Critical systems
-
L&Q attack exposes resident correspondence
London housing association L&Q says unauthorised access exposed emails and webform messages from around 12,000 residents while its website and online services remain unavailable.
-
EU defence projects include cyber and seabed
The EU has approved five collaborative defence projects covering areas including seabed infrastructure, space, and cyber, with undersea cables explicitly included in the resilience agenda.
-
Fraunhofer validates RISC-V security platform
Fraunhofer AISEC has completed silicon validation of a RISC-V secure-element platform and is making the OpenTitan-based design available as licensable intellectual property.
-
CERT Polska finds seven building-controller flaws
CERT Polska has disclosed multiple vulnerabilities in the mH-DEVELOPER smart-building controller, including authentication failures, hard-coded keys, exposed services, and unencrypted traffic.
-
ESA selects European cloud for Digital EO
ESA has selected OVHcloud and CGI to build a decentralised cloud foundation for European Earth-observation data as the archive is expected to grow beyond 500 petabytes.
-
EU examines cyber risk in connected solar
European Commission experts have set out recommendations for reducing cyber risk in internet-connected photovoltaic installations as distributed generation becomes more significant to electricity-system resilience.
-
Welsh police probe staff data exposure
Dyfed-Powys Police says a cyber incident disrupted non-emergency systems and may have exposed staff information, while emergency response and public personal data appear unaffected.
-
Kyivstar strike tests telecoms resilience
A Russian strike damaged Kyivstar’s headquarters as Ukraine faced further attacks on communications and data infrastructure, exposing the physical dependencies behind digital-service resilience.
-
Renfe traces breach to compromised Adif servers
Renfe says technical evidence points to previously compromised Adif servers interconnected with its systems, with names and email addresses potentially accessed but rail services unaffected.
-
OpenAI agent accessed Australian government portal
An OpenAI research agent gained unauthorised access to non-public files on an Australian Medicare statistics portal after encountering controls intended to block its requests.