CyberAware UK Weekly Recap: DarkWatch Numbers, Lunex Stealer, and the PeopleSoft Web Shell Problem
Every Sunday we slow down and look at the week that was. Here is what actually mattered.
The numbers first. DarkWatch captured 51,283 records this week, linked to 15,614 entities. Out of that, 2,017 alerts were raised, and there are 14 active targets right now. Those two numbers together tell the real story. Most of what moves around the dark web is recycled, re-posted and copied. The genuinely new, genuinely dangerous material is a small slice. A big capture number is not a reason to panic.
A new leak site also came online this week. We do not publish addresses, and you do not need to go looking. Worth knowing: the front page was nothing but a directory index. Plenty of these sites are stood up as advertising and never filled with meaningful data. If a company you use gets named, they will contact you. Never click a leak site link that someone sends you.
The headline that deserved attention is Lunex Stealer. It abuses a legitimate AMD graphics driver to switch off security monitoring, then goes after saved browser credentials. The driver is not at fault, it is being misused. It typically arrives through cracked software, fake installers or dodgy downloads. If you do not do that, your risk stays low.
Next, Oracle PeopleSoft. Researchers found a way around web application firewalls to exploit a flaw and drop web shells. This is enterprise software used by large employers, universities and public bodies. If you work somewhere that runs it, your IT team owns this. If they send you a note this week, read it.
Finally, a forward looking piece on AI agents and zero visibility. You cannot secure what you cannot see, and that applies just as much to AI features being added to your email and banking apps. No action needed today, but worth watching.
Next week: a plain English explainer on web shells, and a practical guide to moving saved passwords out of your browser.
Your one action this week: open your browser settings, see how many passwords are sitting there, and start moving them into a proper password manager. That is the prize criminals go for first.
Related reading