Critical systems
-
Indra ransomware case tests supplier assurance
Spanish defence and technology group Indra says a ransomware incident at one subsidiary was contained, with services continuing normally and the wider group unaffected.
-
Cisco flaw reaches network management layer
Cisco’s July advisory set includes a Catalyst Center arbitrary file read flaw, putting network management platforms back into patch planning.
-
UK cyber bill enters Lords scrutiny
The Cyber Security and Resilience Bill has moved into the Lords, where scrutiny will test the UK’s expansion of cyber duties and supplier accountability.
-
Ofgem puts supplier security into energy resilience
Ofgem’s downstream gas and electricity guidance points to a more structured model for managing supplier security risk across the UK energy system.
-
EU builds cybersecurity skills consortium
The European Commission has launched a new consortium to coordinate training, measure skills gaps, and support cyber resilience in critical sectors.
-
Dutch NIS2 law nears final vote
The Netherlands is close to enforcing its NIS2 implementation, with more than 8,000 organisations expected to face new digital resilience obligations.
-
AirDrop and Quick Share flaws expose proximity risk
Researchers found six vulnerabilities in AirDrop and Quick Share protocols, bringing proximity file sharing into managed-device and executive-risk planning.
-
UK bill sharpens cyber reporting duties
Updated UK Cyber Security and Resilience Bill factsheets set out faster incident reporting, customer notification, regulator powers, and wider accountability.
-
UK puts load controllers into cyber regulation
The UK wants large electricity load controllers brought into cyber regulation as smart appliances, batteries, heat pumps, and EV charging reshape grid risk.
-
Insee breach exposes French public-sector staff data
France’s national statistics agency says a cyberattack exposed staff directory information, while passwords, sensitive staff data, and statistical collections were not affected.