Risk & governance
-
Tata breach tests supplier controls
Reuters reports that Tata Electronics has tightened internal access controls after a data breach involving claims of leaked Apple, Tesla, TSMC, and Qualcomm material.
-
Cisco flaw reaches communications layer
An exploited Cisco Unified Communications Manager flaw exposes how collaboration and telephony platforms can become privileged infrastructure risk.
-
Exploited PTC flaw hits engineering systems
A critical exploited vulnerability in PTC Windchill and FlexPLM puts product lifecycle management systems in the spotlight for manufacturing and supply chain risk.
-
MPs warn museums remain exposed
The Public Accounts Committee says government-sponsored museums and galleries remain vulnerable to cyber and physical security threats because oversight has been reactive rather than strategic.
-
Autins shows cyber supply chain cost
Autins says a cyberattack on its largest customer caused direct disruption costs, showing how incidents can travel into supplier accounts and operating performance.
-
VS Code tasks expose developer risk
JFrog says hijacked npm packages used hidden VS Code tasks and blockchain dead drops to deploy a credential and cryptocurrency stealer.
-
Bank tests cloud disruption risk
The Bank of England is using CORST26 and SIMEX to examine how disruption at a major cloud provider could affect financial market infrastructure.
-
Signal phishing shifts to recovery keys
US agencies say Russian intelligence-linked actors are trying to obtain Signal backup recovery keys, creating account takeover and historic message exposure risk for high-value targets.
-
Europol disrupts malware credential pipeline
European law enforcement has disrupted infrastructure linked to SocGholish, Amadey, and StealC, exposing a credential theft pipeline that feeds ransomware, fraud, and enterprise compromise.
-
e2e-assure brings AI into sovereign SOCs
e2e-assure’s updated Cumulo platform brings sovereign AI, digital twins, and IT/OT monitoring into the UK debate over machine-speed cyber defence.