Data & infrastructure
-
Cisco flaw reaches network management layer
Cisco’s July advisory set includes a Catalyst Center arbitrary file read flaw, putting network management platforms back into patch planning.
-
AutoJack breaks localhost trust in AI agents
Microsoft’s AutoJack research shows how a malicious web page rendered by an AI browsing agent can reach local control planes.
-
Intruder opens exposure management free tier
Intruder’s permanent free plan gives smaller organisations access to vulnerability scans, cloud checks, attack surface monitoring, and limited AI pentesting.
-
Ofgem puts supplier security into energy resilience
Ofgem’s downstream gas and electricity guidance points to a more structured model for managing supplier security risk across the UK energy system.
-
Check Point enters AWS sovereign cloud
Check Point’s Cloud Firewall availability on AWS European Sovereign Cloud adds security tooling to Europe’s regulated cloud procurement market.
-
EU tech sovereignty targets dependency
The Commission’s tech sovereignty package links cloud, AI, chips, open source, and energy digitalisation to Europe’s digital dependency problem.
-
DORA incidents expose cross-border finance risk
EU supervisors’ first DORA incident report shows how ICT failures and shared providers can spread disruption across financial services.
-
BlueHammer reaches ransomware exposure
CISA’s ransomware link for Microsoft Defender’s BlueHammer flaw changes the operational framing from routine patching to endpoint privilege and containment.
-
Aflac Japan breach exposes portal risk
Aflac says unauthorised access to systems linked to its Japan business exposed policy, personal, and bank account information.
-
GitHub advisory surge strains vulnerability pipeline
GitHub says its Advisory Database is processing record vulnerability volume, exposing pressure on the systems behind dependency alerts and open source risk.