News
-
Arista says VeloCloud flaw actively exploited
Arista has disclosed active exploitation of a critical VeloCloud Orchestrator vulnerability that can expose privileged internal functionality and compromise the management system and data it controls.
-
Attackers compromise 996 Zyxel switches
GreyNoise says an attacker compromised 996 Zyxel GS1900 switches across 48 countries through CVE-2026-7273, a vulnerability Zyxel patched in June.
-
Gartner survey finds deepfakes in enterprise calls
A Gartner survey of 297 senior cybersecurity leaders found 41% had encountered at least one deepfake-related social-engineering incident involving an employee audio call during the previous year.
-
Ribon compromise exposes BigCommerce customer data
Compromised credentials belonging to third-party BigCommerce applications were used to access merchant data and inject malicious scripts, exposing the dependency risk created by privileged ecommerce integrations.
-
NCSC says AI currently favours attackers
The NCSC says offensive cyber tasks are easier to automate safely than defensive actions, where an incorrect autonomous change can disrupt the live business systems it was intended to protect.
-
Microsoft disrupts EvilTokens cybercrime platform
Microsoft has disrupted EvilTokens, an AI-assisted phishing and fraud service linked to more than 12,000 compromised inboxes, while UK police investigate two men arrested in connection with the alleged operation.
-
EDPB standardises approach to GDPR fines
European data protection authorities have been given a common five-step methodology for deciding whether GDPR infringements should attract fines alongside other corrective measures.
-
Banks set principles for agentic commerce
NatWest, ING, and four other banks have proposed common principles for AI agents that shop and pay on customers’ behalf, focusing on transparency, security, privacy, choice, and interoperability.
-
European cyber teams face widening resource gap
ISACA research finds European cyber teams reporting rising attacks while more than half say they are understaffed and underfunded, adding operational strain as regulatory and technical demands continue to expand.
-
Spain adds cyber safeguards to AI plan
Spain’s new 12-month AI roadmap includes plans to strengthen its cyber defences and increase oversight of advanced frontier models as the government expands AI infrastructure and adoption.