📝 Show notes
CyberAware Daily — 2026-10-28
- DarkWatch update: 175,008 captures, 33,907 entities, 3,030 alerts, 10 active targets.
- DragonForce leak site active — what it means and how to protect yourself.
- CyberStrikeAI: 44 AI agents used to automate hacking against Japan targets.
- GoAhead TLS flaws: revoked certificates and session decryption risks for web servers.
- Apple backports fix for exploited CoreGraphics flaw to older iPhones and iPads.
- Action: check for updates and enable two-step verification.
More at https://cyberawareuk.co.uk
📄 Full transcript
It's Wednesday, the middle of the week, and this is CyberAware UK.
I am your host, and joining me is Alex.
Today we're looking at the latest from Darkwatch and a few news stories that matter for normal households.
That's right, Darkwatch is our dark web monitoring desk.
The numbers today, 175,008 captures, 33,907 entities, 3,030 alerts, and 10 active targets.
And one of the recent captures is from a group called Dragonforce, which runs an active dark web leak site.
We won't read out the address, but it's worth knowing these groups publish stolen data to pressure victims.
So what does that mean for our listeners?
If your email or password shows up in a breach, change that password and turn on two-step verification.
That's the practical step.
Now to the news.
First up, researchers have found a tool called CyberStrike AI that uses 44 AI agents to automate hacking operations against targets in Japan.
It's a reminder that attackers are using AI to speed up the boring parts of breaking in.
But the defenses are the same.
Strong passwords, updates, and being careful about what you click.
Next, there are flaws in something called GoAheadTLS.
They could let revoked client certificates still work and allow session decryption.
This is more for people running web servers.
If you run a small business website, ask your hosting provider if they've patched.
Home users don't need to do anything.
And Apple has backported a fix for an exploited core graphics floor to older iPhones and iPads.
That means if you're on an older iPhone or iPad, check for updates.
Go to Settings, General Software Update.
It's a quick job and it matters.
Let's recap the action for today.
Yes, check your devices for updates, especially Apple ones.
And if you get a breach alert, change that password and turn on two-step verification.
Simple steps, big difference.
Thanks for listening.
We'll be back tomorrow.
Stay safe and remember, a small update today can save you a big headache later.