# Cyber Blankitt public discovery
Version: 1

A weekly, plain-English cyber security newsletter for three audiences: you, your family and your shop. Every story links to its primary source and says why it matters. Published by EAS Technology Consulting Ltd, trading as Blankitt, UK.

## Discovery surfaces
- [RSS feed](https://cyberblankitt.com/rss.xml): one item per story, newest first, linking to the primary source
- [llms.txt](https://cyberblankitt.com/llms.txt): short operator hint
- [sitemap.xml](https://cyberblankitt.com/sitemap-index.xml): XML sitemap for crawlers
- [sitemap.md](https://cyberblankitt.com/sitemap.md): this file

## Pages
- [This week's issue](https://cyberblankitt.com/) (issue)
- [Guides](https://cyberblankitt.com/guides) (guides)
- [Issues](https://cyberblankitt.com/issues) (issues)
- [Archive](https://cyberblankitt.com/archive) (archive)
- [Tools](https://cyberblankitt.com/tools) (list)
- [Is this text a scam?](https://cyberblankitt.com/tools/is-this-a-scam) (tool)
- [Disclosure](https://cyberblankitt.com/disclosure) (policy)
- [Privacy](https://cyberblankitt.com/privacy) (policy)
- [Terms](https://cyberblankitt.com/terms) (policy)
- [Contact](https://cyberblankitt.com/contact) (contact)

## Start-here guides (evergreen)
- [Protect my money and accounts](https://cyberblankitt.com/guides/you) (guide, updated 11 October 2026)
- [Keep the kids and the household safe](https://cyberblankitt.com/guides/family) (guide, updated 11 October 2026)
- [Keep my shop trading](https://cyberblankitt.com/guides/shop) (guide, updated 11 October 2026)

## Issues, newest first
- [The weekly, 2026-10-12](https://cyberblankitt.com/issues/2026-10-12) (issue, 4 stories)
- [The weekly, 2026-10-11](https://cyberblankitt.com/issues/2026-10-11) (issue, 8 stories)
- [The weekly, 2026-10-10](https://cyberblankitt.com/issues/2026-10-10) (issue, 10 stories)
- [The weekly, 2026-08-08](https://cyberblankitt.com/issues/2026-08-08) (issue, 3 stories)
- [The weekly, 2026-07-04](https://cyberblankitt.com/issues/2026-07-04) (issue, 2 stories)
- [The weekly, 2026-07-03](https://cyberblankitt.com/issues/2026-07-03) (issue, 4 stories)
- [The weekly, 2026-06-30](https://cyberblankitt.com/issues/2026-06-30) (issue, 6 stories)

## Stories, newest first
Each line: title (linking to our story page, which explains why it matters), then the primary source and its date, the audiences, and the series.

### Published 2026-10-12
- [Unpatched flaws in AhsayCBS backup software are being exploited, and the latest version is also affected](https://cyberblankitt.com/stories/unpatched-flaws-in-ahsaycbs-backup-software-are-being-exploited/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/), 2026-10-09; For Your Shop; series: Remote IT-management tool exploits)
- [Germany arrests alleged core Qilin ransomware member after extradition from Japan](https://cyberblankitt.com/stories/germany-arrests-alleged-core-qilin-ransomware-member/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/germany-arrests-alleged-core-qilin-ransomware-member-after-extradition/), 2026-10-09; For Your Shop; series: SME ransomware)
- [Cisco warns of five critical flaws in Nexus 3000/9000 switches](https://cyberblankitt.com/stories/cisco-warns-of-five-critical-flaws-in-nexus-3000-9000-switches/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover/), 2026-10-08; For Your Shop; series: Internet-exposed devices)
- [Canadian cyber executive arrested in case reportedly tied to ShinyHunters hackers](https://cyberblankitt.com/stories/canadian-cyber-executive-arrested-in-case-reportedly-tied/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/cyber-exec-arrested-in-case-allegedly-tied-to-shinyhunters-hackers/), 2026-10-10; For Your Shop; series: SME ransomware)
### Published 2026-10-11
- [Max-severity SonicWall SMA1000 flaw now being exploited; patch advisory SNWLID-2026-0017](https://cyberblankitt.com/stories/max-severity-sonicwall-sma1000-flaw-now-being-exploited-patch/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/), 2026-10-09; For Your Shop; series: Internet-exposed devices)
- [Leader of 15,000-strong money mule network pleads guilty after recruiting through fake job emails](https://cyberblankitt.com/stories/leader-of-15-000-strong-money-mule-network-pleads-guilty/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/ukrainian-russian-dual-citizen-admits-to-laundering-millions-for-cybercriminals/), 2026-10-09; For You, For the Family; series: Money mule recruitment)
- [ICO: complaints about automated nuisance calls nearly triple in three months to a five-year high](https://cyberblankitt.com/stories/ico-complaints-about-automated-nuisance-calls-nearly-triple/) (story; source: [ICO](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/10/complaints-about-automated-nuisance-calls-hit-five-year-high), 2026-10-09; For You, For the Family, For Your Shop; series: Nuisance call enforcement)
- [ICO opens call for evidence on AI agents after pressing leading AI firms to change how they handle personal data](https://cyberblankitt.com/stories/ico-opens-call-for-evidence-on-ai-agents-after-pressing-leading/) (story; source: [ICO](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/10/ico-secures-changes-from-leading-ai-developers-as-scrutiny-extends-to-ai-agents/), 2026-10-08; For You, For Your Shop; series: AI agents acting on their own)
- [Heart-monitor maker iRhythm tells at least 360,000 people their details were taken in a June breach](https://cyberblankitt.com/stories/heart-monitor-maker-irhythm-tells-at-least-360-000-people/) (story; source: [The Record](https://therecord.media/irhythm-data-breach-reports), 2026-10-09; For You, For the Family; series: Health record breaches)
- [FBI arrests founder of ransomware-negotiation firm in ShinyHunters extortion probe](https://cyberblankitt.com/stories/fbi-arrests-founder-of-ransomware-negotiation-firm/) (story; source: [Krebs on Security](https://krebsonsecurity.com/2026/10/fbi-arrests-founder-of-ransomware-negotiation-firm/), 2026-10-09; For Your Shop; series: SME ransomware)
- [Fake Claude installers in Google ads use Bing redirects to trick Mac users into pasting a malicious command](https://cyberblankitt.com/stories/fake-claude-installers-in-google-ads-use-bing-redirects-to-trick/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks/), 2026-10-09; For You, For Your Shop; series: ClickFix copy-paste attacks)
- [Attacker used ARTEX AI toolkit and Claude agents against South Korean banks, exposing customer data](https://cyberblankitt.com/stories/attacker-used-artex-ai-toolkit-and-claude-agents-against-south/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/hacker-used-artex-ai-and-claude-agents-to-target-south-korean-banks/), 2026-10-10; For You, For Your Shop; series: Attackers using AI)
### Published 2026-10-10
- [Microsoft: Windows devices that miss updates will lose access to Windows Update when certificates expire in 2027](https://cyberblankitt.com/stories/microsoft-windows-devices-that-miss-updates-will-lose-access/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/microsoft/microsoft-outdated-windows-devices-will-lose-security-protection-next-year/), 2026-10-09; For You, For the Family, For Your Shop; series: End-of-support deadlines)
- [Microsoft Teams to flag impersonators and plug in third-party deepfake detection](https://cyberblankitt.com/stories/microsoft-teams-to-flag-impersonators-and-plug-in-third-party/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/microsoft-teams-to-add-third-party-deepfake-detection-impersonation-protection/), 2026-10-08; For Your Shop; series: Platform scam defences)
- [FBI seizes domains behind Chinese state-linked Flax Typhoon scanning and phishing tools](https://cyberblankitt.com/stories/fbi-seizes-domains-behind-chinese-state-linked-flax-typhoon/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/fbi-disrupts-chinese-hacking-tools-used-to-breach-critical-infrastructure/), 2026-10-08; For Your Shop; series: Botnet takedowns)
- [FakeGit campaign returns with 17,610 fake GitHub repositories spreading the SmartLoader/StealC malware](https://cyberblankitt.com/stories/fakegit-campaign-returns-with-17-610-fake-github-repositories/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/fakegit-malware-campaign-returns-with-17-610-malicious-github-repos/), 2026-10-08; For You, For Your Shop; series: Fake software downloads)
- [Fake NatWest email asks you to "update your account information" via a link to a copycat site](https://cyberblankitt.com/stories/fake-natwest-email-asks-you-to-update-your-account-information/) (story; source: [Which?](https://www.which.co.uk/news/article/the-latest-scam-alerts-from-which-aBRLy2b02WkC), 2026-10-07; For You, For the Family; series: Bank impersonation scam texts)
- [Fake Hulu email claims your subscription was cancelled after a failed payment](https://cyberblankitt.com/stories/fake-hulu-email-claims-your-subscription-was-cancelled/) (story; source: [Which?](https://www.which.co.uk/news/article/the-latest-scam-alerts-from-which-aBRLy2b02WkC), 2026-10-07; For You, For the Family; series: Fake subscription payment emails)
- [Citrix urges immediate patching of a new NetScaler remote-code-execution flaw (CVE-2026-107406)](https://cyberblankitt.com/stories/citrix-urges-immediate-patching-of-a-new-netscaler-remote-code/) (story; source: [BleepingComputer](https://bleepingcomputer.com/news/security/citrix-warns-admins-to-patch-new-netscaler-rce-flaw-immediately), 2026-10-09; For Your Shop; series: Internet-exposed devices)
- [Bitdefender finds budget Android phones shipping with built-in malware that runs ad fraud and turns them into proxies](https://cyberblankitt.com/stories/bitdefender-finds-budget-android-phones-shipping-with-built/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/low-cost-android-phones-ship-with-residential-proxy-malware/), 2026-10-08; For You, For the Family, For Your Shop; series: Pre-infected budget phones)
- [ASOS says its breach began when an employee was tricked into giving up login details](https://cyberblankitt.com/stories/asos-says-its-breach-began-when-an-employee-was-tricked/) (story; source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/asos-links-data-breach-to-social-engineering-attack-credential-theft/), 2026-10-08; For You, For Your Shop; series: Hijacked official app alerts)
- [Arizona courts say hackers copied backup files covering about 1.3 million people, including Social Security numbers](https://cyberblankitt.com/stories/arizona-courts-say-hackers-copied-backup-files-covering-about-1/) (story; source: [The Record](https://therecord.media/arizona-courts-say-hackers-stole-info-on-over-1-million), 2026-10-07; For You, For the Family; series: Public sector data-handling failures)
### Published 2026-08-08
- [N-able warns hackers are exploiting an auth-bypass flaw in its N-central IT management tool](https://cyberblankitt.com/stories/n-able-warns-hackers-are-exploiting-an-auth-bypass-flaw-in-its-n/) (story; source: [Bleeping Computer](https://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/), 2026-08-03; For Your Shop; series: Remote IT-management tool exploits)
- [ICO reprimands Met Police after stalking victim's new address leaked to her abuser](https://cyberblankitt.com/stories/ico-reprimands-met-police-after-stalking-victims-new-address/) (story; source: [ICO](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/08/metropolitan-police-service-issued-with-enforcement-notice-and-reprimand-following-data-protection-failures/), 2026-08-05; For You, For the Family; series: Public sector data-handling failures)
- [Guilty plea in Snowflake cloud extortions underscores MFA gap](https://cyberblankitt.com/stories/guilty-plea-in-snowflake-cloud-extortions-underscores-mfa-gap/) (story; source: [Krebs on Security](https://krebsonsecurity.com/2026/08/canadian-man-pleads-guilty-in-snowflake-extortions/), 2026-08-06; For Your Shop; series: Breach-fuelled account takeover)
### Published 2026-07-04
- [Opera becomes first browser to block 'ClickFix' copy-paste attacks](https://cyberblankitt.com/stories/opera-becomes-first-browser-to-block-clickfix-copy-paste-attacks/) (story; source: [Bleeping Computer / Opera](https://www.bleepingcomputer.com/news/security/opera-rolls-out-paste-protect-feature-to-fight-clickfix-attacks/), 2026-07-02; For You; series: ClickFix copy-paste attacks)
- [FBI takedown: two million hacked TV boxes and smart-TV apps ran a criminal proxy network](https://cyberblankitt.com/stories/fbi-takedown-two-million-hacked-tv-boxes-and-smart-tv-apps-ran/) (story; source: [Krebs on Security](https://krebsonsecurity.com/2026/07/fbi-seizes-netnut-proxy-platform-popa-botnet/), 2026-07-02; For You, For the Family; series: Hijacked home gadgets)
### Published 2026-07-03
- [Password-spraying wave hits Microsoft 365: 81 million login attempts in two weeks](https://cyberblankitt.com/stories/password-spraying-wave-hits-microsoft-365-81-million-login/) (story; source: [Bleeping Computer / Huntress](https://www.bleepingcomputer.com/news/security/hackers-target-microsoft-365-accounts-with-81-million-login-attempts/), 2026-07-01; For Your Shop; series: Breach-fuelled account takeover)
- [Fake Perplexity AI extension on Chrome Web Store tracked users' searches](https://cyberblankitt.com/stories/fake-perplexity-ai-extension-on-chrome-web-store-tracked-users/) (story; source: [Bleeping Computer](https://www.bleepingcomputer.com/news/security/fake-perplexity-extension-on-chrome-web-store-tracked-searches/), 2026-06-30; For You; series: Dodgy browser extensions)
- [Don't pay the ransom: 323 UK organisations hit last year, over half SMEs](https://cyberblankitt.com/stories/dont-pay-the-ransom-323-uk-organisations-hit-last-year-over-half/) (story; source: [City of London Police / Report Fraud](https://www.reportfraud.police.uk/ransomware/), 2026-06-29; For Your Shop; series: SME ransomware)
- [Deepfake ad pushes bogus GBP 35 'energy-saving' plug as bills rise](https://cyberblankitt.com/stories/deepfake-ad-pushes-bogus-gbp-35-energy-saving-plug-as-bills-rise/) (story; source: [Which?](https://www.which.co.uk/news/article/the-latest-scam-alerts-from-which-aBRLy2b02WkC), 2026-07; For You, For the Family; series: Deepfake scam ads)
### Published 2026-06-30
- [Ofcom tells platforms to keep under-age children out](https://cyberblankitt.com/stories/ofcom-tells-platforms-to-keep-under-age-children-out/) (story; source: [Ofcom](https://www.ofcom.org.uk/online-safety/protecting-children/keep-underage-children-off-your-platforms-ofcom-tells-tech-firms), 2026; For the Family; series: Kids online safety crackdown)
- [ICO: 75% of parents fear kids aren't safe online](https://cyberblankitt.com/stories/ico-75-of-parents-fear-kids-arent-safe-online/) (story; source: [ICO](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/04/one-click-too-many-75-of-parents-fear-their-kids-arent-making-safe-choices-online/), 2026-04; For the Family; series: Kids online safety crackdown)
- [Cyber Resilience Pledge: Cyber Essentials across supply chains](https://cyberblankitt.com/stories/cyber-resilience-pledge-cyber-essentials-across-supply-chains/) (story; source: [gov.uk / NCSC](https://www.ncsc.gov.uk/information/cyber-essentials-supply-chain-playbook), 2026-04; For Your Shop; series: Cyber Essentials 2026 rollout)
- [Cyber Essentials: MFA now mandatory or auto-fail](https://cyberblankitt.com/stories/cyber-essentials-mfa-now-mandatory-or-auto-fail/) (story; source: [NCSC](https://www.ncsc.gov.uk/cyberessentials/overview), 2026-04; For Your Shop; series: Cyber Essentials 2026 rollout)
- [Booking.com breach fuels convincing travel scams](https://cyberblankitt.com/stories/booking-com-breach-fuels-convincing-travel-scams/) (story; source: [Insurance Business](https://www.insurancebusinessmag.com/uk/news/cyber/booking-com-breach-raises-red-flags-for-insurers-as-travel-scams-evolve-571610.aspx), 2026-04; For You, For the Family; series: Breach-fuelled account takeover)
- [Argos shoppers hit by account takeover fraud](https://cyberblankitt.com/stories/argos-shoppers-hit-by-account-takeover-fraud/) (story; source: [Which?](https://www.which.co.uk/news/article/the-most-convincing-scams-of-2026-so-far-aIICo4W8L4Q1), 2026-06; For You; series: Breach-fuelled account takeover)

## Usage
```bash
curl -s https://cyberblankitt.com/llms.txt
curl -s https://cyberblankitt.com/sitemap.md
curl -s https://cyberblankitt.com/rss.xml
```

Citing: quote the story title and link to the primary source we link to. Cite this site for the explanation of why a story matters. Attribution: Cyber Blankitt (cyberblankitt.com).