Critical systems
-
Telia fault disrupts Sweden’s SE-Alert test
Sweden’s first regional test of its new mobile emergency-warning system failed to reach all Telia subscribers, exposing an operator dependency before a planned nationwide exercise.
-
HPE fixes critical AOS-CX code execution flaws
HPE has patched critical vulnerabilities in Aruba AOS-CX that could allow an unauthenticated remote attacker to execute code with elevated privileges on enterprise switches.
-
MikroTik flaws exploited against internet-facing routers
CERT Polska has disclosed six RouterOS vulnerabilities and confirmed active attacks using a two-flaw chain to take control of MikroTik devices exposed over SSH.
-
French hospital fined €500,000 after data breach
France’s privacy regulator has fined Hôpital Privé de la Loire after finding weak authentication, excessive access, and inadequate monitoring contributed to a major patient-data breach.
-
Berlin centralises response after stolen data published
Berlin has created a central unit to assess stolen government data after files taken in its recent cyberattack were published following an unsuccessful extortion attempt.
-
Cisco Nexus flaw enables remote root access
Cisco has patched a critical Nexus 9000 vulnerability that can allow an unauthenticated remote attacker to execute code with root privileges on affected Silicon One-based switches.
-
GeoNetwork flaws expose government geoportal backends
Two GeoNetwork vulnerabilities can be chained for unauthenticated remote code execution, with researchers reporting vulnerable internet-facing deployments across government-heavy geospatial infrastructure.
-
PaperCut attacks enter second wave
PaperCut says attacks against unpatched internet-facing NG/MF servers have entered a second wave, with more sophisticated post-compromise behaviour and confirmed customer incidents.
-
Model puts UK battery cyber loss at £10bn
Centrii modelling puts the five-year probability of a major UK battery-storage cyberattack at 92% under baseline assumptions, with potential losses of £2bn to £10bn.
-
EU opens €96m cyber deployment call
A new €96 million Digital Europe funding round will support AI security tools, critical-sector testing, cable resilience, compliance capability, and cyber infrastructure across the EU.