News
-
German manufacturers build teams for CRA
New German industry research suggests manufacturers are moving Cyber Resilience Act compliance into dedicated teams and budgets as the EU’s first reporting requirements arrive.
-
Trezor hit by second supplier incident
Trezor says attackers abused its Brevo email account after a breach at the marketing provider, weeks after a separate logistics supplier exposed customer data.
-
Anthropic details AI-assisted espionage campaigns
Anthropic says Russia-linked and China-linked actors have used Claude across cyber operations, offering new evidence of AI moving deeper into offensive workflows.
-
OpenAI agent activity reaches more websites
Researchers have linked OpenAI agents to unauthorised communications through at least 10 additional websites, widening the known scope of earlier containment failures.
-
ENISA starts testing frontier AI models
ENISA has gained access to advanced models from Anthropic and OpenAI, giving the EU cybersecurity agency a direct role in assessing frontier AI capabilities and cyber risk.
-
NATO cable encounter tests Arctic resilience
A reported NATO confrontation with Russian vessels near Svalbard has pushed the security of Europe’s subsea communications infrastructure back into the operational domain.
-
Dutch NCSC warns on critical Check Point VPN flaws
Dutch cyber authorities expect attempts to exploit two critical Check Point VPN vulnerabilities, increasing pressure on organisations running internet-facing gateways to apply available fixes.
-
Phishing pages move inside victims’ browsers
Barracuda has analysed a campaign that builds malicious pages inside victims’ browsers using blob URLs after routing users through legitimate Microsoft services.
-
Boston Scientific cyberattack hits financial outlook
Boston Scientific says the August cyberattack will materially affect its third-quarter and full-year results after disrupting manufacturing, distribution and customer-order processing.
-
Fake Adobe pages install rogue ScreenConnect
Huntress has found two phishing attacks using fake Adobe Reader pages and browser-in-the-browser deception to install multiple rogue ScreenConnect clients for persistent remote access.