News
-
Oracle E-Business Suite flaw exploited
Reported exploitation of a critical Oracle E-Business Suite flaw has put patch latency, payment workflows, and internet-exposed enterprise applications back under scrutiny.
-
SimpleHelp flaw exposes managed access risk
Exploitation of a SimpleHelp authentication bypass shows how remote management tooling can become a privileged route into endpoints, cloud credentials, developer systems, and customers.
-
Langflow attacks expose AI workflow risk
Observed exploitation of Langflow vulnerabilities shows how self-hosted AI workflow tools can expose API keys, cloud secrets, and agent infrastructure before governance catches up.
-
NCSC warns AI is compressing cyber risk
The NCSC and Five Eyes partners have warned that AI is changing cyber risk on a timeline of months, increasing pressure on organisations to test control performance.
-
Accenture builds OT security platform
Accenture’s planned Dragos, runZero, and NetRise deals point to consolidation around OT security, asset visibility, firmware risk, and critical infrastructure procurement.
-
ICO complaints duty comes into force
UK organisations must now meet new legal requirements for handling data protection complaints, adding process discipline to privacy, cyber, and customer evidence trails.
-
TfL cyber attackers plead guilty
Two men have pleaded guilty over the 2024 Transport for London cyberattack, creating a rare accountability moment after a major public transport incident.
-
Network Rail faces email threat pressure
Freedom of information data reported by ITPro shows Network Rail blocked more than 7.1 million malicious emails in four months, reflecting persistent pressure on UK transport infrastructure.
-
EU funds submarine cable resilience hubs
The European Commission is funding new Baltic and Mediterranean cable hubs and a €40 million repair-capacity call as undersea infrastructure moves higher up Europe’s resilience agenda.
-
EU targets AWS and Azure under DMA
The European Commission’s preliminary move to bring AWS and Azure under the Digital Markets Act brings cloud concentration, enterprise dependency, and infrastructure switching into regulatory focus.