News
-
Wind Tre fined €16.7m over unlawful telemarketing and data controls in Italy
The EDPB has published details of an Italian enforcement decision imposing a €16.7m fine on Wind Tre. The underlying decision was adopted in June rather than this week.
-
Firefox 158 closes browser sandbox escapes and privilege escalation flaws
Mozilla has published high-impact security fixes in Firefox 158, including sandbox escape and privilege escalation vulnerabilities across networking, update and security components.
-
npm Trusted Publishing flaw exposed more than 1,500 packages to possible takeover
Bloom Security researchers identified a trust-binding weakness that could let attackers publish updates to npm packages through reclaimed GitHub repository names. GitHub says it has shipped a fix.
-
SAP issues critical fixes for Cloud SDK, NetWeaver and S/4HANA
SAP has published 16 security notes and four GitHub advisories in its October update, including a maximum-severity Cloud SDK flaw and critical access-control weaknesses in enterprise applications.
-
EU privacy regulators warn smart glasses can expose bystanders to hidden recording
The European Data Protection Board has issued its first statement on smart glasses, highlighting recording transparency, controller responsibilities and particular risks in workplaces, schools and hospitals.
-
Anthropic says new defences cut data extracted in AI model distillation attacks
Anthropic reports that its new anti-distillation methods reduced harvested model data by around 90–99% in early testing. The performance estimate is company-reported and subject to changing attacker behaviour.
-
UK and Canada renew AI security cooperation on model testing and standards
The UK and Canada have renewed their AI security partnership, with commitments on risk intelligence, evaluations, technical standards and closer institutional cooperation.
-
TFG London cyber incident disrupts systems at Hobbs, Whistles and Phase Eight
The Foschini Group says its UK subsidiary identified a cyber incident on 11 October. Stores remain open, but IT systems are unavailable while investigators assess possible data exposure.
-
UK intervenes in BT–TalkTalk rescue over telecommunications continuity
The government has issued a public-interest intervention notice after BT agreed to acquire TalkTalk out of administration, citing possible disruption to emergency and other essential communications services.
-
UK says foreign technology dependencies are part of critical infrastructure reviews
In a written parliamentary answer, the UK government says it continually reviews the risk of overseas suppliers being able to disable or restrict technology supporting critical infrastructure.