Daniel Zhang Daniel Zhang

Your Holiday Just Got Hijacked - When Booking.com Knows You Too Well

Booking.com travellers are being targeted by highly convincing phishing scams that use real reservation details to steal payments and personal data. Following a recent data exposure, cybercriminals are exploiting booking information to impersonate hotels and pressure victims into urgent payments. Learn how these scams work and why travellers are now prime targets.

Read More
Daniel Zhang Daniel Zhang

Ransomware Is Booming: Crime-as-a-Service Just Had a Record Quarter

Ransomware gangs are earning more than ever, with a sharp rise in revenue during Q1 2026. As cybercrime becomes more organised and profitable, businesses face increasing pressure to strengthen defences. Learn what this trend means for your organisation and how to stay protected.

Read More
Daniel Zhang Daniel Zhang

WARNING: World Cup Scams Are Kicking Off Early

Cybercriminals are exploiting World Cup hype by creating fake FIFA websites designed to steal personal and financial information. This emerging wave of phishing attacks highlights how easily users can be tricked by convincing domain spoofing. Learn how these attacks work and what organisations can do to stay protected.

Read More
Daniel Zhang Daniel Zhang

Hackers Stole Your Cookies, Chrome Just Slammed the Cookie Jar Shut!

Google Chrome has introduced a powerful new security feature designed to stop attackers hijacking user sessions; even when two-factor authentication is enabled. By binding session credentials to a specific device, this update significantly reduces the risk of account takeover. Here’s what it means for your security posture.

Read More
Daniel Zhang Daniel Zhang

AI Said Download It… So I Did (Big Mistake)!

AI chatbots are changing how users discover software; but attackers are exploiting that trust. Learn how malicious links, fake downloads, and AI-driven recommendations are increasing the risk of malware and remote compromise for businesses.

Read More
Daniel Zhang Daniel Zhang

Who Ya Gonna Call? Ghost Hackers!

Some of cybersecurity’s strangest stories still have no ending. This article explores the mystery of the Shadow Brokers, the alleged NSA tool leak, and why unknown cyber threats still matter for modern business security.

Read More
Daniel Zhang Daniel Zhang

Attack of the AI Agents - Too Many Bots, Not Enough Plots

Businesses are rapidly adopting AI agents, but unmanaged growth is creating a new challenge: agent sprawl. Learn why AI governance, security controls, identity management, and continuous monitoring are becoming essential as organisations automate more work.

Read More
Daniel Zhang Daniel Zhang

The Wolf Who Couldn’t Phish

Discover how phishing-resistant MFA and passkeys help protect Microsoft 365 accounts from modern cyber threats in this fun Little Red Riding Hood-inspired cybersecurity story.

Read More
Daniel Zhang Daniel Zhang

Your Phone Is the New Hacker Playground!

Mobile phishing attacks are rapidly overtaking traditional email scams, with cybercriminals targeting users through SMS, QR codes, Teams, and mobile apps. Learn why businesses must rethink cybersecurity strategies to protect staff, devices, and Microsoft 365 identities from modern phishing threats.

Read More
Daniel Zhang Daniel Zhang

You’re One-Click Away From Financially Significant Emotional Damage

Cybercriminals are now abusing Microsoft Self-Service Password Reset workflows to compromise Microsoft 365 and Azure environments through social engineering and MFA manipulation. Learn how attackers are targeting privileged accounts, stealing cloud data, and what Australian businesses can do to strengthen Entra ID and Azure security.

Read More
Daniel Zhang Daniel Zhang

Microsoft 365 Just Got Invited to the Worst Device Pairing Party Ever

Tycoon2FA is evolving again, now abusing Microsoft’s legitimate device login process to hijack Microsoft 365 accounts while bypassing traditional phishing protections. Learn how device-code phishing works, why MFA alone may not be enough, and what organisations can do to better secure Entra ID and Microsoft 365 environments.

Read More
Daniel Zhang Daniel Zhang

Big Trouble in Little Teams

Hackers are now using Microsoft Teams chats to impersonate IT support and trick employees into running malicious PowerShell commands. The KongTuke campaign shows why collaboration platforms need the same scrutiny as email when defending against social engineering and malware attacks.

Read More