Data & infrastructure
-
Ransomware crews exploit VMware vCenter flaw
A critical VMware vCenter vulnerability already under active exploitation is listed by CISA as associated with known ransomware campaigns, raising the stakes around unpatched management servers.
-
Quorum Cyber agrees deal for Ontinue
Quorum Cyber has agreed to acquire Ontinue, combining two Microsoft-focused managed-security providers with operations spanning the UK, continental Europe, and North America.
-
NIST tightens identity token guidance
NIST has finalised guidance for protecting identity tokens and assertions used in cloud, federation, API, single sign-on, and workload-access environments.
-
Cisco email gateway flaw exploited in attacks
Cisco has patched an actively exploited Secure Email Gateway vulnerability that can let unauthenticated attackers execute operating-system commands with root privileges.
-
Thales launches UK-hosted cloud HSMs
Thales has launched UK-hosted cloud hardware security modules, keeping cryptographic-key operations and disaster recovery within Britain for organisations with sovereignty requirements.
-
ESpanix moves DDoS defence into exchange
Spain’s largest internet exchange has deployed in-network DDoS mitigation across Madrid and Barcelona, offering protection to more than 200 connected networks.
-
Lagarde warns of Europe’s AI dependence
ECB President Christine Lagarde has warned that Europe’s reliance on imported AI technology could become a strategic vulnerability as the technology spreads through essential services.
-
ScreenConnect flaw confirmed under exploitation
CISA has added a high-severity ScreenConnect client vulnerability to its Known Exploited Vulnerabilities catalogue after ConnectWise released version 26.6.5 for affected deployments.
-
GitLab flaw enters exploited catalogue
CISA has classified GitLab’s maximum-severity path-traversal vulnerability as exploited in the wild, days after patches were released for self-managed Community and Enterprise Edition installations.
-
Fortaegis raises $50m for secure compute
Amsterdam-based Fortaegis has raised $50 million to commercialise hardware-rooted security technology aimed at defence, telecoms, data centres, autonomous systems, and other sensitive computing environments.