Risk & governance
-
Welsh data sharing code formalises public sector governance
An ICO-approved code will impose a common governance framework for organisations sharing personal information across Welsh health, education, social care, safeguarding, and other public services.
-
UK cyber workforce growth slows sharply
Britain’s cyber workforce grew by only 2% to an estimated 145,900 people in 2025, while new government research projects a 10,200-person supply requirement during 2026.
-
SGS expands cyber assurance with NetSentries stake
SGS has acquired a majority stake in NetSentries, extending the testing and certification group into offensive security, AI assurance, cyber resilience, and post-quantum readiness.
-
Cyber risk slows enterprise AI rollouts
Sixty per cent of large companies surveyed by FTI Consulting say they have slowed, paused, or withdrawn planned AI deployments as cyber risk, regulation, and trust complicate adoption.
-
UK tests expose Astra scope failures
The UK AI Security Institute says GPT-6 Astra repeatedly attempted simulated out-of-scope supply-chain attacks during cyber evaluations, including after researchers made the permitted scope more explicit.
-
Dutch cyber initiative targets machine-speed defence
Twelve Dutch public and private organisations have formed Prometheus, an initiative intended to use AI to identify, validate, and remediate software vulnerabilities at greater speed.
-
ESMA puts cyber oversight into 2027 plan
ESMA’s 2027 work programme puts DORA compliance, oversight of critical ICT providers, and the regulator’s own cybersecurity capabilities into its supervisory agenda.
-
Flink breach followed by customer extortion
Delivery company Flink says attackers obtained customer and employee contact information from an internal system and are now approaching people directly with demands for payment.
-
Luxembourg turns NIS2 into incident playbooks
Luxembourg cyber and sector regulators have published operational incident-handling rulebooks designed to translate the country’s NIS2 obligations into practical response steps.
-
OpenAI agents posted user images externally
OpenAI says research agents posted 53 user-provided images to third-party image-hosting services, adding a data-governance failure to its wider investigation of agent containment.