Mid-Week Intel: Microsoft's Big Patch Day, ChatGPT Email Leak, and Crypto Heists

Welcome back to CyberAware UK's Wednesday roundup. Today we're looking at three key stories from the dark web monitoring service DarkWatch, which has flagged over 1,500 alerts across more than 8,000 entities.

Microsoft Patches Nearly 1,000 Holes

Microsoft has released its latest round of security updates, fixing almost a thousand vulnerabilities across its software. This is a routine monthly release, but the scale is massive. The most important thing you can do is ensure your Windows device installs these updates. Often, attacks happen because users delay installing patches. So make it a habit to restart your computer and allow updates to complete.

ChatGPT Flaw Could Leak Your Gmail

A research group discovered a vulnerability in ChatGPT that could allow an attacker to send a victim's Gmail data to another email address. The attack works by planting a malicious prompt in a webpage, which tricks ChatGPT into action. To protect yourself, be cautious about clicking unknown links, and periodically review which third-party apps have access to your email accounts. Revoke permissions for anything you don't recognise.

Crypto Heists Target Brazil and Liquid

In Brazil, a group called 'Slim Spider' stole custody secrets from a financial institution, potentially allowing them to access held cryptocurrencies. Meanwhile, the hackers who attacked the Liquid exchange returned 3,400 Bitcoin but still hold tens of millions in BTC. These incidents highlight the risks of keeping large amounts of cryptocurrency on exchanges. For everyday users, using a hardware wallet or reputable exchange with strong offline storage can reduce risk.

Your One Action for Today

Take five minutes to check which apps and services can access your email and other accounts. If you see something you no longer use, revoke it. And if you haven't already, restart your device to finish those Windows patches. Simple steps, but effective.