Data & infrastructure
-
Microsoft pushes faster Windows patching
Microsoft says AI will increase the pace and volume of Windows security updates, forcing organisations to revisit patch windows, deferrals, and change risk.
-
Dialogflow flaw exposes AI isolation risk
A patched Dialogflow CX flaw shows how AI chatbot infrastructure can turn a single agent permission into conversation exposure and cross-agent risk.
-
Claude Code alert becomes trust test
China’s warning over Claude Code should be treated as a disputed product-security and geopolitical trust story, not a confirmed backdoor case.
-
SAP commitments shift ERP support risk
SAP’s binding EU commitments on maintenance and support reshape a long-running enterprise dependency issue for organisations still running critical ERP systems.
-
Accenture incident raises supplier secrets risk
Accenture has acknowledged an isolated security matter after a threat actor claimed to have stolen source code, keys, Azure tokens, and configuration files.
-
Rubrik makes London EMEA headquarters
Rubrik plans to invest more than $500 million in the UK and make London its EMEA headquarters, linking the move to cyber recovery, sovereign cloud, and AI resilience.
-
Fortinet exposure keeps edge risk in focus
The NCSC has urged UK organisations using Fortinet firewalls and VPN gateways to investigate potential compromise after a global credential targeting campaign.
-
NCSC sets out Cyber Shield plan
The NCSC and DSIT are developing Cyber Shield, a proposed national-scale approach to agentic AI cyber defence for critical UK networks and wider resilience.
-
Dutch public bodies get threat-sharing mandate
The Dutch NCSC says STIX and TAXII 2.1 are now mandatory for government bodies, putting machine-readable threat intelligence into public-sector procurement and operations.
-
MPs warn UK risks AI dependency
The Science, Innovation and Technology Committee says the UK lacks a coherent strategy for technology sovereignty as AI becomes central to global competition.