Data & infrastructure
-
Nottingham student records incident exposes platform risk
The University of Nottingham says student and alumni data was accessed in a cyber incident affecting its Campus Solutions records platform.
-
NCSC warns software dependencies are becoming attack paths
The NCSC has warned that compromised open source packages can carry malware through dependency chains, software builds, and automated deployment pipelines.
-
Novo Nordisk says cyber incident exposed trial data
Novo Nordisk has disclosed unauthorised access to internal IT systems, with copied non-public data including limited pseudonymised clinical trial information.
-
SSEN joins European grid cyber group
SSEN Transmission’s ENCS membership links UK electricity network resilience with European OT security collaboration, testing, and knowledge sharing across critical energy infrastructure.
-
Ofcom presses platforms on crisis content controls
The regulator has warned online services after Belfast unrest, placing crisis protocols, law enforcement channels, and illegal content controls under operational scrutiny.
-
Chrome zero-day intensifies browser patch pressure
Google has fixed a V8 flaw exploited in the wild, making browser update discipline a live enterprise exposure rather than routine endpoint maintenance.
-
Anthropic’s Fable 5 forces AI data governance questions
Anthropic’s guarded frontier model brings advanced software engineering capability to wider use while its retention policy and cyber safeguards create new enterprise governance decisions.
-
Gogs flaw puts self-hosted Git servers at risk
Rapid7 says an authenticated command execution flaw in Gogs can expose private repositories, credentials, and development infrastructure where self-hosted Git is weakly governed.
-
Datacentre equipment flaws expose uptime risk
Claroty research into UPS and HVAC equipment shows how datacentre resilience depends on cyber-physical systems that often sit outside normal security governance.
-
Palo Alto and Deutsche Telekom bring sovereign SecOps to Europe
A new managed security operations service places European data control, key governance, support access, and auditability at the centre of regulated-sector cyber procurement.