Critical systems
-
GOV.UK passkeys reach 23 million users
GOV.UK One Login is extending passkeys to more than 23 million users, moving a major government identity service away from password-dependent authentication.
-
ESpanix moves DDoS defence into exchange
Spain’s largest internet exchange has deployed in-network DDoS mitigation across Madrid and Barcelona, offering protection to more than 200 connected networks.
-
EU connected-product data rule starts applying
Connected products placed on the EU market after 12 September 2026 must meet a Data Act design obligation making relevant product and service data accessible to users by default.
-
Fortaegis raises $50m for secure compute
Amsterdam-based Fortaegis has raised $50 million to commercialise hardware-rooted security technology aimed at defence, telecoms, data centres, autonomous systems, and other sensitive computing environments.
-
UK reassesses 18 of 72 critical systems
The UK government says 18 of 72 critical systems highlighted by the NAO have since been reassessed, leaving a wider question over remediation progress across the remaining estate.
-
Apricorn drive gains FIPS 140-3 validation
NIST has validated Apricorn’s Aegis Secure Key 3.0 at FIPS 140-3 Level 3, moving the encrypted USB device onto the latest federal cryptographic standard.
-
UK memory-safe chip maker raises £5m
Sheffield-based SCI Semiconductor has raised £5 million to increase production of chips built around hardware-enforced memory safety, as secure-by-design requirements gain commercial weight.
-
NATS outage faces independent resilience review
Britain’s aviation regulator will review the resilience of NATS after a technical system failure disrupted thousands of flights, with cyberattack ruled out.
-
Denmark joins Nordic secure communications framework
Denmark has joined a Nordic defence procurement framework for high-frequency communications designed to operate independently of satellite and navigation infrastructure.
-
German manufacturers build teams for CRA
New German industry research suggests manufacturers are moving Cyber Resilience Act compliance into dedicated teams and budgets as the EU’s first reporting requirements arrive.