CybEssential

CyberNews reported that Udemy was recently targeted in a data breach, with 1.4M records exposed.
No passwords confirmed, but names, emails, and payment details can still fuel phishing and scams.

Trusted platforms can be targeted too.
Pause before clicking.
Be cautious with emails.
Turn on multi‑factor authentication.
Awareness = protection

Read the full article here - https://cybernews.com/security/shinyhunters-claim-udemy-data-theft/

Attackers don’t always take the front door.

Rockstar Games confirmed a breach after attackers abused trusted third‑party access ... not a direct hack.

- No player data impacted
- Big lesson learned
Vendor access + cloud permissions = real attack surface.

Your security includes everyone in your stack.

Read the full article here: https://www.bleepingcomputer.com/news/security/stolen-rockstar-games-analytics-data-leaked-by-extortion-gang/?utm_source=flipboard&utm_content=other

How much longer until the ever-growing list of subscriptions wears you down?
Cyber awareness shouldn't be complicated, and neither should your training.
How?
Visit our shop at https://www.cybessential.com.au/ to find out.
Spoiler alert: it has to do with your LMS (yes, the one you already have).

“We use MFA, so we’re safe.”
Not always.

A new phishing attack bypassed Microsoft 365 MFA by tricking users into approving a real login on a real Microsoft page.
This is what phishing looks like in 2026.

https://www.techrepublic.com/article/news-microsoft-365-phishing-bypasses-security-codes/?utm_source=flipboard&utm_content=TechRepublic%2Fmagazine%2FLatest+News