News
-
ICO joins UK cyber resilience network
The Information Commissioner’s Office has joined the National Cyber Resilience Centre Group’s ambassador programme, linking the regulator more closely with police-led SME cyber support.
-
Cyber budgets rise as continuity lags
PwC says 84% of surveyed security and finance leaders expect cyber budgets to rise, while only 39% report a fully formalised cyber-specific continuity plan.
-
Azure gateway failure hits hybrid connectivity
Microsoft says a gateway-management change combined with operating-system servicing disrupted Azure networking services across multiple regions, including several in Europe and the UK.
-
Osavul raises €8.5m for hybrid intelligence
Luxembourg-headquartered Osavul has raised €8.5 million to expand its hybrid-risk intelligence platform further into enterprises and critical infrastructure.
-
TeamViewer patches five high-severity flaws
TeamViewer has fixed five high-severity vulnerabilities affecting its clients and related services, including weaknesses that can enable remote code execution and local privilege escalation.
-
DIVD breach exposes chained Zammad flaws
Dutch vulnerability institute DIVD says two previously unknown Zammad vulnerabilities were involved in its own compromise, including code execution and local privilege escalation.
-
France strengthens ANSSI powers under REACTIV
France has strengthened ANSSI’s authority to direct urgent cyber measures across government departments as investigations continue into data breaches affecting state services.
-
European police seize KillSec infrastructure
European law enforcement has seized KillSec servers and its leak site in an operation targeting a ransomware group linked to around 1,000 suspected attacks worldwide.
-
wolfSSL fixes certificate validation weaknesses
wolfSSL 5.9.4 addresses 11 vulnerabilities, including three high-severity flaws affecting certificate validation under specific build configurations.
-
WatchGuard patches critical access-point flaws
WatchGuard has fixed two critical wireless access-point vulnerabilities that can provide unauthenticated API access or operating-system command execution.