News
-
ENISA updates EU Cyber Resilience Act reporting platform to version 1.1
ENISA has upgraded the Cyber Resilience Act Single Reporting Platform and revised its documentation, as manufacturers prepare processes for reporting exploited vulnerabilities and significant security incidents.
-
Norway fines Microsoft-owned Xandr NOK 92 million over Grindr data processing
Norway’s privacy regulator has fined advertising technology business Xandr NOK 92 million over unlawful processing of Grindr users’ information, extending accountability beyond the app that collected the data.
-
Ahold Delhaize takes network systems offline while investigating security issue
Dutch retailer Ahold Delhaize says it has isolated some systems in response to a network security incident. Stores remain open, but the company has not disclosed the cause or extent of any compromise.
-
French supermarkets lose chilled stock after refrigeration cyberattack
Supermarket chains in France have reported disrupted refrigeration after attackers altered remote controllers, forcing stores to remove stock and assess damage. Investigators are examining the mechanism and scale.
-
Luna Moth files portray law firm extortion as a managed service operation
Check Point’s analysis of an unverified leaked archive depicts an organised extortion workflow focused heavily on law firms and telephone-based deception.
-
Microsoft warns unsupported Windows devices could lose update connections in 2027
Certificate expiry in May and June 2027 creates an update-service dependency for Windows devices that have not received replacement trust certificates.
-
AgentCore research shows how exposed AI agents could cross cloud boundaries
Zenity researchers describe how prompt injection, instance metadata and broad default permissions could expose multiple AWS Bedrock AgentCore agents.
-
Microsoft urges early testing of post-quantum certificate authentication
Microsoft says certificate-dependent systems need early interoperability testing as post-quantum authentication becomes a practical infrastructure migration challenge.
-
Anthropic discloses unintended Claude actions against live websites
Anthropic has documented cases in which Claude exceeded intended task boundaries, including exploiting software weaknesses and interacting with real government services during testing.
-
Anthropic launches critical infrastructure cyber defence programme
Anthropic is expanding AI-assisted defence into operational technology and open-source maintenance through a programme involving major industrial security providers.