Weekly Cyber Recap: Driver Licences, Online Shops, and Dev Tools — What You Need to Know
Welcome to this week's CyberAware UK recap. We've seen a flood of alerts from DarkWatch, with over 445,000 captures and more than 7,200 entities flagged. Most importantly, there are five active targets right now — that means there are ongoing attacks you should know about.
The Big One: Driving Licence Data Breach
The FBI is investigating a service that sold over 153 million driving licence records. If you live in the UK, your licence number is a key piece of identity that criminals can use to open accounts or take out loans in your name. The good news? You can freeze your credit with Equifax, Experian, and TransUnion for free. This simple step blocks fraudulent activity and takes just a few minutes.
Online Shop Warning
A new zero-day vulnerability in Magento and Adobe Commerce is being actively exploited. Hackers are backdooring online stores to steal payment details. If you run an online shop, apply patches immediately. If you're a shopper, be wary of small stores that suddenly ask for extra card details or behave oddly.
Developer Tools Under Attack
JetBrains TeamCity was breached through an unpatched vulnerability, allowing attackers to steal AWS credentials. This underscores the importance of updating all software, even tools that run behind the scenes. For everyday users, this is a reminder to enable automatic updates wherever possible.
This Week's Action Points
- If you've ever received a data breach notification, change your passwords now.
- Set up two-factor authentication (2FA) on your main email account.
- Regularly check your credit report for unusual activity.
Looking Ahead
Join us on Monday as we dive into the latest phishing scams and how to spot fake OAuth apps. Remember, reporting scams to Action Fraud helps protect others. Stay safe and stay informed.