Data & infrastructure
-
EU targets AWS and Azure under DMA
The European Commission’s preliminary move to bring AWS and Azure under the Digital Markets Act brings cloud concentration, enterprise dependency, and infrastructure switching into regulatory focus.
-
Tata breach tests supplier controls
Reuters reports that Tata Electronics has tightened internal access controls after a data breach involving claims of leaked Apple, Tesla, TSMC, and Qualcomm material.
-
Cisco flaw reaches communications layer
An exploited Cisco Unified Communications Manager flaw exposes how collaboration and telephony platforms can become privileged infrastructure risk.
-
Exploited PTC flaw hits engineering systems
A critical exploited vulnerability in PTC Windchill and FlexPLM puts product lifecycle management systems in the spotlight for manufacturing and supply chain risk.
-
Bank tests cloud disruption risk
The Bank of England is using CORST26 and SIMEX to examine how disruption at a major cloud provider could affect financial market infrastructure.
-
Hotel phishing campaign targets Europe
Microsoft says hospitality organisations in Europe and Asia are being targeted with photo-themed phishing that delivers a persistent Node.js implant.
-
Accenture makes $4.2bn OT cyber move
Accenture’s planned Dragos, runZero, and NetRise deals would combine OT detection, asset intelligence, and firmware visibility for critical infrastructure security.
-
ICO complaints duty raises accountability
UK organisations must now have a data protection complaints process, adding a formal accountability layer around data handling, security concerns, and post-incident evidence.
-
NCSC warns on Fortinet VPN exposure
UK organisations using Fortinet SSL VPNs have been urged to investigate after leaked credentials were linked to targeting of internet-facing firewalls and gateways.
-
NGINX flaws widen patch pressure
Fresh NGINX vulnerabilities affecting gateway, open source, and commercial versions put infrastructure visibility and patch coordination back in focus.