News
-
Gartner forecasts agent abuse in enterprise breaches
Gartner predicts ungoverned AI-agent abuse will drive 25% of enterprise breaches by 2028 as agent identity, authority, and oversight become security-control problems.
-
IBM buys Logiq for UK security work
IBM has acquired NCSC-assured Logiq Consulting, adding specialist UK defence, critical-infrastructure, Secure by Design, and sovereign-technology capabilities.
-
Ransomware affiliate moves across four criminal brands
Microsoft says one ransomware affiliate has retained largely consistent post-compromise tradecraft while deploying Qilin, DragonForce, Anubis, and BERT ransomware.
-
UK defence suppliers face December cyber deadline
UK defence suppliers are approaching a 31 December deadline for baseline Defence Cyber Certification, including Cyber Essentials for applicable business-critical systems.
-
Latvia arrests suspect over company cyberattacks
Latvian police have arrested a man suspected of attacks against at least two companies involving alleged unauthorised database access, personal-data extraction, and attempted extortion.
-
Omada buys EmpowerID for agent identity controls
Danish identity-governance vendor Omada has acquired EmpowerID, adding runtime controls for AI agents to a platform traditionally focused on human and non-human identities.
-
RouterOS chain gave attackers unauthenticated admin access
CERT Polska has detailed two RouterOS vulnerabilities that can be chained to obtain full administrative-console access without completing SSH authentication.
-
Device-code phishing targets European Microsoft 365 users
A phishing operation targeting organisations in Europe and the US is abusing Microsoft 365 device-code authentication before deploying legitimate remote-management software on compromised endpoints.
-
Dutch agencies warn AI is accelerating cyber threats
Dutch intelligence, cyber, police, and government bodies have jointly warned that AI is increasing the speed and scale of cyberattacks, placing greater responsibility on organisational leadership.
-
AI incident exercises remain uncommon
ISACA research finds only 8% of surveyed organisations regularly conduct AI-specific incident-response exercises, despite AI becoming increasingly embedded in day-to-day security operations.