Stay Ahead of Cyber Threats with Expert Insights
Practical cybersecurity guidance, incident response expertise, and industry intelligence for Australian law firms and businesses.
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders. Threats, regulatory shifts, and practical tools from the field. No fluff.
CYOODA - Newsletter
1,205 Breaches. A Record Year. And Your Sector Is a Fixture in the Top Five.
The privacy regulator just published the worst annual breach numbers since mandatory reporting began - and legal services made the most-affected list again. This fortnight: a record year the OAIC...
‘Months, Not Years’: The Five Eyes AI Warning No Law Firm Should Scroll Past.
Your next phishing email won't have a single typo - because a machine wrote it. This fortnight: an unprecedented Five Eyes warning that AI-powered attacks are close, a professional-services firm...
68 days. That’s how long attackers are hiding in Australian networks before anyone notices.
Your device management tool just became a weapon. This fortnight: Iran-linked hackers wipe 200,000 devices using Microsoft's own admin tools, an Australian healthcare software vendor hit by ransomware this week,...
Thoughts and articles by Cyooda
All
- All
- Cybersecurity
- Detection Engineering
- How To Guides
- Ransomware Insights
- Security Insights
When Your IT Provider Is Part of the Incident
If your firm had a serious cyber incident tomorrow, who would investigate it, who would pay for that, and who would they report to? In most mid-sized firms the honest...
The Invoice Was Real. The Bank Details Were Not
The invoice was genuine. The matter was genuine. The email came from the right firm, in the right thread, with the right signature block. Only the account number had changed....
How Far Back Can Your Firm Actually See?
There is one question I ask in a first meeting that changes the temperature of the room. If someone had been reading your partners' email since March, how far back...
Your Help Desk Is the Easiest Way Into Your Firm
Your Help Desk Is the Easiest Way Into Your Firm I'll tell you how a recent engagement actually went, because the result deserves to be uncomfortable. We were engaged to...
Cybersecurity news from around the world
![[Aggregator] Downloaded image for imported item #67509](https://cyooda.com/wp-content/uploads/bb-plugin/cache/and-square-a9e8886e3bbd4e20c5c92f18e0c20f55-.webp "[Aggregator] Downloaded image for imported item #67509")
Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack
Google has shipped security updates to address 120 security flaws in its Android operating system as part of its monthly fixes for September 2025, including two issues that it said...
![[Aggregator] Downloaded image for imported item #66577](https://cyooda.com/wp-content/uploads/bb-plugin/cache/Fortinet-1-1024x576-square-bdfbdb2529862932f5437664812a9298-.jpg "[Aggregator] Downloaded image for imported item #66577")
Researcher to release exploit for full auth bypass on FortiWeb
A security researcher has released a partial proof of concept exploit for a vulnerability in the FortiWeb web application firewall that allows a remote attacker to bypass authentication. The flaw was...
![[Aggregator] Downloaded image for imported item #66271](https://cyooda.com/wp-content/uploads/bb-plugin/cache/cit-square-389f3a26a2376c8a476a8e016c555949-.webp "[Aggregator] Downloaded image for imported item #66271")
Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543 in Critical Sectors
The Dutch National Cyber Security Centre (NCSC-NL) has warned of cyber attacks exploiting a recently disclosed critical security flaw impacting Citrix NetScaler ADC products to breach organizations in the country....
![[Aggregator] Downloaded image for imported item #66260](https://cyooda.com/wp-content/uploads/bb-plugin/cache/hackers-square-face94e2d8f27544c8e94b72a40787a5-.webp "[Aggregator] Downloaded image for imported item #66260")
Cybercrime Groups ShinyHunters, Scattered Spider Join Forces in Extortion Attacks on Businesses
An ongoing data extortion campaign targeting Salesforce customers may soon turn its attention to financial services and technology service providers, as ShinyHunters and Scattered Spider appear to be working hand...
![[Aggregator] Downloaded image for imported item #66336](https://cyooda.com/wp-content/uploads/bb-plugin/cache/zoom-square-06556554de074baf83c9a08ea31e6314-.webp "[Aggregator] Downloaded image for imported item #66336")
Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws
Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution. The vulnerability impacting Zoom Clients...
![[Aggregator] Downloaded image for imported item #66323](https://cyooda.com/wp-content/uploads/bb-plugin/cache/Windows-1024x576-square-35ce5ec60cf3fbd560f7a633be430306-.jpg "[Aggregator] Downloaded image for imported item #66323")
Microsoft asks users to ignore certificate enrollment errors
Microsoft has asked customers this week to disregard incorrect CertificateServicesClient (CertEnroll) errors that appear after installing the July 2025 preview update and subsequent Windows 11 24H2 updates. In recent months,...
![[Aggregator] Downloaded image for imported item #66349](https://cyooda.com/wp-content/uploads/bb-plugin/cache/windows-updates-square-793960eb2c3fd3fa1395d062f21c30fd-.webp "[Aggregator] Downloaded image for imported item #66349")
Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day Among 111 Total New Flaws
Microsoft on Tuesday rolled out fixes for a massive set of 111 security flaws across its software portfolio, including one flaw that has been disclosed as publicly known at the...
![[Aggregator] Downloaded image for imported item #66339](https://cyooda.com/wp-content/uploads/bb-plugin/cache/fortinet-square-fc9abd5311efdacf908a4389eca487b0-.webp "[Aggregator] Downloaded image for imported item #66339")
Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code
Fortinet is alerting customers of a critical security flaw in FortiSIEM for which it said there exists an exploit in the wild. The vulnerability, tracked as CVE-2025-25256, carries a CVSS...
Lvl 17, Angel Place,
123 Pitt Street,
Sydney
NSW 2000
(02) 7230 1350
The Legal Cyber Brief — monthly cyber intelligence for law firm leaders.