Data & infrastructure
-
Novo Nordisk incident tests pharma resilience
Novo Nordisk has confirmed unauthorised access to limited internal IT systems, with separate extortion claims increasing scrutiny of clinical data exposure, pharma resilience, and incident disclosure.
-
Databricks moves further into security data
Databricks’ planned acquisition of Panther reflects enterprise pressure to consolidate security telemetry, automate investigation, and rethink legacy SIEM economics.
-
FortiSandbox reports need careful separation
Critical FortiSandbox vulnerabilities require urgent remediation, while public exploitation claims need to be separated from what Fortinet has confirmed.
-
LiteSpeed flaw exposes shared hosting tenants
Active exploitation of a LiteSpeed cPanel plugin flaw shows how shared hosting environments can turn tenant-level access into root-level operational exposure.
-
Fortra PAM flaw hits privileged access control
A critical Fortra Core Privileged Access Manager flaw shows how defects inside PAM platforms can weaken controls built to contain administrator risk.
-
Splunk flaw reaches the telemetry layer
A critical Splunk Enterprise flaw shows how security monitoring platforms can become infrastructure risk when unauthenticated access reaches supporting data services.
-
Malicious plugins put AI keys at risk
A JetBrains Marketplace campaign shows how developer plugins, AI assistants, and API keys can become part of the software supply chain risk surface.
-
Ofcom details the telecoms resilience bar
Ofcom’s updated guidance sets operational expectations for UK communications providers across network design, monitoring, incident handling, third-party operations, and backup power.
-
Anthropic suspension exposes AI dependency
A US directive forced Anthropic to suspend access to Fable 5 and Mythos 5 for foreign nationals, exposing dependency risk around frontier AI security tools.
-
UK tests AI in cyber defence
A UK government pilot found 407 security findings across nine organisations using frontier AI models, showing defensive potential and governance pressure.