News
-
Belgian study exposes dependency-driven cyber risk
More than half of Belgian organisations surveyed said a supplier had suffered or was suspected of suffering a cyber incident, pushing supply chain exposure higher in national risk priorities.
-
ENISA sets new European cyber strategy
ENISA has set seven strategic objectives spanning EU policy implementation, incident preparedness, cyber capacity, shared intelligence, and trust in secure digital products.
-
EU cyber rules move into standards
ETSI and European Commission officials are tightening their work on cybersecurity and technology standards as Europe’s digital rules move from legislation into technical implementation.
-
F5 flaw exploited against exposed access systems
F5 has confirmed exploitation of a critical BIG-IP APM vulnerability that can allow unauthenticated remote code execution in specific OAuth server configurations.
-
Hospital database overwrite tests recovery controls
Police are examining how Nottingham University Hospitals maternity records were overwritten during routine technical work, with recovery efforts and the full scale of data loss still unresolved.
-
UK plans national information defence centre
The UK government has ordered work on a National Centre for Information Defence while separately developing a US partnership applying AI and autonomy to critical-infrastructure defence.
-
EU supervisors flag external technology dependencies
Europe’s financial watchdogs have put non-EEA technology dependencies alongside cyber threats and emerging AI risks among the vulnerabilities requiring closer scrutiny across the EU financial system.
-
Codex sandbox flaws crossed host boundary
Two OpenAI Codex sandbox weaknesses allowed researchers to cross intended containment boundaries, including one route from read-only mode to unsandboxed commands on a developer host. Both were fixed before disclosure.
-
Palo Alto launches continuous AI testing
Palo Alto Networks is turning frontier-model offensive testing into a continuous subscription service spanning applications, APIs, cloud infrastructure, source repositories, and networks.
-
Talos finds autonomous AI command implant
Cisco Talos has analysed a Windows implant that delegates command decisions to commercial AI models, although researchers have not confirmed that the malware has been deployed in live attacks.