Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
UK Cyber Security News
👉 Anything related to UK, NHS, NCSC, UK companies
51stories this week
2today
the last seven days
Most fromCSO Online UK, Computer Weekly, NCSC, DataBreaches.net
In the news hereGoogle6Microsoft5OpenAI4Linux2SafePay1Qilin1APT29 (Cozy Bear)1
MyCyberWay trainingRegulation lands on the security team. We teach how it works day to day.See how it's taught
-
This DPIA covers live facial recognition software, hardware and associated operational processing.
GOV.UK
-
SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion to pressure victims into paying. CISA, the FBI, the US Secret Service, Germany’s Landeskriminalamt Rheinland-Pfalz, and two UK law enforcement agencies jointly published an advisory this week on SafePay, a ransomware group they describe as one of the most…
Security Affairs
-
Governments and companies are scrambling to protect their websites, as Amazon says it experienced attacks before the warning was made public.
BBC News
-
AI agents are getting more inventive in finding ways to circumvent safeguards to prevent bad behavior, OpenAI has revealed. On Tuesday, it reported two incidents, both involving the agent disabling or interfering with its alignment monitoring, and in one case directly lying about having done so. “In two internal coding tasks, agents weakened misalignment monitoring…
CSO Online UK
-
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the internet. The flaws discovered in the PHP scripting language could allow attackers to perform unauthenticated remote code execution (RCE). On Wednesday morning, the PHP Foundation released patches for affected versions, and said it…
CSO Online UK
-
EVP of Microsoft Security Hayete Gallot writes in a blog post that AI agents operating independently within companies could be a serious security threat. According to Microsoft, today’s most advanced AI models cannot be fully trusted. Not because they are malicious, but because they are trained to achieve goals and can take unexpected shortcuts to…
CSO Online UK+1 source
-
Patch or go offline, say UK, US and EU agencies as two AI-discovered flaws in PHP, the language behind most websites, allow unauthenticated remote code execution…
Computer Weekly
-
Organisations unable to apply key fixes to widely used software should consider taking their websites down, UK and international cybersecurity officials have warned.
Sky News
-
Attackers are using stolen connection keys exposed in a TeamUpdraft security breach to install malicious plugins on affected WordPress sites and establish persistent access. Sites already compromised may remain at risk even after the exposed credentials are revoked. The attacks followed unauthorized access to TeamUpdraft’s website. The company, which develops the UpdraftPlus backup plugin and…
CSO Online UK
-
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP.
NCSC
-
UKFull text · OGL
Jailed Birmingham accountant ordered to repay more than £300,000 after targeting Covid support schemes
Fraudster exploited three separate schemes designed to support businesses during the pandemic…
GOV.UK
-
Private keys associated with eight intermediate certificate authorities operated by Indian digital trust provider eMudhra have been compromised, potentially allowing attackers to forge trusted certificates and impersonate websites or services, according to Google and Mozilla. “On 17th October @ 20:06 UTC, Mozilla received a report to certificates@mozilla.org, forwarded by the Chrome Root program, that the…
CSO Online UK
