News
-
Researchers find more than 800 exposed UK refrigeration and building controllers
A UK threat intelligence study reports more than 800 publicly reachable refrigeration and building management controllers. The exposure finding follows attacks against French supermarkets but does not establish British compromises.
-
France suspends Vacaf holiday aid platform after beneficiary data incident
France’s national family benefits body has taken the Vacaf holiday aid platform offline after receiving a report of exposed beneficiary data. Regular family benefit payments are unaffected, the agency says.
-
UK security purchasing shifts towards identity and compliance products
Third-quarter distribution data from Context indicates stronger demand for compliance, training, and identity security products, while industry analysts describe changing customer purchasing priorities.
-
Cohesity data points to rising UK ransomware claims in latest quarter
Newly reported Cohesity threat figures indicate a 60% quarterly increase in UK ransomware activity, with a small number of groups accounting for a substantial share. The figures require careful interpretation.
-
H&M investigates cyberattack allegation but reports no confirmed compromise
H&M is examining claims circulated by cybercriminals but says it has no evidence its systems or data environment were compromised. The retailer has not confirmed a breach.
-
Privacy group rates more than 1,000 EU amendments to GDPR reform
Privacy organisation noyb has analysed parliamentary amendments to the EU Digital Omnibus and published ratings of their effect on existing GDPR and ePrivacy safeguards. Its scores are advocacy assessments.
-
Docker reveals token ownership flaw in Hub account conversions
Docker says a flaw in account-to-organisation conversions reassigned some personal access tokens without rotating their secrets. The issue was fixed in September and disclosed publicly on 12 October.
-
NHS corrects affected NetScaler versions in critical vulnerability warning
NHS England has corrected its NetScaler advisory after several software versions were mistakenly classed as unaffected. The 12 October update concerns a critical SAML-related flaw disclosed three days earlier.
-
UK expands AI-assisted cyber defence as minister warns of future failures
Government pilots have reportedly helped identify and address more than 1,000 cyber vulnerabilities. Ministers now plan to extend the work while considering how serious incidents involving autonomous AI should be handled.
-
GitLab fixes critical unauthenticated code execution flaw in CI/CD compiler
GitLab has issued emergency patches for CVE-2026-97229, a maximum-severity vulnerability in its regular expression compiler that could allow unauthenticated code execution on self-managed servers.