Decrypted: The UK Cyber Briefing

153 Episodes

Reverse

A failed airline's inbox is up for sale to train an AI: whose data is it?

2026-10-1104:22

Google has proposed paying $10 million for a bankrupt airline's internal data to train AI, and 121 US lawmakers want it halted. The Secure by Design lesson for UK organisations: data you keep becomes an asset in your insolvency.

SonicWall's SMA1000 gets a second front door, and someone is already knocking

2026-10-1105:20

SonicWall fixed a maximum severity, no-login flaw in its SMA1000 remote access gateways, and one researcher reports probes that match it. The Secure by Design lesson: internal services should not trust a request because of where it came from.

One person, nine banks: AI agents change the arithmetic of attack

2026-10-1004:37

CrowdStrike links attacks on South Korean banks to one person using an open-source AI pentest agent and commercial models. What UK organisations should change when attack effort scales with API credit, plus a SonicWall flaw and a 2027 Windows Update deadline.

A Qilin arrest is welcome, but the ransomware franchise runs on unlocked doors

2026-10-1004:25

A suspected core Qilin member has been handed from Japan to Germany. The arrest is good news, but the group's affiliates keep walking through legacy VPN settings and supplier dependencies. What UK organisations should design out, plus briefs on AI training data and a fake installer lure.

Malware in the box: cheap Android phones that arrive already compromised

2026-10-0904:06

Bitdefender's Midnight Mimosa research finds malware baked into the firmware of cheap MediaTek Android phones. UK product security law checks passwords, reporting and update periods, not whether the firmware is clean. Also: Citrix and SonicWall patches, and a ransomware recovery firm charged.

#box-pro-ellipsis-179176641684590{-webkit-line-clamp:2;}Decrypted: The UK Cyber Briefing