Data & infrastructure
-
Cursor flaws expose AI coding risk
Cato AI Labs says two critical Cursor IDE vulnerabilities show how prompt injection can escape an agent sandbox and reach developer workstations.
-
Apple patch cadence compresses under AI
Apple has released some security fixes ahead of broader updates, acknowledging that AI may shorten the time between disclosure and exploitation.
-
NCSC puts CNI resilience into design
The NCSC’s operational technology guidance pushes critical infrastructure operators towards secure design, segmentation, monitoring, and specialist testing.
-
EU-US data deal faces independence test
noyb says a US Supreme Court ruling has weakened the FTC’s independence, putting a key enforcement pillar of the EU-US Data Privacy Framework under pressure.
-
Cisco flaw reaches network management layer
Cisco’s July advisory set includes a Catalyst Center arbitrary file read flaw, putting network management platforms back into patch planning.
-
AutoJack breaks localhost trust in AI agents
Microsoft’s AutoJack research shows how a malicious web page rendered by an AI browsing agent can reach local control planes.
-
Intruder opens exposure management free tier
Intruder’s permanent free plan gives smaller organisations access to vulnerability scans, cloud checks, attack surface monitoring, and limited AI pentesting.
-
Ofgem puts supplier security into energy resilience
Ofgem’s downstream gas and electricity guidance points to a more structured model for managing supplier security risk across the UK energy system.
-
Check Point enters AWS sovereign cloud
Check Point’s Cloud Firewall availability on AWS European Sovereign Cloud adds security tooling to Europe’s regulated cloud procurement market.
-
EU tech sovereignty targets dependency
The Commission’s tech sovereignty package links cloud, AI, chips, open source, and energy digitalisation to Europe’s digital dependency problem.