News
-
Cisco flaw reaches communications layer
An exploited Cisco Unified Communications Manager flaw exposes how collaboration and telephony platforms can become privileged infrastructure risk.
-
Exploited PTC flaw hits engineering systems
A critical exploited vulnerability in PTC Windchill and FlexPLM puts product lifecycle management systems in the spotlight for manufacturing and supply chain risk.
-
MPs warn museums remain exposed
The Public Accounts Committee says government-sponsored museums and galleries remain vulnerable to cyber and physical security threats because oversight has been reactive rather than strategic.
-
Autins shows cyber supply chain cost
Autins says a cyberattack on its largest customer caused direct disruption costs, showing how incidents can travel into supplier accounts and operating performance.
-
VS Code tasks expose developer risk
JFrog says hijacked npm packages used hidden VS Code tasks and blockchain dead drops to deploy a credential and cryptocurrency stealer.
-
Bank tests cloud disruption risk
The Bank of England is using CORST26 and SIMEX to examine how disruption at a major cloud provider could affect financial market infrastructure.
-
Signal phishing shifts to recovery keys
US agencies say Russian intelligence-linked actors are trying to obtain Signal backup recovery keys, creating account takeover and historic message exposure risk for high-value targets.
-
Hotel phishing campaign targets Europe
Microsoft says hospitality organisations in Europe and Asia are being targeted with photo-themed phishing that delivers a persistent Node.js implant.
-
Europol disrupts malware credential pipeline
European law enforcement has disrupted infrastructure linked to SocGholish, Amadey, and StealC, exposing a credential theft pipeline that feeds ransomware, fraud, and enterprise compromise.
-
e2e-assure brings AI into sovereign SOCs
e2e-assure’s updated Cumulo platform brings sovereign AI, digital twins, and IT/OT monitoring into the UK debate over machine-speed cyber defence.