📝 Show notes
CyberAware Daily — 2026-10-30
- This week's top stories: a critical Linux kernel TCP flaw rated 9.8, fake ChatGPT and Claude apps installing crypto miners, and a ransom negotiator suspected of running an extortion site.
- DarkWatch update: over 178,000 captures, 3,109 alerts, and an active dark web leak site linked to DragonForce.
- Weekend checklist: update devices and apps, enable two-factor authentication, and talk to your family about scams.
- One takeaway: spend ten minutes this weekend updating and securing your key accounts.
More at https://cyberawareuk.co.uk
📄 Full transcript
It's Friday, the last day of October, and this is CyberAware UK. I am Bully, and joining me is
Alex. Today we're doing our weekend prep, a look back at the week, and a fresh checklist to keep
your household safe. Bully, before we get to the checklist, what's the one story from this week
that listeners should know about? A big one, researchers found a serious flaw in the Linux
kernel's TCP handling. It's rated 9.8 out of 10 for severity, and it affects Ubuntu, Red Hat,
and other Linux distributions. That sounds technical. Who does it actually affect?
Mostly people who run Linux servers or home systems or small businesses using Linux. If that's you,
check your distribution's updates and apply the patch. For most households on Windows or Mac,
it's not something you need to act on directly. Good to know, and there's also news about fake
chat GPT and clawed apps. Yes, fake versions of those AI apps are using signed executables to sneak
in crypto miners. So if you're downloading an AI app, go to the official store or website.
Don't grab it from a random link. And a story about a ransom negotiator
suspected of running an extortion site. That's a reminder that the ransomware world is murky.
But for our listeners, the takeaway is simple. If you're hit, don't panic and don't pay without
talking to the police and your IT support. There are legitimate negotiators, but do your homework.
Let's move to Darkwatch. What's the latest?
Darkwatch has logged over 178,000 captures across more than 35,000 entities with 3,109 alerts and 9
active targets. One recent capture is an active dark web leak site linked to the Dragonforce group.
Should listeners be worried about that?
Only if your data ends up there. The best defense is still strong, unique passwords and turning on
two-factor authentication wherever you can.
Now the weekend checklist. What should people do this weekend?
Three simple things. First, update your devices and apps. That Linux floor and those fake apps are
reminders that updates matter. Check your two-factor authentication. Make sure it's on for your
email, bank, and social media. And if you use text messages for codes, consider an authenticator app
instead. Have a quick chat with your family about scams. Remind them that no legitimate company will ask
for your password or a payment in a panic. Agree on a code word for emergencies if you like.
And what's the one takeaway for today?
This weekend, take 10 minutes to update your devices and turn on two-factor authentication
for your most important accounts. It's the simplest way to stay ahead of the scammers.
Thanks, Bully. That's all for this week. Stay safe and we'll be back Monday.
Cheers, everyone. Have a great weekend.