2717863eb9db4eada48ed8e-.webp "[Aggregator] Downloaded image for imported item #68641")
Eurojust Arrests 5 in €100M Cryptocurrency Investment Fraud Spanning 23 Countries
Law enforcement authorities in Europe have arrested five suspects in connection with an "elaborate" online investment fraud scheme that stole more than €100 million ($118 million) from over 100 victims...
![[Aggregator] Downloaded image for imported item #68543](https://cyooda.com/wp-content/uploads/bb-plugin/cache/Heathrow_Airport-1024x576-square-0261988caa3675ef1ab25c295440bfb9-.png "[Aggregator] Downloaded image for imported item #68543")
Airport disruptions in Europe caused by a ransomware attack
The disruptions over the weekend at several major European airports were caused by a ransomware attack targeting the check-in and boarding systems. Among the airports suffering technical difficulties are Heathrow...
![[Aggregator] Downloaded image for imported item #68578](https://cyooda.com/wp-content/uploads/bb-plugin/cache/recap-1-square-88e66c3a4297a770bc93bcf4e1703d6f-.webp "[Aggregator] Downloaded image for imported item #68578")
⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More
The security landscape now moves at a pace no patch cycle can match. Attackers aren't waiting for quarterly updates or monthly fixes-they adapt within hours, blending fresh techniques with old,...
![[Aggregator] Downloaded image for imported item #68495](https://cyooda.com/wp-content/uploads/bb-plugin/cache/MIcrosoft_Entra_ID-1024x576-square-73d9fe28c41d5cd78dc00ef311d038b2-.jpg "[Aggregator] Downloaded image for imported item #68495")
Microsoft Entra ID flaw allowed hijacking any company’s tenant
A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every company in the world. The fatal mix included undocumented tokens called...
![[Aggregator] Downloaded image for imported item #67471](https://cyooda.com/wp-content/uploads/bb-plugin/cache/google-law-square-8917c04ad0b6343b005f8cee88d0772a-.webp "[Aggregator] Downloaded image for imported item #67471")
Google Fined $379 Million by French Regulator for Cookie Consent Violations
The French data protection authority has fined Google and Chinese e-commerce giant Shein $379 million (€325 million) and $175 million (€150 million), respectively, for violating cookie rules. Both companies set...
![[Aggregator] Downloaded image for imported item #67545](https://cyooda.com/wp-content/uploads/bb-plugin/cache/drift-square-1339f32a94e03de068537f7a2d49c701-.webp "[Aggregator] Downloaded image for imported item #67545")
Salesloft Takes Drift Offline After OAuth Token Theft Hits Hundreds of Organizations
Salesloft on Tuesday announced that it's taking Drift temporarily offline "in the very near future," as multiple companies have been ensnared in a far-reaching supply chain attack spree targeting the...
Lvl 17, Angel Place,
123 Pitt Street,
Sydney
NSW 2000
(02) 7230 1350
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders.