📝 Show notes
CyberAware Daily — 2026-11-06
- OpenSSH emergency fix for Alpine Linux: long passwords could bypass SSH auth. Check your web host has patched.
- ChatGPT lockdown mode bypass: researchers exfiltrated chats without user interaction. Don't paste secrets into any chat.
- Apache OFBiz remote code execution and DeFi site hijacks in this week's threat roundup.
- DarkWatch: 192,044 captures, 38,492 entities, 3,325 alerts, 8 active targets this week.
- Weekend checklist: router updates, two-step verification, ask your host about patches, family money phrase.
- Action: pick one checklist item and do it before Monday.
More at https://cyberawareuk.co.uk
📄 Full transcript
It's Friday, the 6th of November, and this is CyberAware UK. I am Bully, and joining me is
Alex. Today we're doing our weekend prep, looking back at the week, and running through a fresh
checklist. And I've got the Darkwatch numbers here. Nearly 200,000 captures, over 38,000 entities,
and just over 3,000 alerts. Eight active targets being watched.
Good, before we get into the week, let's talk about one story that matters to anyone
running a website. OpenSSH had to push out an emergency fix.
Right, the floor affects Alpine Linux, and it lets long passwords bypass SSH authentication,
so someone could get in without the right password.
Now most people listening don't run Alpine Linux on a server, but if you've got a website,
or you pay someone to host one for you, this is the sort of thing you want patched quickly.
And that ties into a checklist item we'll get to. The short version is,
ask your web host whether their systems are up to date. You don't need to understand the fix,
just check it's been applied.
Next one, researchers found a way around chat GPT's lockdown mode.
They could pull chats out without the user doing anything.
That sounds worrying. What does it mean for a normal family using chat GPT?
It means don't treat any chat window as a private vault. Don't paste in passwords,
bank details, or anything you wouldn't put on a postcard. The company is likely to fix it,
but the habit is what protects you.
And there were other headlines this week. Apache of Biz remote code execution,
DreamHost breach, DeFi site hijacks. We covered DreamHost already, so we won't rehash it.
Right, the of BizOne is another server-side issue, again for businesses rather than homes.
The DeFi site hijacks are about cryptocurrency sites being taken over,
so if you use crypto, double-check the address before you connect a wallet.
Let's move to the weekend checklist. What should people actually do this Saturday?
Number one, update your home router and any smart devices.
Number two, check your email account for two-step verification.
Number three, if you run a website, ask your host about OpenSSH and of Biz patches.
And number four, sit down with the family and agree a simple phrase for money requests.
If someone rings or messages asking for a payment, you ask them for the phrase.
No phrase, no money.
That's a nice, calm habit. Also, Darkwatch flagged an active dark web leak site this week.
We won't read out the address, but if your email appears in a breach,
change that password and turn on two-step.
Exactly. So the one action for today, pick one of those checklist items and do it before Monday.
Just one is enough to start.
Thanks for listening. We're back on Monday. Have a safe weekend.