Risk & governance
-
EY breach exposes financial data held for major clients
Personal and financial information held by EY for clients including Man Group was exposed after attackers compromised technology used within the professional services firm’s tax operations.
-
Atos wins Metropolitan Police technology contract worth up to £350m
Atos has secured a six-year Metropolitan Police Service contract worth up to £350 million covering application management, service management and application security.
-
English councils offered funded red team testing
English councils are being invited into a funded red team programme designed to test how their systems withstand realistic attacker behaviour.
-
ASOS investigates third-party platform incident after customer notification
ASOS is investigating unauthorised activity involving third-party customer communications platforms after an unauthorised notification was sent on 6 October.
-
European security data links incidents to identity and visibility gaps
European security data analysed by Conscia links cyber incidents to compromised identities, excessive trust, incomplete visibility and delays between detection and response.
-
Dutch companies report more on cybersecurity and supply chain risk
A study of 67 Dutch listed companies found cybersecurity and supply chain risk becoming more prominent in annual reports between 2020 and 2024.
-
Ukraine develops CISO role through first national forum
Ukraine has held its first national CISO Forum as authorities develop the cybersecurity leadership role introduced into legislation in 2025.
-
Google pauses open source vulnerability reports after automation flood
Google has stopped accepting new product vulnerability submissions through its open source bug bounty after a surge in automated reports that it says are overwhelmingly invalid.
-
Ukraine’s ATB confirms cyberattack as data claim is disputed
Ukrainian retailer ATB has confirmed a cyberattack after an extortion message appeared on its website, while disputing attackers’ claims that customer information was stolen.
-
Italy sets deadline for email tracking pixel compliance
Italy’s privacy regulator says organisations using tracking pixels in email have until 29 October to bring notices, consent and withdrawal mechanisms into line with its guidance.