News
-
ENISA details CRA platform security testing
ENISA has confirmed that AI-based secure-code review formed part of security testing for the EU platform now receiving mandatory Cyber Resilience Act vulnerability and incident reports.
-
ESpanix moves DDoS defence into exchange
Spain’s largest internet exchange has deployed in-network DDoS mitigation across Madrid and Barcelona, offering protection to more than 200 connected networks.
-
Lagarde warns of Europe’s AI dependence
ECB President Christine Lagarde has warned that Europe’s reliance on imported AI technology could become a strategic vulnerability as the technology spreads through essential services.
-
Europe weighs controls for autonomous AI
European governments are weighing new safeguards for frontier AI as systems capable of independently reaching external infrastructure test the limits of existing oversight.
-
ScreenConnect flaw confirmed under exploitation
CISA has added a high-severity ScreenConnect client vulnerability to its Known Exploited Vulnerabilities catalogue after ConnectWise released version 26.6.5 for affected deployments.
-
Artifactory attacks move into persistent compromise
New telemetry shows attackers chaining JFrog Artifactory vulnerabilities to obtain administrative control, establish persistence, execute code, and deploy backdoors across compromised repository servers.
-
GitLab flaw enters exploited catalogue
CISA has classified GitLab’s maximum-severity path-traversal vulnerability as exploited in the wild, days after patches were released for self-managed Community and Enterprise Edition installations.
-
Revolut data exposed through fake requests
Revolut disclosed sensitive customer information after receiving fraudulent requests through an email domain associated with a legitimate government agency, exposing risk inside trusted disclosure workflows.
-
Conti developer jailed for four years
Ukrainian national Oleksii Lytvynenko has been sentenced to four years in prison over his role in the Conti ransomware operation, with restitution still to be determined.
-
Phishing study challenges click-rate metrics
A 12-month dataset covering more than 123,000 users suggests falling phishing click rates can conceal credential exposure and weak reporting behaviour when simulation difficulty is ignored.