Risk & governance
-
Google binds sessions to devices
Google has made device-bound session credentials generally available for Workspace. The Chrome security change addresses session-cookie theft, one route attackers use to work around multi-factor authentication.
-
UK cyber bill nears Commons vote
The UK cyber resilience bill is nearing another Commons stage. The legislation would expand regulated-sector coverage and bring suppliers, data centres, and managed services closer to statutory cyber oversight.
-
GCHQ sets out AI defence case
GCHQ has linked AI-enabled cyber defence to national resilience strategy. Its annual lecture placed cyber defence, data infrastructure, and public-service continuity inside the same strategic frame.
-
ENISA maps NIS2 sector maturity
ENISA has published its latest NIS360 sector maturity assessment report. The report gives European regulators and operators a benchmark for cyber resilience across high-criticality sectors covered by the NIS2 Directive.