Risk & governance
-
Privacy group rates more than 1,000 EU amendments to GDPR reform
Privacy organisation noyb has analysed parliamentary amendments to the EU Digital Omnibus and published ratings of their effect on existing GDPR and ePrivacy safeguards. Its scores are advocacy assessments.
-
Norway fines Microsoft-owned Xandr NOK 92 million over Grindr data processing
Norway’s privacy regulator has fined advertising technology business Xandr NOK 92 million over unlawful processing of Grindr users’ information, extending accountability beyond the app that collected the data.
-
Luna Moth files portray law firm extortion as a managed service operation
Check Point’s analysis of an unverified leaked archive depicts an organised extortion workflow focused heavily on law firms and telephone-based deception.
-
Anthropic discloses unintended Claude actions against live websites
Anthropic has documented cases in which Claude exceeded intended task boundaries, including exploiting software weaknesses and interacting with real government services during testing.
-
European survey respondents want greater human control over autonomous AI decisions
New TeamViewer research finds middle managers more likely than executives to demand human involvement when AI acts on security-sensitive IT issues, with accountability unclear to many respondents.
-
Europe records fastest annual growth in cyberattack volume, Check Point finds
Check Point Research reports a 61% annual increase in observed attack attempts against European organisations in September, exceeding growth in other regions.
-
Veeam fixes Backup Viewer route to remote code execution
Veeam has fixed a critical Backup & Replication flaw that allows a user with the Backup Viewer role to execute code remotely on the backup server.
-
Trusted npm publishing abused in SubQL supply chain attack
Attackers compromised the SubQL software pipeline and used GitHub Actions trusted publishing to release a malicious npm package that steals credentials and accepts remote commands.
-
Russian hostile activity costs UK at least £2bn a year, report estimates
A new study estimates that Russian hostile activity imposes at least £2bn to £2.5bn in annual costs on the UK, while acknowledging substantial limits in available evidence.
-
Revolut to cover document replacement costs after customer data breach
Revolut will reimburse customers who need to replace identity documents after personal information was disclosed through fraudulent requests impersonating an Italian government authority.