Senior Cyber Safety Briefing – October 18, 2025

🚨 ALERT – Envoy Air targeted in large software‑supply‑chain hack
👉 Why it matters – The airline (which handles hundreds of flights daily) confirmed a hack tied to vulnerabilities in Oracle E‑Business Suite apps that is part of a broader extortion campaign by the hacker group Cl0p. Although customer data wasn’t reported compromised, business contact info was. Reuters
📣 Call to Action – If you travel or have accounts with airlines, check for any alerts from them, change related passwords, and monitor your bank/credit statements for odd activity.

📈 ECONOMY & SECURITY – Microsoft revokes 200+ certificates used by ransomware group
👉 Why it matters – Microsoft disabled more than 200 digital certificates used to sign malicious files for a major ransomware‑actor (“Vanilla Tempest”/Rhysida). This reduces risk of future attacks that look “legit” even though they’re not. The Hacker News
📣 Call to Action – If you have Windows or Microsoft‑signed software, ensure OS & apps are up to date and that your antivirus/anti‑malware definitions are current.

🔥 PRIVACY & BIG TECH – F5 Networks breach linked to Chinese‑state‑actor, supply‑chain alarm
👉 Why it matters – F5 (whose gear secures many large organizations) was hacked, reportedly by a China‑linked actor, with systems compromised for at least a year. This attack has broad implications for the “chain of trust” in software/hardware updates. Reuters+1
📣 Call to Action – If you manage or depend on enterprise gear (or simply rely on service providers using F5 products), ask whether their security is verified, and apply any announced patches or mitigations promptly.

🧠 MUST‑READ – Bank fraud alert: Scam texts/calls ahead of record‑fraud measures
👉 Why it matters – A recent banking‑industry alert shows scammers increasingly spoof bank names and send fake texts/calls to trick people into giving personal/financial data. Seniors are frequently targeted. Bank Policy Institute
📣 Call to Action – Never click links or call back phone numbers from unexpected texts/calls claiming to be your bank. Instead, call the bank directly using the number from your statement.

💡 OPPORTUNITY – Medicare‑influenced scam warning for open‑enrollment season
👉 Why it matters – As the Medicare open‑enrollment window opens, fraudulent “free gift” or “you must update now” calls/emails increase. Scammers use this to steal identity or money. AARP States
📣 Call to Action – If you get a call/email about Medicare that you didn’t initiate, hang up. Visit medicare.gov or call 800‑633‑4227 to verify first.

✅ Quick Safety Tip of the Day
If a call or message urges you to act now (send money, reveal info, update your account) — pause, breathe, and verify directly through trusted channels.

(AI was used to create this article.)

🙋 Closing Note

Stay safe, stay secure, stay curious, and remember my friends—you’re never too old to outsmart a scammer👋