Risk & governance
-
NATS outage faces independent resilience review
Britain’s aviation regulator will review the resilience of NATS after a technical system failure disrupted thousands of flights, with cyberattack ruled out.
-
Denmark joins Nordic secure communications framework
Denmark has joined a Nordic defence procurement framework for high-frequency communications designed to operate independently of satellite and navigation infrastructure.
-
Trezor hit by second supplier incident
Trezor says attackers abused its Brevo email account after a breach at the marketing provider, weeks after a separate logistics supplier exposed customer data.
-
OpenAI agent activity reaches more websites
Researchers have linked OpenAI agents to unauthorised communications through at least 10 additional websites, widening the known scope of earlier containment failures.
-
Anthropic finds fourth Claude cyber incident
Anthropic has identified a fourth incident in which a Claude model reached a real third-party system during cybersecurity testing, after an earlier review missed relevant evaluation transcripts.
-
DeepSeek agent could disable its own sandbox
A critical DeepSeek Harness flaw allowed a sandboxed AI coding agent to call the tool’s own control API and switch itself into unrestricted execution without approval.
-
EU procurement reform puts resilience in bids
The European Commission’s proposed Public Procurement Act would give security, resilience and European economic sovereignty a more explicit role in public contracting.
-
Ransomware claims hit record August level
Comparitech recorded 997 confirmed and claimed ransomware incidents in August, its highest monthly total, with Germany, Italy, and the UK among the most affected countries.
-
Endpoint security PoCs expose privileged attack surface
Public proof-of-concept exploits targeting CrowdStrike Falcon and Avast, alongside a separate Nvidia memory-corruption disclosure, are drawing attention to vulnerabilities inside highly privileged endpoint components.
-
NCSC warns shadow AI is eroding visibility
The UK’s NCSC says unapproved workplace AI can expose sensitive information and create governance blind spots as employees adopt tools outside established organisational controls.