https://cyberblankitt.com/ Plain-English cyber security news for you, your family and your shop. One story at a time, each traced to its primary source. en-gb Mon, 12 Oct 2026 08:00:00 GMT EAS Technology Consulting Ltd, trading as Blankitt https://cyberblankitt.com/stories/unpatched-flaws-in-ahsaycbs-backup-software-are-being-exploited/ https://cyberblankitt.com/stories/unpatched-flaws-in-ahsaycbs-backup-software-are-being-exploited/ Mon, 12 Oct 2026 08:00:00 GMT Backup management tools used by IT providers are being hijacked; if your IT supplier runs AhsayCBS, ask whether its admin page is locked down. Source: BleepingComputer, 2026-10-09: https://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/ For Your ShopRemote IT-management tool exploits https://cyberblankitt.com/stories/germany-arrests-alleged-core-qilin-ransomware-member/ https://cyberblankitt.com/stories/germany-arrests-alleged-core-qilin-ransomware-member/ Mon, 12 Oct 2026 08:00:00 GMT Qilin has hit 2,350+ organisations in 62 countries; an arrest is welcome but the group is not shut down, so backups and patching still matter. Source: BleepingComputer, 2026-10-09: https://www.bleepingcomputer.com/news/security/germany-arrests-alleged-core-qilin-ransomware-member-after-extradition/ For Your ShopSME ransomware https://cyberblankitt.com/stories/cisco-warns-of-five-critical-flaws-in-nexus-3000-9000-switches/ https://cyberblankitt.com/stories/cisco-warns-of-five-critical-flaws-in-nexus-3000-9000-switches/ Mon, 12 Oct 2026 08:00:00 GMT Network switches can be taken over if certain features are on; patch or turn off unused features. Source: BleepingComputer, 2026-10-08: https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover/ For Your ShopInternet-exposed devices https://cyberblankitt.com/stories/canadian-cyber-executive-arrested-in-case-reportedly-tied/ https://cyberblankitt.com/stories/canadian-cyber-executive-arrested-in-case-reportedly-tied/ Mon, 12 Oct 2026 08:00:00 GMT Second recent arrest of a security-industry figure in the ShinyHunters extortion probe; shows who you hire to handle incidents matters. Source: BleepingComputer, 2026-10-10: https://www.bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers/ For Your ShopSME ransomware https://cyberblankitt.com/stories/max-severity-sonicwall-sma1000-flaw-now-being-exploited-patch/ https://cyberblankitt.com/stories/max-severity-sonicwall-sma1000-flaw-now-being-exploited-patch/ Sun, 11 Oct 2026 08:00:00 GMT Remote-access gateways are prime targets; any shop using SMA1000 should patch now. Source: BleepingComputer, 2026-10-09: https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/ For Your ShopInternet-exposed devices https://cyberblankitt.com/stories/leader-of-15-000-strong-money-mule-network-pleads-guilty/ https://cyberblankitt.com/stories/leader-of-15-000-strong-money-mule-network-pleads-guilty/ Sun, 11 Oct 2026 08:00:00 GMT Easy 'work from home' payment-handling jobs can make you an unwitting money launderer; walk away from them. Source: BleepingComputer, 2026-10-09: https://www.bleepingcomputer.com/news/security/ukrainian-russian-dual-citizen-admits-to-laundering-millions-for-cybercriminals/ For YouFor the FamilyMoney mule recruitment https://cyberblankitt.com/stories/ico-complaints-about-automated-nuisance-calls-nearly-triple/ https://cyberblankitt.com/stories/ico-complaints-about-automated-nuisance-calls-nearly-triple/ Sun, 11 Oct 2026 08:00:00 GMT Complaints rose from 1,374 in July to 3,684 in September; reporting suspicious calls to the ICO helps it act. Source: ICO, 2026-10-09: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/10/complaints-about-automated-nuisance-calls-hit-five-year-high For YouFor the FamilyFor Your ShopNuisance call enforcement https://cyberblankitt.com/stories/ico-opens-call-for-evidence-on-ai-agents-after-pressing-leading/ https://cyberblankitt.com/stories/ico-opens-call-for-evidence-on-ai-agents-after-pressing-leading/ Sun, 11 Oct 2026 08:00:00 GMT The regulator is examining the data-protection risks of AI tools that act for you; businesses using AI assistants should watch for guidance. Source: ICO, 2026-10-08: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/10/ico-secures-changes-from-leading-ai-developers-as-scrutiny-extends-to-ai-agents/ For YouFor Your ShopAI agents acting on their own https://cyberblankitt.com/stories/heart-monitor-maker-irhythm-tells-at-least-360-000-people/ https://cyberblankitt.com/stories/heart-monitor-maker-irhythm-tells-at-least-360-000-people/ Sun, 11 Oct 2026 08:00:00 GMT Health-linked details such as insurance numbers can fuel convincing scam calls; expect to be targeted and verify callers. Source: The Record, 2026-10-09: https://therecord.media/irhythm-data-breach-reports For YouFor the FamilyHealth record breaches https://cyberblankitt.com/stories/fbi-arrests-founder-of-ransomware-negotiation-firm/ https://cyberblankitt.com/stories/fbi-arrests-founder-of-ransomware-negotiation-firm/ Sun, 11 Oct 2026 08:00:00 GMT Shows firms paid to negotiate with extortionists are under scrutiny; businesses hit by ransomware should check who they hire. Source: Krebs on Security, 2026-10-09: https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm/ For Your ShopSME ransomware https://cyberblankitt.com/stories/fake-claude-installers-in-google-ads-use-bing-redirects-to-trick/ https://cyberblankitt.com/stories/fake-claude-installers-in-google-ads-use-bing-redirects-to-trick/ Sun, 11 Oct 2026 08:00:00 GMT A sponsored result can look trusted yet lead to a fake download page that hands you a harmful command to paste, so get apps only from the maker's own site. Source: BleepingComputer, 2026-10-09: https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/ For YouFor Your ShopClickFix copy-paste attacks https://cyberblankitt.com/stories/attacker-used-artex-ai-toolkit-and-claude-agents-against-south/ https://cyberblankitt.com/stories/attacker-used-artex-ai-toolkit-and-claude-agents-against-south/ Sun, 11 Oct 2026 08:00:00 GMT AI is speeding up attacks on firms that hold your data, so strong unique passwords and watching for breach notices matter more. Source: BleepingComputer, 2026-10-10: https://www.bleepingcomputer.com/news/security/hacker-used-artex-ai-and-claude-agents-to-target-south-korean-banks/ For YouFor Your ShopAttackers using AI https://cyberblankitt.com/stories/microsoft-windows-devices-that-miss-updates-will-lose-access/ https://cyberblankitt.com/stories/microsoft-windows-devices-that-miss-updates-will-lose-access/ Sat, 10 Oct 2026 08:00:00 GMT Windows PCs that are not kept up to date will stop receiving security updates in 2027; installing the latest updates now avoids being locked out. Source: BleepingComputer, 2026-10-09: https://www.bleepingcomputer.com/news/microsoft/microsoft-outdated-windows-devices-will-lose-security-protection-next-year/ For YouFor the FamilyFor Your ShopEnd-of-support deadlines https://cyberblankitt.com/stories/microsoft-teams-to-flag-impersonators-and-plug-in-third-party/ https://cyberblankitt.com/stories/microsoft-teams-to-flag-impersonators-and-plug-in-third-party/ Sat, 10 Oct 2026 08:00:00 GMT Fake-boss video calls are a growing fraud route; Teams warnings help, but a call-back check on payment requests still matters. Source: BleepingComputer, 2026-10-08: https://www.bleepingcomputer.com/news/security/microsoft-teams-to-add-third-party-deepfake-detection-impersonation-protection/ For Your ShopPlatform scam defences https://cyberblankitt.com/stories/fbi-seizes-domains-behind-chinese-state-linked-flax-typhoon/ https://cyberblankitt.com/stories/fbi-seizes-domains-behind-chinese-state-linked-flax-typhoon/ Sat, 10 Oct 2026 08:00:00 GMT The tools relied on hijacked internet-connected devices; update or replace old routers and cameras. Source: BleepingComputer, 2026-10-08: https://www.bleepingcomputer.com/news/security/fbi-disrupts-chinese-hacking-tools-used-to-breach-critical-infrastructure/ For Your ShopBotnet takedowns https://cyberblankitt.com/stories/fakegit-campaign-returns-with-17-610-fake-github-repositories/ https://cyberblankitt.com/stories/fakegit-campaign-returns-with-17-610-fake-github-repositories/ Sat, 10 Oct 2026 08:00:00 GMT Free tools and 'AI' add-ons from look-alike code pages can steal logins; only download from the vendor's official page. Source: BleepingComputer, 2026-10-08: https://www.bleepingcomputer.com/news/security/fakegit-malware-campaign-returns-with-17-610-malicious-github-repos/ For YouFor Your ShopFake software downloads https://cyberblankitt.com/stories/fake-natwest-email-asks-you-to-update-your-account-information/ https://cyberblankitt.com/stories/fake-natwest-email-asks-you-to-update-your-account-information/ Sat, 10 Oct 2026 08:00:00 GMT The link leads to a fake NatWest login that steals your details; go to your bank through its app or the number on your card instead. Source: Which?, 2026-10-07: https://www.which.co.uk/news/article/the-latest-scam-alerts-from-which-aBRLy2b02WkC For YouFor the FamilyBank impersonation scam texts https://cyberblankitt.com/stories/fake-hulu-email-claims-your-subscription-was-cancelled/ https://cyberblankitt.com/stories/fake-hulu-email-claims-your-subscription-was-cancelled/ Sat, 10 Oct 2026 08:00:00 GMT The "update payment details" button leads to a phishing site that captures card and personal details. Source: Which?, 2026-10-07: https://www.which.co.uk/news/article/the-latest-scam-alerts-from-which-aBRLy2b02WkC For YouFor the FamilyFake subscription payment emails https://cyberblankitt.com/stories/citrix-urges-immediate-patching-of-a-new-netscaler-remote-code/ https://cyberblankitt.com/stories/citrix-urges-immediate-patching-of-a-new-netscaler-remote-code/ Sat, 10 Oct 2026 08:00:00 GMT Another NetScaler flaw on top of this month's exploited ones; any business running these appliances should update at once. Source: BleepingComputer, 2026-10-09: https://bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately For Your ShopInternet-exposed devices https://cyberblankitt.com/stories/bitdefender-finds-budget-android-phones-shipping-with-built/ https://cyberblankitt.com/stories/bitdefender-finds-budget-android-phones-shipping-with-built/ Sat, 10 Oct 2026 08:00:00 GMT Cheap unbranded phones can arrive already infected, and a factory reset may not remove it; buy from known sellers and check for firmware updates. Source: BleepingComputer, 2026-10-08: https://www.bleepingcomputer.com/news/security/low-cost-android-phones-ship-with-residential-proxy-malware/ For YouFor the FamilyFor Your ShopPre-infected budget phones https://cyberblankitt.com/stories/asos-says-its-breach-began-when-an-employee-was-tricked/ https://cyberblankitt.com/stories/asos-says-its-breach-began-when-an-employee-was-tricked/ Sat, 10 Oct 2026 08:00:00 GMT Names and contact details were exposed (not cards or passwords); expect follow-on scam calls and texts pretending to be ASOS. Source: BleepingComputer, 2026-10-08: https://www.bleepingcomputer.com/news/security/asos-links-data-breach-to-social-engineering-attack-credential-theft/ For YouFor Your ShopHijacked official app alerts https://cyberblankitt.com/stories/arizona-courts-say-hackers-copied-backup-files-covering-about-1/ https://cyberblankitt.com/stories/arizona-courts-say-hackers-copied-backup-files-covering-about-1/ Sat, 10 Oct 2026 08:00:00 GMT Old files kept for decades were the target; affected people are urged to place holds on their credit. Source: The Record, 2026-10-07: https://therecord.media/arizona-courts-say-hackers-stole-info-on-over-1-million For YouFor the FamilyPublic sector data-handling failures https://cyberblankitt.com/stories/n-able-warns-hackers-are-exploiting-an-auth-bypass-flaw-in-its-n/ https://cyberblankitt.com/stories/n-able-warns-hackers-are-exploiting-an-auth-bypass-flaw-in-its-n/ Sat, 08 Aug 2026 08:00:00 GMT Small businesses whose IT is run by an outside provider (MSP) are often managed through tools like N-central - if that provider hasn't patched, criminals can hijack every business it manages at once. Worth an email to your IT provider asking if they're patched. Source: Bleeping Computer, 2026-08-03: https://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/ For Your ShopRemote IT-management tool exploits https://cyberblankitt.com/stories/ico-reprimands-met-police-after-stalking-victims-new-address/ https://cyberblankitt.com/stories/ico-reprimands-met-police-after-stalking-victims-new-address/ Sat, 08 Aug 2026 08:00:00 GMT A stalking victim's new address and phone number were sent, unredacted, to the man she was being protected from - a stark reminder to ask any organisation (police, school, GP) how they handle sensitive details, especially in abuse or safeguarding situations. Source: ICO, 2026-08-05: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/08/metropolitan-police-service-issued-with-enforcement-notice-and-reprimand-following-data-protection-failures/ For YouFor the FamilyPublic sector data-handling failures https://cyberblankitt.com/stories/guilty-plea-in-snowflake-cloud-extortions-underscores-mfa-gap/ https://cyberblankitt.com/stories/guilty-plea-in-snowflake-cloud-extortions-underscores-mfa-gap/ Sat, 08 Aug 2026 08:00:00 GMT A hacker's guilty plea confirms 165+ organisations were extorted after criminals used stolen cloud logins that lacked MFA - a concrete reminder for any shop using cloud/SaaS accounts to turn on MFA everywhere, not just on the accounts that feel important. Source: Krebs on Security, 2026-08-06: https://krebsonsecurity.com/2026/08/canadian-man-pleads-guilty-in-snowflake-extortions/ For Your ShopBreach-fuelled account takeover https://cyberblankitt.com/stories/opera-becomes-first-browser-to-block-clickfix-copy-paste-attacks/ https://cyberblankitt.com/stories/opera-becomes-first-browser-to-block-clickfix-copy-paste-attacks/ Sat, 04 Jul 2026 08:00:00 GMT Fake 'prove you're human' pages trick people into pasting malicious commands; Opera's Paste Protect now blocks this by default - a hook to explain the trick everyone should know Source: Bleeping Computer / Opera, 2026-07-02: https://www.bleepingcomputer.com/news/security/opera-rolls-out-paste-protect-feature-to-fight-clickfix-attacks/ For YouClickFix copy-paste attacks https://cyberblankitt.com/stories/fbi-takedown-two-million-hacked-tv-boxes-and-smart-tv-apps-ran/ https://cyberblankitt.com/stories/fbi-takedown-two-million-hacked-tv-boxes-and-smart-tv-apps-ran/ Sat, 04 Jul 2026 08:00:00 GMT Cheap no-name streaming boxes and even smart-TV apps quietly enrolled homes in the Popa botnet - practical advice: stick to name-brand devices and check Play Protect certification Source: Krebs on Security, 2026-07-02: https://krebsonsecurity.com/2026/07/fbi-seizes-netnut-proxy-platform-popa-botnet/ For YouFor the FamilyHijacked home gadgets https://cyberblankitt.com/stories/password-spraying-wave-hits-microsoft-365-81-million-login/ https://cyberblankitt.com/stories/password-spraying-wave-hits-microsoft-365-81-million-login/ Fri, 03 Jul 2026 08:00:00 GMT Criminals reused breach-leaked passwords and slipped past half-configured MFA - a check-your-MFA-settings moment for any shop on Microsoft 365 Source: Bleeping Computer / Huntress, 2026-07-01: https://www.bleepingcomputer.com/news/security/hackers-target-microsoft-365-accounts-with-81-million-login-attempts/ For Your ShopBreach-fuelled account takeover https://cyberblankitt.com/stories/fake-perplexity-ai-extension-on-chrome-web-store-tracked-users/ https://cyberblankitt.com/stories/fake-perplexity-ai-extension-on-chrome-web-store-tracked-users/ Fri, 03 Jul 2026 08:00:00 GMT A lookalike AI extension quietly intercepted searches and browsing data - a plain-English hook on vetting extensions before installing Source: Bleeping Computer, 2026-06-30: https://www.bleepingcomputer.com/news/security/fake-perplexity-extension-on-chrome-web-store-tracked-searches/ For YouDodgy browser extensions https://cyberblankitt.com/stories/dont-pay-the-ransom-323-uk-organisations-hit-last-year-over-half/ https://cyberblankitt.com/stories/dont-pay-the-ransom-323-uk-organisations-hit-last-year-over-half/ Fri, 03 Jul 2026 08:00:00 GMT Over half of UK ransomware reports come from small firms; most shops don't know about the free 24/7 attack hotline Source: City of London Police / Report Fraud, 2026-06-29: https://www.reportfraud.police.uk/ransomware/ For Your ShopSME ransomware https://cyberblankitt.com/stories/deepfake-ad-pushes-bogus-gbp-35-energy-saving-plug-as-bills-rise/ https://cyberblankitt.com/stories/deepfake-ad-pushes-bogus-gbp-35-energy-saving-plug-as-bills-rise/ Fri, 03 Jul 2026 08:00:00 GMT AI deepfake video ads on Facebook/Instagram reached 155,000+ accounts selling a fake plug-in device via a phishing link - timely as July energy bills rise Source: Which?, 2026-07: https://www.which.co.uk/news/article/the-latest-scam-alerts-from-which-aBRLy2b02WkC For YouFor the FamilyDeepfake scam ads https://cyberblankitt.com/stories/ofcom-tells-platforms-to-keep-under-age-children-out/ https://cyberblankitt.com/stories/ofcom-tells-platforms-to-keep-under-age-children-out/ Tue, 30 Jun 2026 08:00:00 GMT Age-gates coming; a regulatory shift Source: Ofcom, 2026: https://www.ofcom.org.uk/online-safety/protecting-children/keep-underage-children-off-your-platforms-ofcom-tells-tech-firms For the FamilyKids online safety crackdown https://cyberblankitt.com/stories/ico-75-of-parents-fear-kids-arent-safe-online/ https://cyberblankitt.com/stories/ico-75-of-parents-fear-kids-arent-safe-online/ Tue, 30 Jun 2026 08:00:00 GMT Parental anxiety data; a hook for family guides Source: ICO, 2026-04: https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/04/one-click-too-many-75-of-parents-fear-their-kids-arent-making-safe-choices-online/ For the FamilyKids online safety crackdown https://cyberblankitt.com/stories/cyber-resilience-pledge-cyber-essentials-across-supply-chains/ https://cyberblankitt.com/stories/cyber-resilience-pledge-cyber-essentials-across-supply-chains/ Tue, 30 Jun 2026 08:00:00 GMT CE becoming a condition of supplying larger firms Source: gov.uk / NCSC, 2026-04: https://www.ncsc.gov.uk/information/cyber-essentials-supply-chain-playbook For Your ShopCyber Essentials 2026 rollout https://cyberblankitt.com/stories/cyber-essentials-mfa-now-mandatory-or-auto-fail/ https://cyberblankitt.com/stories/cyber-essentials-mfa-now-mandatory-or-auto-fail/ Tue, 30 Jun 2026 08:00:00 GMT MFA now a hard requirement for certification Source: NCSC, 2026-04: https://www.ncsc.gov.uk/cyberessentials/overview For Your ShopCyber Essentials 2026 rollout https://cyberblankitt.com/stories/booking-com-breach-fuels-convincing-travel-scams/ https://cyberblankitt.com/stories/booking-com-breach-fuels-convincing-travel-scams/ Tue, 30 Jun 2026 08:00:00 GMT Breach details power realistic travel scams Source: Insurance Business, 2026-04: https://www.insurancebusinessmag.com/uk/news/cyber/booking-com-breach-raises-red-flags-for-insurers-as-travel-scams-evolve-571610.aspx For YouFor the FamilyBreach-fuelled account takeover https://cyberblankitt.com/stories/argos-shoppers-hit-by-account-takeover-fraud/ https://cyberblankitt.com/stories/argos-shoppers-hit-by-account-takeover-fraud/ Tue, 30 Jun 2026 08:00:00 GMT Old breach passwords used to hijack retail accounts Source: Which?, 2026-06: https://www.which.co.uk/news/article/the-most-convincing-scams-of-2026-so-far-aIICo4W8L4Q1 For YouBreach-fuelled account takeover