Decrypted: The UK Cyber Briefing

148 Episodes

Reverse

SonicWall's SMA1000 gets a second front door, and someone is already knocking

2026-10-1105:20

SonicWall fixed a maximum severity, no-login flaw in its SMA1000 remote access gateways, and one researcher reports probes that match it. The Secure by Design lesson: internal services should not trust a request because of where it came from.

One person, nine banks: AI agents change the arithmetic of attack

2026-10-1004:37

CrowdStrike links attacks on South Korean banks to one person using an open-source AI pentest agent and commercial models. What UK organisations should change when attack effort scales with API credit, plus a SonicWall flaw and a 2027 Windows Update deadline.

A Qilin arrest is welcome, but the ransomware franchise runs on unlocked doors

2026-10-1004:25

A suspected core Qilin member has been handed from Japan to Germany. The arrest is good news, but the group's affiliates keep walking through legacy VPN settings and supplier dependencies. What UK organisations should design out, plus briefs on AI training data and a fake installer lure.

Malware in the box: cheap Android phones that arrive already compromised

2026-10-0904:06

Bitdefender's Midnight Mimosa research finds malware baked into the firmware of cheap MediaTek Android phones. UK product security law checks passwords, reporting and update periods, not whether the firmware is clean. Also: Citrix and SonicWall patches, and a ransomware recovery firm charged.

A Beijing contractor ran the hacking kit, and the doors it used were a decade old

2026-10-0905:08

The NCSC and six allied countries named Integrity Technology Group as the operator behind Flax Typhoon tooling, as the FBI seized seven domains. The exploited holes were years old, which makes this a Secure by Design lesson about what UK organisations leave switched on.

#box-pro-ellipsis-179170858426651{-webkit-line-clamp:2;}Decrypted: The UK Cyber Briefing