📝 Show notes
CyberAware Daily — 2026-10-31
- TeamViewer flaw: remote machines can attack users who connect to them. Vendor rated critical. Update if you use it.
- WordPress core flaw: nearly 63,000 exploit attempts in 24 hours. Only affects people running WordPress sites. Update the site.
- AI-powered ARTEX tool used by Chinese hackers to target over 200 organisations. Mostly a concern for large companies.
- DarkWatch spotted an active DragonForce leak site. Keep passwords strong and unique, and turn on two-step verification.
- Weekend tip: switch on automatic updates for your devices and apps.
More at https://cyberawareuk.co.uk
📄 Full transcript
Welcome to Cyber Aware UK. It's Saturday the 31st of October, and this is our Weekend Short.
A quick look at what's moving this week, plus one simple tip to keep your household safe.
And we're keeping it calm today, right? No doom and gloom.
Absolutely. Just plain facts and one easy action. So let's start with the big one.
Researchers have found a flaw in TeamViewer, the software a lot of people use to let someone else control their computer remotely.
What's the problem with it?
The flaw means that if your computer connects to a remote machine that's been set up to be malicious, that remote machine could attack you.
So it's not about you being the target directly, but it could affect anyone who uses TeamViewer to connect to other computers.
And who actually owns those remote machines?
Usually IT teams or support companies, so most people at home won't be affected.
But if you use TeamViewer for work or to help family, it's worth knowing.
The vendor has rated it critical and is pushing a patch.
So the action there is just to update TeamViewer if you have it.
Exactly, and if you don't use it, you can ignore it.
Next up, WordPress.
A serious flaw in the WordPress core let attackers take over sites without needing a password.
Nearly 63,000 attempts were logged in 24 hours.
That's a lot, but most of our listeners probably don't run WordPress themselves.
Right, it's mostly a concern for people who run their own websites or small businesses.
If you do, make sure the site is updated to the latest version.
If not, nothing to worry about.
And there's also a story about Chinese hackers using AI to target over 200 organizations.
That sounds a bit scary.
It's serious for those organizations, but it's aimed at large companies and governments, not home users.
The lesson for us is simply that AI is making some attacks more convincing, so be careful with unexpected emails and links.
Now we usually mention the dark web, and today Darkwatch has spotted an active leak site run by a group called Dragonforce.
No need to share the address, but what does it mean for listeners?
It means that data stolen in a tax can end up being published there.
The practical advice is to keep an eye on your accounts and use strong, unique passwords.
If you think your details might be caught up, change your passwords and turn on two-step verification.
And finally, our one tip for the weekend, what is it?
It's simple.
Check that your devices and apps are set to update automatically.
That covers the TeamViewer floor, the WordPress issue, and most others.
Updates are your first line of defense, and they take almost no effort.
So that's the takeaway.
Turn on automatic updates and let your devices look after themselves.
Exactly.
Stay safe, and we'll be back on Monday with the full show.
Thanks for listening.
Bye for now.