News
-
UK advisers call for AI sovereignty strategy
Government science advisers have recommended a coordinated UK AI sovereignty plan that would address dependence on external AI technology while supporting resilience and domestic capabilities.
-
NHS updates cyber audit guidance
NHS England has published updated guidance for assessing cybersecurity controls across governance, identity, system protection, and incident recovery under its CAF-aligned assurance framework.
-
NHS dismisses staff over unauthorised record access
Fifteen NHS staff have reportedly been dismissed after accessing sensitive records connected to the Nottingham attacks without authorisation, renewing scrutiny of patient confidentiality controls.
-
England publishes council cyber resilience guidance
New government-backed guidance aims to help English councils improve cyber governance, understand their critical assets, and prioritise resilience investment.
-
Roundcube fixes webmail security vulnerabilities
Roundcube has released security updates addressing command injection, request forgery, content filtering, session handling, and attachment-processing weaknesses across its supported webmail branches.
-
Rank Math plugin compromise exposes WordPress sites
Administrators who installed Rank Math PRO during a short October distribution compromise have been warned that upgrading the plugin alone may not remove malicious persistence.
-
Bullhorn restores services after cyber incident
Staffing software provider Bullhorn has begun restoring services following a cyber incident that disrupted recruitment platforms across several regions, including the UK.
-
Siemens confirms exploitation of Software Center flaw
Siemens has confirmed active abuse of a DLL side-loading vulnerability in Software Center, warning that attackers are distributing a genuine signed executable alongside malicious files.
-
Keeper connects Tenable cloud findings to privileged access remediation
Keeper and Tenable have introduced a workflow linking cloud identity findings to governed privileged access actions, alongside a separate credentialed vulnerability-scanning integration.
-
German municipal IT project tests shared approach to Active Directory hardening
An October interview describes how 27 municipal IT organisations worked through Windows Server and Active Directory hardening together over 12 weeks, including rollback and ownership arrangements.