CyberAware UK Weekly Recap: DarkWatch Stats, Cryptomus Sanctions, and Privacy Updates
It's Sunday, 25th October 2026, and time for our weekly recap. Here's what you need to know from the past seven days.
DarkWatch by the numbers
This week, DarkWatch recorded 165,517 captures across 32,077 entities. From that, 2,936 alerts were raised, with 12 active targets currently being monitored. One of the captures was a LockBit leak site, a reminder that ransomware gangs continue to name victims publicly. For most households, the key takeaway is to keep your backups up to date.
UK sanctions Cryptomus
The UK government has sanctioned the cryptocurrency service Cryptomus for helping Russia launder money. This is part of a wider effort to cut off the financial infrastructure that cyber criminals rely on. It shows that tackling online fraud isn't just about catching scammers, but also about disrupting the systems they use to move money.
Brotli decoder flaw
A flaw in the Brotli decoder, used by many software projects including Node.js, Bun, and Python, could allow an attacker to run malicious code on a server. If you run a website, check for updates from your software providers. For everyone else, it's a reminder to keep your devices and apps updated.
LiteLLM master key leak
A leaked master key for the tool LiteLLM allowed attackers to steal GitHub tokens and hijack release pipelines. If you're a developer, rotate your keys and review your access controls.
Google's AI ad privacy update
Google has said that Gmail and Photos data shared with AI search could be used for targeted ads. If you're not comfortable with that, review your Google account privacy settings.
One action to take
This week's takeaway is simple: set your phone and computer to update automatically. That single step protects you from many of the threats we've discussed. Stay safe and stay savvy.
Related reading