Critical systems
-
EU cyber rules can require reports on unsupported industrial devices without forcing fixes
ENISA says Cyber Resilience Act reporting obligations can persist after connected products reach end of support, while manufacturers may not have a corresponding legal duty to repair vulnerabilities in old devices.
-
ESET traces Ukrainian grain company cyberattack from espionage access to destructive wiping
ESET has linked a 2025 attack on a Ukrainian grain company to UAC-0099 and Sandworm, disclosing new details of the MythicRatatoskr backdoor in research published on 22 October 2026.
-
Education ransomware claims rise 54% as European institutions report attacks
Comparitech recorded 77 confirmed ransomware incidents and unverified criminal claims affecting education in the third quarter, including four UK cases and confirmed incidents involving European universities.
-
32 UK government services offline over PHP2Shell
Thirty-two UK government services are offline amid critical PHP2Shell vulnerabilities, as security agencies warn of active exploitation and experts highlight the risks posed by ageing infrastructure and hidden software dependencies.
-
SafePay ransomware advisory documents at least 600 affected organisations
US, British and German authorities have documented at least 600 organisations affected by SafePay ransomware, identifying compromised credentials, vulnerable network devices and attacks on backup infrastructure.
-
French cyber authority identifies further Stormshield firewall and management vulnerabilities
France’s CERT-FR has issued another Stormshield security advisory, this time covering firewall and central management vulnerabilities associated with code execution, SQL injection, security bypass and service disruption.
-
Northern Ireland grants consent for UK cyber resilience reforms
Northern Ireland granted legislative consent on 19 October for relevant provisions of the UK Cyber Security and Resilience Bill. The proposed reforms would extend cyber regulation to more digital suppliers, but the vote introduces no immediate duties.
-
Russian-linked espionage targets NATO defence and law enforcement networks
Broadcom researchers describe intrusions involving a naval shipbuilder, aircraft engine manufacturer, and law enforcement organisation in two NATO countries. The shipbuilder investigation documented stolen credentials, persistent access, and a loader whose final payload was not recovered.
-
Healthcare ransomware reports rise 40% in Q3
Comparitech recorded 306 ransomware incidents and claims involving healthcare providers and businesses in the third quarter of 2026, up 40% from the previous quarter.
-
Juniper routing vulnerabilities draw critical warning
Critical vulnerabilities affecting Juniper networking software could expose certain routing and management configurations to code execution, denial of service, or elevated privileges.