Data & infrastructure
-
Microsoft patch load tests enterprise discipline
NHS England has highlighted Microsoft’s June security updates, including an exploited Defender flaw and critical remote code execution vulnerabilities.
-
Cisco SD-WAN flaw reaches exploited list
NHS England has warned that Cisco is aware of exploitation of a Catalyst SD-WAN vulnerability that can allow root-level command execution.
-
Ivanti Sentry flaws expose security gateways
NHS England and CERT-EU have warned organisations to patch critical Ivanti Sentry vulnerabilities after exploitation of one flaw was reported in the wild.
-
CERT-EU warns on exploited Netlogon flaw
CERT-EU says a critical Windows Netlogon vulnerability affecting domain controllers is being exploited, putting enterprise identity infrastructure under immediate pressure.
-
Europol disrupts ransomware laundering pipeline
European law enforcement has helped dismantle AudiA6, a crypto laundering service suspected of processing more than €336 million for ransomware and cybercrime groups.
-
Another reminder that retired protocols are an active risk
Check Point’s exploited VPN flaw shows how deprecated remote access protocols can remain live inside security infrastructure long after retirement should have removed them.
-
Risk Ledger finds supplier incidents hit four in five UK organisations
Risk Ledger research found that 82.4% of UK organisations experienced a supply chain cyber incident in the past year, with many unable to map exposure quickly.
-
Cybanetix packages managed service for enterprise AI risk
Cybanetix has launched a managed AI security service covering employee AI use, AI governance, embedded agents, posture management, testing, and SOC monitoring.
-
Cyera raises $600m as AI data controls draw capital
Cyera’s $600 million round at a $12 billion valuation reflects enterprise demand for data controls as AI agents gain access to sensitive systems.
-
CISA cuts top vulnerability remediation window to three days
CISA’s new directive gives US civilian agencies three days to remediate the highest-risk vulnerabilities, setting a faster benchmark for exposed system response.