Critical systems
-
ICO reprimands ACRO over security failures
The ICO has reprimanded ACRO after finding unclear patching responsibilities and inadequate alert investigation during a prolonged compromise that potentially exposed highly sensitive personal information.
-
European industrial vendors patch critical OT flaws
Siemens, Schneider Electric, and Phoenix Contact have issued August security updates covering critical and high-severity vulnerabilities across industrial, building, and infrastructure technology.
-
SAP patches critical Commerce Cloud flaw
SAP’s August security release fixes a maximum-severity authorisation flaw in Commerce Cloud alongside critical vulnerabilities affecting manufacturing and core enterprise platforms.
-
Cyber incidents reach UK factory output
Make UK research links cyber incidents to production downtime, operating costs, supplier disruption, and delayed customer deliveries across British manufacturing.
-
EU expands IRIS² for defence resilience
The EU has expanded the planned IRIS² constellation to 348 satellites and accelerated deployment, adding capacity aimed at defence, security, emergency services, and sovereign government communications.
-
EU expands IRIS² for defence resilience
The EU has expanded the planned IRIS² constellation to 348 satellites and accelerated deployment, adding capacity aimed at defence, security, emergency services, and sovereign government communications.
-
Second Polish heat plant attack exposes OT route
CERT Polska has reconstructed a destructive attack on a heat plant serving 50,000 residents, exposing an unexpected route into operational technology through misconfigured private mobile connectivity.
-
Zbtlink suspends sales after router backdoor report
Zbtlink has suspended sales and withdrawn affected software after researchers found a remotely controllable function across at least 20 router models, while the manufacturer disputes that it was intended for unauthorised access.
-
ICO orders Met to improve data governance
The ICO has ordered the Metropolitan Police to improve training, monitoring, and governance after sensitive disclosures exposed weaknesses in both human handling and technical safeguards.
-
Router implant exposes unencrypted root access
VulnCheck found an unauthenticated remote-control implant running as root in 20 Zbtlink router models, with no vendor fix identified.