Week Ahead: Patch Tuesday, Phishing Against Policy Experts, and DarkWatch Figures
It's Monday 5 October, and here's what's worth knowing for the week ahead.
Patch Tuesday is tomorrow. Microsoft will release its monthly batch of fixes, and the early preview points to some critical ones. Critical means a flaw that could let someone take over a device with little effort. The action is simple: on Wednesday morning, check for updates on your Windows laptop, phone and tablet, then restart them. You don't need to dig through settings. Most devices will prompt you anyway. This one habit blocks a lot of what circulates each month.
A China-aligned group is targeting US AI policy experts using Microsoft phishing. The technique hijacks a login session, so even a correct password isn't enough. This is not a household threat. It affects a small number of researchers, think tank staff and academics using Microsoft accounts at work. If that's you, switch on two-step verification using an app rather than text messages.
A ShinyHunters suspect has reportedly been detained in Jordan and is said to be helping the FBI identify other members. It's a positive law enforcement update but doesn't change your day-to-day precautions.
DarkWatch today shows 85,124 captures, 19,986 entities, 2,291 alerts and 13 active targets. One is an active dark web leak site belonging to a group called DragonForce. If a company you use is breached, they will contact you directly. Treat unexpected breach messages with care and verify through the company's own website or your bill.
A US soldier has been sentenced to 70 months for extortion involving phone company data. It's a reminder that phone account takeovers happen. If your mobile signal drops for no reason, call your network straight away.
The single takeaway for this week: update and restart your devices on Wednesday morning. That's it. It is the most effective, lowest-effort thing most of us can do.
Related reading