Week in Review: Critical Linux Flaw, Fake AI Apps, and Your Weekend Security Checklist
This week brought a mix of technical warnings and practical reminders. Here's what you need to know, and what to do about it.
Critical Linux kernel flaw
Researchers disclosed a serious vulnerability in the Linux kernel's TCP handling, rated 9.8 out of 10 for severity. It affects major distributions like Ubuntu and Red Hat. If you run Linux servers or a Linux desktop, check for updates from your distribution and apply them promptly. For most home users on Windows or Mac, this isn't something you need to act on directly.
Fake AI apps with a nasty payload
Fake versions of popular AI apps like ChatGPT and Claude have been found using signed executables to install cryptocurrency miners. Always download apps from official stores or the developer's website. Avoid links from social media or unknown sources.
A ransomware negotiator gone rogue?
US authorities suspect a ransom negotiator of running an extortion site. While the details are still emerging, the lesson for the rest of us is clear: if you're ever hit by ransomware, don't panic and don't pay without expert advice. Contact the police and a trusted IT professional.
DarkWatch update
DarkWatch has captured over 178,000 records across more than 35,000 entities, with 3,109 alerts and 9 active targets. One recent capture is an active dark web leak site linked to the DragonForce group. The best defence is strong, unique passwords and two-factor authentication.
Your weekend checklist
- Update your devices and apps. That Linux flaw and the fake apps are reminders to keep everything patched.
- Enable two-factor authentication on your email, bank, and social media. Use an authenticator app if you can.
- Talk to your family about scams. Agree that no legitimate company will ask for your password or a panic payment.
Spend ten minutes this weekend on these steps, and you'll be safer for it.
Related reading