📝 Show notes
CyberAware Daily — 2026-11-11
- DarkWatch update: new ransomware-as-a-service operation spotted, plus over 200,000 captures and 3,443 alerts tracked.
- Microsoft releases nearly 1,100 security fixes in its latest patch round.
- Git vulnerability patched: malicious repositories could run code during recursive clones.
- SGLang remote code execution flaw exploited, impacting NEAR AI and around 100 users.
- Critical authentication bypass in Xen Orchestra exploited to gain admin access.
- Actionable takeaway: check for updates on all your devices and enable automatic updates.
More at https://cyberawareuk.co.uk
📄 Full transcript
It's Wednesday, the 11th of November, and this is CyberAware UK.
I am Bully, and joining me is Alex.
Today we're looking at the latest from Darkwatch and some patch news that affects a lot of us.
That's right. Darkwatch is tracking over 200,000 captures and more than 3,000 alerts.
One recent capture shows a new ransomware-as-a-service operation starting up.
What does that mean for our listeners?
It means someone is renting out ransomware tools, but the practical bit for a household is simple.
Keep your backups offline or in the cloud with two-factor turned on.
That way, even if something gets in, you can get your photos and documents back.
Good advice. Now Microsoft has fixed nearly 1,100 security vulnerabilities in its latest update.
That sounds like a lot, should people be worried.
Not worried, but they should act.
The fix is in the updates Microsoft released.
If your computer or phone is set to update automatically, you're probably fine.
If not, go to Settings and check for updates today.
It's a five-minute job that closes a lot of doors.
And there's also a fix for Git, the tool developers use.
A flaw could let a malicious repository run code when someone clones it.
That's more for the tech crowd, but if you work in software, make sure your Git is up to date.
Exactly. If you're not a developer, you don't need to worry about that one.
But it's a good reminder to keep all your software current.
Next, there's a report about a remote code execution flaw in something called SGLang, which is used in AI systems.
It breached any AR AI and stole data from 18 agents and about 100 users.
That's a niche issue, but it shows that AI tools need patching too.
Finally, hackers are exploiting a critical authentication bypass in Zen Orchestra to gain admin access.
Zen Orchestra is used by some businesses for managing virtual machines.
If you're a home user, this probably doesn't affect you directly, but it's a reminder that businesses need to patch promptly.
And if you're a small business owner listening, make sure your IT person knows about this one.
It's rated critical by the vendor, so it needs attention.
So to wrap up, the theme today is patching.
Whether it's your phone, your laptop, or the services you rely on, updates matter.
That's right. And our one actionable takeaway for today.
Take five minutes to check for updates on your devices and turn on automatic updates if they're not already on.
It's the simplest way to stay safe.
Thanks for listening. We'll be back tomorrow with more Stay Safe Everyone.
Stay safe, and remember, a small update today can save a big headache tomorrow.