Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
UK Industry News
Attacks, government and regulation closest to home.
32stories this week
1today
the last seven days
Most fromCSO Online UK, Computer Weekly, CyberScotland, ITPro
In the news hereMicrosoft5Google5OpenAI4Linux2APT29 (Cozy Bear)1
MyCyberWay Premium JobsEvery UK cyber security role, scored against your CV.184 UK cyber security roles in the last run · 86 at employers with a sponsor licenceExplore Premium Jobs
-
Google runs a single UK cloud region, so when one London zone lost power, there was nowhere to failover – most services recovered by late afternoon, but courts are still down…
Computer Weekly
-
On the night of 11 October, someone remotely put the cold cases of several hundred French supermarkets into defrost. At Intermarché and Netto stores, fridges and freezers warmed to around 50°C and stayed there for about six hours, according to Les Mousquetaires, which expects losses in the tens of millions of euros. By morning, staff…
CSO Online UK
-
Quantum-resistant cryptography presents security leaders with various challenges, but CISOs in industries dependent on IoT and operational technology (OT) devices may face a particularly difficult journey to quantum readiness, especially if sensitive information that must remain confidential for years passes through those devices. A recent report from cybersecurity firm Forescout highlights these challenges in the…
CSO Online UK
-
F5 is once again disclosing cybersecurity flaws in its core offerings. The app delivery and security provider has released out-of-band (OOB) security patches that address multiple flaws in NGINX, its high-performance software that controls digital traffic for websites. These include three critical-severity flaws that could allow attackers to crash systems, execute code, and launch denial…
CSO Online UK
-
Police Scotland is pleased to introduce the Little Book of Fraud, reproduced with the kind permission of the Metropolitan Police Service. The booklet is to help people recognise fraud at an early stage, protect themselves, their families and communities and…
CyberScotland
-
The Security Think Tank explores the intersection of GDPR and artificial intelligence, considering how data protection standards in the UK and Europe are changing in this new paradigm.
Computer Weekly
-
Microsoft and Nvidia are urging enterprises to assess the security of open-weight AI models throughout deployment, warning that changes to model weights and configurations can weaken safeguards even when a model retains its ability to perform assigned tasks. In a joint paper published last week, the companies identified 30 risk types across five categories and…
CSO Online UK
-
ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments after a credential tied to its Cloud Backup platform was compromised and used to authenticate into customer tenants, prompting Huntress to identify suspicious sign-ins across 162 organizations. The activity involved the Cloud Backup application obtaining Microsoft Graph access tokens…
CSO Online UK
-
Ask your infrastructure lead who owns the service account behind the overnight finance batch and notice how long the answer takes. In many of the environments I’ve reviewed, the engineer who set it up left years ago and the password has been sitting in a vault, or sometimes a plain config file, ever since. It…
CSO Online UK
-
Malware is evolving rapidly, driven by advances in AI and changes in computing infrastructures. Security professionals must continuously educate themselves on these trends to defend against increasingly sophisticated threats. The traditional game of cat and mouse between security attackers and defenders has got fiercer with fresh techniques evolving and older less effective approaches falling out…
CSO Online UK+1 source
-
Researchers have discovered a first-of-its-kind supply-chain vulnerability in OpenAI’s official skills repository. OpenAI maintains an official GitHub repository of skills that teach AI agents how to work with various platforms and services. As an official skill, these components are often given an implicit level of trust because they are contributed or vetted by verified vendors.…
CSO Online UK
-
A chain of vulnerabilities in Google’s Chrome browser could have enabled researchers to take control of one billion Windows machines worldwide — and it cost them just $40,000 in AI compute time to discover it. Researchers at Xbow USA worked for six days on developing the exploit, which earned them a $250,000 bug bounty from…
CSO Online UK
