Weekly roundup ·
This Week in Cybersecurity: Week 43
Week 43: PHP2Shell flaws hit millions of websites with attack attempts, eight eMudhra CA keys prove guessable, and LiteLLM and Railway leak developer secrets.
Read the roundupbluwarden blog
Security guidance, in plain language
Hardening guides, privacy advice, scam warnings and a weekly threat roundup, for people and businesses.
This Week in Cybersecurity
Every week, the breaches, vulnerabilities and patches that matter, summarised in one read.
All weekly roundupsAll articles
This Week in Cybersecurity: Week 43
Week 43: PHP2Shell flaws hit millions of websites with attack attempts, eight eMudhra CA keys prove guessable, and LiteLLM and Railway leak developer secrets.
Marcus · · 23 min readNode.js Brotli and TLS Flaws: What to Patch
Node.js fixed ten flaws on 21 October, including a Brotli bug reachable through fetch() and Express 5. Who's exposed, what to update, and the eMudhra CA block.
Lucas · · 11 min readPHP2Shell: Who's Exposed and What to Patch
PHP2Shell is under attack: two critical PHP flaws let attackers run code on web servers without a login. Who's exposed, how to patch, and what to check for.
Lucas · · 21 min readAPT28's NATO Shipbuilder Hack: What's Known
Symantec caught Russia's APT28 inside a NATO naval shipbuilder for two months. What the evidence confirms, what it can't, and what the techniques teach you.
Marcus · · 17 min readChinese Rental Cars Filmed Norwegian Troops
Rental cars used in a Norwegian military exercise filmed soldiers, routes and gate codes. What happened, what is proven, and why connected cars are a risk.
Marcus · · 17 min readThis Week in Cybersecurity: Week 42
Week 42: a stolen ConnectWise app credential opens Microsoft 365 tenants, a record 1,413-flaw Patch Tuesday, and zero-days in Ivanti, Cisco and BeyondTrust.
Marcus · · 21 min readPosting Your Kids Online: The Real Risks
Sharenting risks through the Roman Atwood stalking case: how children's photos feed stalkers, identity fraud and AI abuse, and how to share more safely.
Rose · · 20 min readHow to Avoid Getting Doxxed Online
How doxxing works, how common it is, and how to reduce your digital footprint: data broker opt-outs, Google removals, photo location and what to do if doxxed.
Marcus · · 17 min readThis Week in Cybersecurity: Week 41
Week 41: 8.8 million Danish ID records exposed through one company account, rogue Google certificates from hijacked registries, and two more NetScaler flaws.
Marcus · · 19 min readFake CAPTCHA Scams: How to Spot Them
Fake Cloudflare and reCAPTCHA checks trick you into pasting malware into your own PC. How the scam works, how to spot it, and what to do if you ran the command.
Lucas · · 14 min readThis Week in Cybersecurity: Week 40
Week 40: Citrix NetScaler flaws mass-exploited worldwide, an exploited Apple flaw patched for older iPhones, and attacks on Cisco SD-WAN and FortiMail.
Marcus · · 16 min readThe EU's €10,000 Cash Cap and Your ID Data
The EU's €10,000 cash cap and stricter crypto KYC start in July 2027. Who has to show ID, who doesn't, and why the bigger risk is where the ID data ends up.
Rose · · 12 min readThis Week in Cybersecurity: Week 39
Week 39: a Chrome and Windows zero-day chain used in real attacks, 9.8 flaws exploited in F5 and Check Point gear, and Bitget loses $351.6 million to attackers.
Marcus · · 17 min readShinyHunters FBI Hack: What's Confirmed
The FBI confirms ShinyHunters took employee data through an unpatched PeopleSoft server. What is verified, what isn't, and what PeopleSoft admins should check.
Marcus · · 14 min readThis Week in Cybersecurity: Week 38
Week 38: a Chrome patch gap turned already-fixed bugs into zero-days, two Cisco flaws came under attack at once, and a human attacker outran every AI agent.
Marcus · · 14 min readThis Week in Cybersecurity: Week 37
Week 37: Russian state hackers used Claude to rebuild malware, a maximum-severity GitLab flaw was exploited within hours, and Patch Tuesday broke records.
Marcus · · 12 min readAI Cyberattacks: What Actually Changed
Hundreds of AI agents breached 395 organisations in 48 countries. The tools were old and the flaw was patched three days earlier. What changed is the clock.
Marcus · · 10 min readAI CSAM Ruling: What It Actually Means
A US appeals court held that possessing self-made AI CSAM at home is protected speech. What the ruling covers, what stays a felony, and who it actually affects.
Rose · · 11 min readThis Week in Cybersecurity: Week 36
Week 36: a Chrome zero-day under active attack, a JFrog admin-token exploit, a Thomson Reuters court data breach, and schools hit by old PaperCut bugs.
Marcus · · 11 min readThis Week in Cybersecurity: Week 35
Week 35: Actively exploited flaws hit PaperCut, Gitea, Oracle WebLogic and cPanel, plus a Berlin ransomware refusal and a nuclear-records breach via ownCloud.
Marcus · · 11 min readDevice Trust: Why MFA Alone Isn't Enough
Stolen sessions walk past MFA, so device trust became the answer. But device registration is self-service and compliance is self-reported. Here is what holds.
Lucas · · 12 min readThis Week in Cybersecurity: Week 34
Week 34: 14,500 hijacked Dahua cameras, a Rust crate with 245M downloads poisoned, WhatsApp device-linking abuse, and a CVSS 10.0 that needed nobody at all.
Marcus · · 10 min readThis Week in Cybersecurity: Week 33
Week 33: 737 fake VPN extensions still in the Chrome store, a Windows kernel zero-day under active attack, Macs mined via Screen Sharing, passkey attacks.
Marcus · · 12 min readEU Cyber Resilience Act: What Changes
The EU Cyber Resilience Act starts to bite on 11 September 2026. What it changes about the smart devices you buy, and what to check before you buy one.
Rose · · 13 min readAndroid Sideloading Rules: What Changes
Google now verifies who builds every Android app. What changes in September 2026, what it actually stops, what it doesn't, and what to do before it lands.
Marcus · · 10 min readScam Phone Numbers in Google AI Overviews
Google and ChatGPT are surfacing scam customer service numbers as fact. Here's how the fraud works, the real cases behind it, and how to check before you call.
Lucas · · 9 min readMac Outbound Firewall: What macOS Misses
macOS's built-in firewall only inspects incoming traffic. Here's how to see and control what your Mac quietly sends out, using LuLu - a free, open-source tool.
Rose · · 12 min readHow to Vibe Code Securely
A technical, plain-language guide to building AI-generated apps that don't leak - secrets, auth, injection, and what never to paste into your AI agent.
Marcus · · 23 min readEU Chat Control: What It Means for You
The EU's Chat Control mass-scanning law is back and extended to 2028. Here's what it means for your private messages and email, and how to reduce your exposure.
Rose · · 9 min readMost Private Browser for iPhone
Every iPhone browser runs on the same engine. Here's what really differs between Safari, Chrome, Brave, Firefox and Orion - and which one leaks least.
Marcus · · 9 min readWhat Are Cybersecurity Services?
A plain-language guide to what cybersecurity services include, why small businesses get targeted, and how to spot a good provider from an expensive one.
Lucas · · 8 min readWhat Is Smishing? How to Stop Scam Texts
Smart people click smishing links too. Why SMS scams work on the informed - and the iPhone and Android settings that protect you when you don't notice.
Lucas · · 8 min readBiggest Cybersecurity Threats to Companies
Everyone talks about AI attacks. Real breaches are more boring - stolen sessions, ClickFix and RMM abuse. Here's what's actually getting companies owned.
Marcus · · 8 min readPhishing Simulation: Why It Works
Most breaches start with one rushed click. Here's how controlled phishing simulations turn staff from your weakest link into your first line of defence.
Marcus · · 9 min readPassword Best Practices: Passkeys & MFA
Protect your accounts with strong passwords, passkeys and MFA - a plain-language guide to phishing-resistant authentication for people and for teams.
Lucas · · 7 min readHow to Secure Your iPhone
Harden a standard iPhone using only built-in iOS settings - Advanced Data Protection, per-app location, phishing defence and more. No extra apps needed.
Marcus · · 8 min readHow to Secure Your Android Phone
Secure your Android phone in 2026 using only built-in settings and your Google account - no extra apps. Covers screen lock, permissions, 2FA and anti-theft.
Lucas · · 7 min read10 Most Private & Secure Browsers (Ranked)
Ten popular browsers ranked from most private and secure to least - Tor, Brave, Firefox, Safari, Chrome and more, in plain language, no jargon.
Marcus · · 8 min readNo articles match that filter. Try another topic or clear the search.
Get new posts in your feed reader
One feed with every new article and the weekly roundup. Nothing to sign up for, nothing collected.
https://bluwarden.com/feed.xmlOpenNew to feeds? Paste the address into a reader such as NetNewsWire, Feedly or Thunderbird and new posts turn up on their own.