📝 Show notes
CyberAware Daily — 2026-10-23
- This week's top stories: Arista VeloCloud zero-day exploited, eMudhra exits SSL/TLS business after weak keys, PHP flaw causes site outages.
- DarkWatch stats: 157,529 captures, 30,833 entities, 2,879 alerts, 8 active targets including a LockBit leak site.
- Practical weekend checklist: update devices, review passwords, set a family code word, and talk to kids about online safety.
- Why a family code word can help protect against impersonation scams.
- How to check if your website uses eMudhra certificates and what to do if it does.
More at https://cyberawareuk.co.uk
📄 Full transcript
It's Friday, the weekend's nearly here, and this is CyberAware UK with your week in review
and a fresh checklist to keep the family safe online.
Bully, we've had a busy week. What's the one thing people should take away before they log off?
Well, two things stood out for me. First, a critical flaw in Arista's Velo cloud product
is being actively exploited. That's business gear, not home kit, so most listeners aren't
directly affected. Right, so if you work in it, you'd want to check that. But for the rest of us,
what's the practical angle? The lesson is patching. If your employer uses Velo cloud,
make sure your IT team knows about it. At home, the equivalent is keeping your router
and devices updated. And the other big story. Emudra is pulling out of the global SSL certificate
business after some of its intermediate keys were found to be easily guessable. That could
affect websites that rely on their certificates. So if you run a small business website, what should
you do? Check with your hosting provider or whoever manages your site. If they use Emudra certs,
ask what the plan is. For everyone else, it's a reminder that even security companies can get it
wrong. There was also a widespread PHP flaw that might cause site outages today. Should we be
worried? Again, that's for people running websites. If your favorite site goes down today, it might be
that. Not a scam, just a technical hiccup. Let's talk about the dark web. Our partners at Darkwatch
have been busy. What's the latest? They've logged over 157,000 captures and nearly 2,900 alerts.
One active target is a Lockbit leak site. Lockbit again. What does that mean for our listeners?
It means ransomware is still a threat, but mainly to organizations. For families,
the best defense is good backups and not clicking on dodgy links. And it's Friday, so it's time for
our weekend checklist. What should people do this weekend? Three simple things. First, check your
software updates on your phone and computer. Second, review your password manager and make sure you're
not reusing passwords. Third, talk to your family about scam texts and agree a code word for emergencies.
A code word that's a new one. Yes, if someone calls pretending to be a family member in trouble,
a code word can quickly confirm if it's real. It's a simple but effective trick.
And what about the kids being online more at the weekend? Have a conversation about what they're
doing online and check the privacy settings on their games and apps. It's about being involved,
not spying. Good advice, so the one takeaway for today. This weekend, take 10 minutes to update
your devices and set up a family code word. Small steps, big peace of mind. Thanks, Bully. That's all
for this week. Stay safe and we'll be back Monday. Cheers, everyone. Have a great weekend.