Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
UK Industry News
Attacks, government and regulation closest to home.
32stories this week
1today
the last seven days
Most fromCSO Online UK, Computer Weekly, CyberScotland, ITPro
In the news hereMicrosoft5Google5OpenAI4Linux2APT29 (Cozy Bear)1
MyCyberWay Premium JobsEvery UK cyber security role, scored against your CV.184 UK cyber security roles in the last run · 86 at employers with a sponsor licenceExplore Premium Jobs
-
Bank of America has had to spend big on IT in response to an AI security audit and findings that its anti-money-laundering (AML) controls were lacking. The bank was fined a whopping $1.2 billion for money laundering offences this week, after banking authorities identified a lax attitude to compliance. “We understand the seriousness of compliance,…
CSO Online UK
-
The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an attacker operating inside a virtual machine (VM) could cross the isolation boundary and access the underlying host. Dubbed PwnEscape and tracked as CVE-2026-99999, a flaw allowed guest-controlled packet metadata to trigger a write that changes an IPv4 header after…
CSO Online UK
-
Officers and other staff were using an unapproved third-party platform to share data on suspected shoplifters…
ITPro
-
Organizations running self-hosted BeyondTrust Remote Support should treat exposed appliances as potentially compromised after a suspected Chinese espionage group exploited a critical zero-day to gain root control, access credential vaults, and establish footholds for lateral movement, according to Mandiant and Google Threat Intelligence Group. “Organizations should prepare for potential widespread exploitation following this disclosure,” Google…
CSO Online UK
-
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are calling for tougher rules and the establishment of a new international body overseeing best practice for AI development. In an open letter the AI specialists — 487, at time of publication, including many…
CSO Online UK
-
Fresh research suggests recent panic over AI-generated malware may be overblown. Last month Anthropic detailed how Russia-linked cyberespionage group Midnight Blizzard used Claude to rebuild malware each time security tools flagged its backdoor as malign. “We observed GTG-20006 operate through customized AI-driven workflows that automated much of their operations from development, infrastructure acquisition, phishing, persistence…
CSO Online UK
-
That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking your movements and collecting your data, without you having to do a thing. This “zero-click mercenary spyware,” dubbed “AdFection,” is increasingly exploiting a sprawling online advertising ecosystem ripe for abuse, according to researchers at The…
CSO Online UK
-
Although the Jev model rolled out last month by TypeSafe claims to have significant advantages over traditional LLMs, a security report published Wednesday argued that its streamlined approach makes it more vulnerable to some kinds of attack, compared to traditional LLMs. “In some cases, [Jev] is even more vulnerable to attacks, with both adversarial text…
CSO Online UK
-
At a critical moment for Britain’s national security, the Ministry of Defence’s upgraded SIEM and security analytics platform is being delivered by Centerprise and Elastic.
Computer Weekly
-
The UK’s data protection watchdog warns of an “ongoing failure” by the Metropolitan Police Service to restrict staff from using unauthorised IT services…
Computer Weekly
-
A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers to write arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply available fixes after confirming that the flaw is being exploited in the wild. The flaw affects the product’s Advanced Malware Protection (AMP)…
CSO Online UK
-
Attackers are exploiting a newly disclosed flaw in Palo Alto Networks’ PAN-OS firewall software to run code with root privileges, and US federal agencies have been ordered to fix it and check for compromise by October 17. Palo Alto Networks disclosed the vulnerability, tracked as CVE-2026-0322, in a security advisory published October 14. The flaw…
CSO Online UK
