Critical systems
-
Rockwell patches ArmorBlock industrial I/O module vulnerabilities
Rockwell Automation has issued corrections for two vulnerabilities affecting 1732E ArmorBlock I/O hardware, including a weakness involving unauthorised password changes.
-
UK consults on security rules for consumer-authorised energy data sharing
The Department for Energy Security and Net Zero is consulting on a framework that would require certain energy data holders to share specified information securely with authorised services at consumers’ request.
-
Jisc reports 16,000 cyber incidents in education and research during 2025
Jisc says it identified 16,000 cyber incidents across UK education and research in 2025 and found more than 144,000 exposed credential combinations in early 2026.
-
Legal Aid Agency finds older case and probation records in stolen data
The Legal Aid Agency says forensic work on its 2025 cyberattack has identified about 250,000 pre-2007 records and some probation data among exfiltrated material.
-
Censys finds exposed AI services growing while industrial systems remain reachable
A new internet-wide survey from Censys records a 63% increase in exposed AI infrastructure over nine months and around 134,000 reachable industrial control hosts.
-
Siemens warns of critical flaws in S7-1500 multifunctional module subsystem
Siemens has disclosed vulnerabilities in the GNU/Linux environment of a SIMATIC S7-1500 multifunctional module, with some fixes still in preparation and compensating controls advised.
-
Anthropic tests whether small AI models could replicate across connected devices
Anthropic researchers found that small models can perform elements of autonomous replication using constrained hardware, but they did not demonstrate a self-sustaining uncontrolled AI worm.
-
NHS warns exploited Ivanti Connect Secure flaw permits remote code execution
NHS England has issued a cyber alert for CVE-2026-104935, warning of remote code execution risk in Ivanti Connect Secure and citing the vendor’s acknowledgement of exploitation in the wild.
-
MI5 launches AI Threat Assessment Centre to examine emerging security risks
MI5 says a new AI Threat Assessment Centre is bringing together expertise from British security and law-enforcement organisations to distinguish credible threats from speculative claims.
-
NCA-backed operation removes 3.7 million scam accounts and leads to arrests
A multinational law-enforcement and technology operation hosted by the National Crime Agency has removed millions of online scam profiles and accounts, with nearly 30 suspects arrested.