News
-
78 missing devices, no ICO reports in Scotland
The Scottish Government says encryption and remote-wipe controls meant 78 lost or stolen work devices did not create a personal-data risk requiring notification to the ICO.
-
Supplier breach reaches Scottish prosecutors
Scotland’s prosecution service says employee information was exposed through an external supplier, while its own systems, casework, victims, and witnesses remain unaffected.
-
Beacon breach reaches sensitive charity records
A UK charity has confirmed that records potentially copied from the Beacon CRM breach include medical and financial information, widening the downstream consequences of the supplier incident.
-
SAP Commerce attacks follow patch by days
Attack traffic is already targeting a maximum-severity SAP Commerce Cloud vulnerability only days after SAP released fixes for the unauthenticated code-execution flaw.
-
Threema outage exposes hosting split
A sustained DDoS campaign disrupted Threema and its colocation provider, while customers running the messaging platform on their own infrastructure remained available.
-
€30m banking fraud traced to payment provider flaw
Arrests in Europe and Brazil have followed an investigation into a €30 million German banking fraud that authorities traced to exploitation of a payment provider vulnerability.
-
678,000 caught in French tax breach
France’s tax authority has confirmed the extraction of fiscal data concerning 678,000 people and businesses after attackers used impersonated credentials to access internal systems.
-
Netherlands begins NIS2 enforcement
Thousands of Dutch organisations are now subject to NIS2 security, reporting, governance, and resilience duties after two long-awaited laws took effect on 15 August.
-
Intel and AMD issue broad security updates
Intel and AMD have released extensive August security updates spanning processor firmware, wireless software, AI tooling, trusted computing and development environments.
-
ShieldBreak tests Microsoft Defender patch boundary
A public proof of concept named ShieldBreak can elevate a local Windows user to SYSTEM and is claimed to bypass Microsoft’s earlier fix for the Defender flaw CVE-2026-50656.