Risk & governance
-
Cloud providers enter UK finance resilience regime
UK financial regulators are now directly overseeing the first critical third parties, bringing major cloud providers inside a system-wide operational resilience framework.
-
European cyber demand lifts Sopra Steria outlook
Sopra Steria raised its 2026 revenue-growth target as European demand continues across cybersecurity, AI, sovereign technology, defence, and secure public-sector systems.
-
Lisbon joins Vodafone’s cyber operations map
Vodafone is building a Global Cyber Centre in Lisbon to support cyber operations, incident response, architecture, and emerging technology security across its international business.
-
Cyber remains undefined in England’s technical education plan
England’s planned technical pathways for pupils from age 14 include AI and digital subjects, although the place of cyber security within the curriculum has not been defined.
-
Operational safety sets the boundary for OT isolation
International guidance urges critical operators to prepare emergency isolation while accounting for the monitoring, communications, and support services required to continue operating safely.
-
Minimum viable operations anchor NCSC recovery guidance
New NCSC guidance treats recovery from disruptive cyberattacks as an organisational programme built around minimum viable operations, investigation, legal duties, and controlled rebuilding.
-
Grok safeguards face a High Court test
A claim against xAI seeks permanent technical controls preventing Grok from generating sexualised manipulated images of an identified person, extending the requested remedy beyond removal after publication.
-
UK police data plan concentrates access and accountability
A national police data programme promises faster analysis across forces while concentrating sensitive intelligence, device records, cloud services, and privileged access within shared infrastructure.
-
Sovereign SASE takes shape in German datacentres
Zscaler’s security platform is now available on STACKIT infrastructure in Germany, combining European data residency with a jointly operated security service for regulated organisations.
-
GitHub narrows access to its bug bounty
GitHub has lowered public bounty payments while formalising a higher-paying invitation-only programme, citing growing volumes of low-quality and AI-generated vulnerability reports.