Beware: Phone Number Hijacking Goes Digital with eSIMs

Mar 15, 2024 | Podcast, Posts

Attention smartphone users! A new type of phone scam is on the rise, and it exploits the latest technology: eSIMs. eSIMs are digital SIM cards embedded in your phone, eliminating the need for a physical card. While convenient, they’ve opened a door for...

Hackers Hoisted by Their Own Petard

Mar 8, 2024 | Podcast

In a surprising turn of events, the notorious Lockbit ransomware gang, responsible for extorting over $120 million from 2,000 victims worldwide, has been taken down by authorities. But the story takes an even more interesting turn when we reveal how they were caught:...

CISO Sydney Conference

Feb 21, 2024 | Speaking

The CISO Sydney Conference was held on 20th and 21st February 2024 and I had the privilege to speak on both days. For the first day, I was a panelist speaker at a fireside chat with Michelle, Pete, Elaine and Mona. We spoke about Cyber Training & Awareness and...

Guest Lecture at UNSW

Feb 19, 2024 | Speaking

I recently had the honor of delivering a guest lecture at UNSW on security in design and development. It’s fulfilling to give back and contribute to the growth of future software engineers and managers. Together, let’s promote a security-conscious approach in shaping...

Beware the Text: Phishing SMS Messages Morphing Beyond Fake Deliveries

Feb 13, 2024 | Posts

Remember those annoying texts about a “package requiring a small fee” that never quite materialize? Phishing via SMS, also known as smishing, has evolved far beyond these clumsy attempts.Just a few minutes ago, I received a chilling message purporting to...

Experience with Phishing Scam from Legitimate Booking Platform

Jan 19, 2024 | Posts

A few months ago I shared that phishing scams are getting more sophisticated with scammers targeting hotel staff in order to phish their customers. Someone I know got targeted with such as scam this week. They had a hotel reservation booked through a booking website...

Predictions from Australian Cyber Security Strategy

Jan 12, 2024 | Podcast

Australian suffered a number of significant data breaches in the last two years. In response, the Australian Government released their Cyber Security Strategy late last year and it provides a peak to some of the cyber legislations that are upcoming. I’m going to...

AI Predictions for 2024

Jan 5, 2024 | Podcast

AI took centre stage in 2023 with tools like ChatGPT making headlines. What can we expected in 2024? Here’s my predictions on how it’ll revolutionise the way we code, secure and hire. Imagine a world where code practically writes itself. AI-powered...

Malicious Chrome Extensions Infected 1.5 Million Users via Fake VPNs in Video Game Torrents

Dec 28, 2023 | Podcast

Three malicious Chrome extensions, disguised as VPNs, infected approximately 1.5 million users, functioning as browser hijackers, cashback hack tools, and data stealers. Discovered by ReasonLabs, the extensions (netPlus, netSave, and netWin) were distributed through...

Critical Flaw in Apache Struts 2 Framework Remains Unaddressed by Developers

Dec 27, 2023 | Podcast

A critical remote code execution (RCE) vulnerability in the Apache Struts 2 framework, tracked as CVE-2023-50164, is reportedly being ignored by developers, leaving approximately 80% of recent Struts downloads exposed to the flaw. The severity of the vulnerability,...