Critical systems
-
CRA reporting platform nears September launch
ENISA has clarified how manufacturers will report exploited vulnerabilities and severe product-security incidents when Cyber Resilience Act reporting obligations begin on 11 September.
-
AI helps port exploit between WAGO PLCs
Forescout researchers used AI to adapt an exploit between WAGO industrial controllers, but the experiment still demanded specialist intervention, substantial compute cost, and damaged hardware.
-
UK opens £100m sovereign AI buying scheme
The UK has opened its first competitions under a £100 million Sovereign AI procurement programme, including dedicated work on AI-agent security and secure defence integration.
-
Saxony links agencies in cyber defence alliance
Saxony has created a cyber defence alliance linking ministries, police, intelligence, prosecutors, and incident responders while leaving their existing legal responsibilities intact.
-
Small generators face years-long cyber gap
Hundreds of smaller UK power generators may remain outside stronger baseline cyber requirements until 2030 despite a recent attack that disrupted an unnamed gas plant for four days.
-
NCSC warns exposed OT faces rising attacks
The NCSC says operational technology is facing increased targeting across multiple sectors, with internet exposure, legacy connectivity, and unmanaged assets creating routes to limited real-world disruption.
-
Manchester airports confirm customer data theft
Manchester Airports Group says an unauthorised third party obtained customer information linked to airport services, although operational systems, payment data, passenger safety, and aviation security were unaffected.
-
Berlin confirms data theft in extortion attack
Berlin has confirmed data was taken during the cyberattack on its state network as officials reject an extortion demand and continue forensic work across affected departments.
-
US water-sector targeting exceeds 100 systems
More than 100 internet-exposed systems in the US water and wastewater sector were targeted during July, widening the known scale of recent attacks on operational technology.
-
Ubiquiti discloses 22 UniFi security flaws
Ubiquiti has published a 22-part security bulletin covering UniFi products, including critical vulnerabilities capable of command execution and privilege escalation on network infrastructure.