Data & infrastructure
-
Lidl breach exposes supplier data risk
Lidl customer notices in Belgium and the Netherlands say attackers stole online shop customer data from a separately stored file at an IT service provider.
-
NCSC warns on Russian router targeting
The NCSC and allied agencies say Russian FSB-linked actors are exploiting weakly configured routers and network devices across critical sectors.
-
Databarracks expands resilience services
Databarracks’ acquisition of Acumen extends its business continuity capabilities as cyber recovery, crisis planning, and operational resilience continue to converge.
-
Microsoft pushes faster Windows patching
Microsoft says AI will increase the pace and volume of Windows security updates, forcing organisations to revisit patch windows, deferrals, and change risk.
-
Dialogflow flaw exposes AI isolation risk
A patched Dialogflow CX flaw shows how AI chatbot infrastructure can turn a single agent permission into conversation exposure and cross-agent risk.
-
Claude Code alert becomes trust test
China’s warning over Claude Code should be treated as a disputed product-security and geopolitical trust story, not a confirmed backdoor case.
-
SAP commitments shift ERP support risk
SAP’s binding EU commitments on maintenance and support reshape a long-running enterprise dependency issue for organisations still running critical ERP systems.
-
Accenture incident raises supplier secrets risk
Accenture has acknowledged an isolated security matter after a threat actor claimed to have stolen source code, keys, Azure tokens, and configuration files.
-
Rubrik makes London EMEA headquarters
Rubrik plans to invest more than $500 million in the UK and make London its EMEA headquarters, linking the move to cyber recovery, sovereign cloud, and AI resilience.
-
Fortinet exposure keeps edge risk in focus
The NCSC has urged UK organisations using Fortinet firewalls and VPN gateways to investigate potential compromise after a global credential targeting campaign.