📝 Show notes
CyberAware Daily — 2026-10-25
- Weekly recap: DarkWatch stats for the week — 165,517 captures, 32,077 entities, 2,936 alerts, and 12 active targets.
- DarkWatch spotted a LockBit leak site active this week, a reminder that ransomware remains a threat.
- UK sanctions Cryptomus for Russian money laundering, targeting the financial infrastructure behind cyber crime.
- Brotli decoder flaw affects Node.js, Bun, Python, and other software — if you run a website, check for updates.
- Leaked LiteLLM master key let attackers steal GitHub tokens — developers should rotate keys.
- Google says Gmail and Photos data shared with AI search could be used for targeted ads — review your privacy settings.
- Weekly takeaway: keep your software updated and set devices to update automatically.
More at https://cyberawareuk.co.uk
📄 Full transcript
It's Sunday, the 25th of October, and this is Cyber Aware UK, the show that helps British
families spot scams and stay safe online. I am Bully.
And I am Alex. Today we are doing our weekly recap, looking back at the real intel from
Darkwatch and the stories that matter from the past seven days.
Let's start with the numbers. Darkwatch recorded over 165,000 captures this week,
across more than 32,000 entities. That's a lot of data points.
It is, and from that they raised just under 3,000 alerts with 12 active targets being
monitored right now. So the system is busy, but it's also focused.
One of the captures this week was a lockbit leak site. That's a reminder that ransomware
gangs are still very much in business and they're still naming victims publicly.
And that's not something most households need to worry about directly, but it's a good
moment to check your backups and make sure your important files are safe.
Now in the news this week, the UK government sanctioned a cryptocurrency service called
Cryptomus for helping Russia launder money. That's a big step in cutting off funding for
cybercrime.
It shows that the fight against online fraud isn't just about catching the scammers. It's
about going after the infrastructure they use to move money around.
We also saw a technical flaw in something called Brotley, which is used by lots of software.
It could allow an attacker to run malicious code on a server. If you run a website, it's worth
checking for updates.
And for the rest of us, it's another reminder to keep your devices and apps updated. Most
of these flaws get fixed quickly, but only if you install the updates.
There was also a leak of a master key for a tool called LightLLM, which let attackers steal
GitHub tokens. If you're a developer, you'll want to rotate your keys.
And Google announced that Gmail and Photos data shared with AI search could be used for
targeted ads. That's a privacy point. Worth reviewing your Google settings if you're
not comfortable with that.
So what's the takeaway this week? It's simple. The basics still matter. Keep your software
updated, use strong unique passwords, and think before you click.
And if you want to do one thing today, check that your phone and computer are set to update
automatically. That single step protects you from a lot of what we've talked about.
That's it for this week. We'll be back tomorrow with a fresh episode. Until then, stay safe and
stay savvy.
Thanks for listening. Goodbye.