Critical systems
-
NHS updates cyber audit guidance
NHS England has published updated guidance for assessing cybersecurity controls across governance, identity, system protection, and incident recovery under its CAF-aligned assurance framework.
-
NHS dismisses staff over unauthorised record access
Fifteen NHS staff have reportedly been dismissed after accessing sensitive records connected to the Nottingham attacks without authorisation, renewing scrutiny of patient confidentiality controls.
-
England publishes council cyber resilience guidance
New government-backed guidance aims to help English councils improve cyber governance, understand their critical assets, and prioritise resilience investment.
-
German municipal IT project tests shared approach to Active Directory hardening
An October interview describes how 27 municipal IT organisations worked through Windows Server and Active Directory hardening together over 12 weeks, including rollback and ownership arrangements.
-
Stolen school photographer memory cards prompt questions over pupil data handling
A theft from a school photography contractor’s vehicle may have exposed pupil photographs, names and class details, although the contractor says the original files may have been overwritten.
-
NHS cyber alert warns BeyondTrust Remote Support flaw is being exploited
NHS England warns of active exploitation of a critical BeyondTrust Remote Support vulnerability that could let unauthenticated attackers upload files to affected appliances.
-
Scottish NHS independent cyber audit funding ends, according to report
A report says Scottish ministers have stopped centrally funding annual independent cybersecurity audits of NHS health boards, while the government maintains that other oversight arrangements remain.
-
French supermarket refrigeration attacks put cyber insurance stock cover under scrutiny
Reuters reports that spoiled stock from French refrigeration attacks may fall outside conventional cyber insurance, depending on individual policy terms, maintenance obligations and specialist extensions.
-
Censys counts 71% fewer internet-visible StoreView hosts in France
Censys counted 1,825 internet-visible Danfoss StoreView hosts in France on 11 October and 537 on 14 October; the figures do not measure confirmed compromises or fixes.
-
DfE updates schools’ data protection checklist for new UK rules
The Department for Education has replaced part of its schools guidance with a compliance checklist covering access requests, complaints, automated decisions, children’s data and educational technology.