Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 96 stories in 24 hours
UK Cyber Security News
👉 Anything related to UK, NHS, NCSC, UK companies
55stories this week
6today
the last seven days
Most fromCSO Online UK, Computer Weekly, GOV.UK, Security Affairs
In the news hereMicrosoft6Google6OpenAI4ConnectWise2SafePay2Qilin1APT29 (Cozy Bear)1
MyCyberWay trainingRegulation lands on the security team. We teach how it works day to day.See how it's taught
-
The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.
Dark Reading
-
Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier…
The Register
-
Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than 400 previously undiscovered vulnerabilities in widely used Java libraries — and now the companies are inviting customers to submit their own code dependencies to a new service, Lightwell Clearinghouse, for review. They’ll be looking for bugs such as the…
CSO Online UK
-
The owner of a ransomware remediation company is facing trial for defrauding customers. Zohar Pinhasi, also known as “Zack Silver” and “Zack Green,” has been arraigned in New York on wire fraud charges for allegedly defrauding clients of his ransomware remediation company, MonsterCloud. Pinhasi falsely claimed he could recover documents encrypted by ransomware without paying…
CSO Online UK
-
OpenAI continues to report incidences of “misaligned” behavior by its AI models, with three new reports dropping on Oct. 2. However, they describe relatively minor issues compared to previous alignment reports and notices covering its attacks on Hugging Face, Rubygems, and a German programming wiki. The first of the new reports described how an instance…
CSO Online UK
-
Zohar Pinhasi stands accused of duping distressed ransomware victims by offering fake cyber services that he could not provide.
Computer Weekly
-
The NCSC’s joint advisory names perennial offender Integrity Technology, accusing it of facilitating cyber attacks on behalf of Flax Typhoon, a Chinese state threat actor.
Computer Weekly
-
For the third week running, Citrix has issued a critical security warning to customers managing their own NetScaler ADC and Netscaler Gateway instances, this time warning of a memory overflow vulnerability enabling denial of service or remote code execution. This week’s vulnerability affects ADC and Gateway when configured as a SAML (Security Assertion Markup Language)…
CSO Online UK
-
A component of Nvidia’s GPU monitoring software that enterprises use to keep tabs on their AI training and inference infrastructure has been vulnerable to denial-of-service (DoS) and information disclosure attacks. The Nvidia DCGM Exporter contains an unauthenticated resource exhaustion vulnerability that could allow remote attackers to crash the monitoring service and potentially disrupt AI workloads…
CSO Online UK
-
No word on exploitation status, but a 9.5 severity score suggests time is of the essence…
The Register
-
An OpenAI bot overloaded Wikimedia, attacked a system at the foundation and attempted to change entries…
Computer Weekly
-
The UK, US and allies have issued an alert detailing malicious activity linked to China’s Integrity Technology Group…
Infosecurity Magazine
