News

Data breach incident management and recovery

March 25, 2026 25 Mar'26
US government launches Bureau of Emerging Threats

The US’ Bureau of Emerging Threats sits within the State Department and will supposedly help address national security threats arising from cyber attacks, the weaponisation of space and other emerging technologies
March 25, 2026 25 Mar'26
Why AI agents are one prompt away from ransomware

As AI adoption advances beyond chatbots, security leaders are up against rogue AI agents mirroring threat actors and a generational skills gap as security operations teams become overly dependent on AI
March 24, 2026 24 Mar'26
US government bans imported routers, raising tough questions

The US communications regulator has enacted a ban on all router hardware made outside America citing security concerns, but experts say the move may risk creating more issues than it solves
March 23, 2026 23 Mar'26
Irish government launches CNI resilience plan

Ireland’s National Strategy on the Resilience of Critical Entities sets out a pathway to improved cyber resilience for the nation’s critical infrastructure, and establishes compliance with an EU directive

March 20, 2026 20 Mar'26
UK Cyber Monitoring Centre plans expansion in US amid risk of Category 5 attack

Organisations lulled into a false sense of security after Russian invasion of Ukraine are still at risk of a Category 5 attack in 2026
March 19, 2026 19 Mar'26
Cisa tells US organisations to harden endpoint management after Stryker attack

Last week’s cyber attack on the systems of a US medical services company by Iranian hacktivists has prompted an alert from Cisa, urging organisations to reinforce their defensive posture
March 19, 2026 19 Mar'26
AI makes debut in Bridewell cyber security in CNI report

Regulation has superseded cyber threats as the main driver of cyber security spending, and AI has made its debut for attack and defence, according to a CNI-focused report from Bridewell
March 19, 2026 19 Mar'26
Gartner: Ditch ‘big transformation’ cyber strategies for continuous improvement

As artificial intelligence reshapes the enterprise, CISOs must abandon risky big bang security transformation initiatives in favour of incremental changes to build cyber resilience
March 17, 2026 17 Mar'26
Contactless payment limit removal will happen overnight, but change won’t

Banks will be able to set their own contactless card payment limits from 19 March, following rule change by Financial Conduct Authority
March 17, 2026 17 Mar'26
Interview: D360 Bank redefines cyber security for Saudi Arabia’s cashless future

Muath Alhomoud, director of cyber security at D360 Bank, discusses payment security, cloud resilience and the responsible use of AI in a hyper-connected financial ecosystem

March 16, 2026 16 Mar'26
Companies House restarts online services following cyber breach

Companies House was forced to pull its WebFiling service offline at the weekend after it emerged that a flawed update was putting data at risk of exposure
March 11, 2026 11 Mar'26
Iran war a melting pot for other cyber threats

State-backed cyber threat actors from non-combatant states are taking advantage of the Israeli-US war on Iran to fulfil their own goals, according to Proofpoint analysts
March 11, 2026 11 Mar'26
Salesforce tracks possible ShinyHunters campaign targeting its users

Salesforce warns users of an uptick in malicious activity targeting Experience Cloud customers with misconfigured user settings via an open source tool
March 11, 2026 11 Mar'26
CISOs on alert: Strengthening cyber resilience amid geopolitical tensions in the Middle East

As regional uncertainty rises, security leaders across the Gulf focus on resilience, faster incident response and deeper threat intelligence to protect critical systems and data
March 10, 2026 10 Mar'26
WA auditor general flags weak Microsoft 365 security controls across state entities

Western Australia’s Office of the Auditor General has uncovered weaknesses in M365 configurations across seven government agencies, leading to compromised accounts and data breaches
March 06, 2026 06 Mar'26
Scattered Spider attack on TfL affected 10 million people

The 2024 Scattered Spider attack on Transport for London affected approximately 10 million people, many of whom remain blissfully unaware their data was compromised
March 05, 2026 05 Mar'26
Spyware suppliers exploit more zero-days than nation states

Exploitation of zero-days by commercial surveillance and spyware developers outpaced exploitation by nation-state actors last year, according to a report
March 04, 2026 04 Mar'26
Iranian hacktivists muster their forces but state APTs lay low

Hacktivist activity surrounding the Iran war is sky-high but Iran’s state-backed cyber espionage actors have yet to show their hands, giving security teams a valuable window of time to shore up their defences
March 04, 2026 04 Mar'26
Tycoon2FA phishing platform dismantled in major operation

A Europol-led sting against the infamous Tycoon2FA MFA bypass phishing service has been successful, with operations disrupted and ringleaders and cyber criminal users identified
March 03, 2026 03 Mar'26
NCSC: No increase in cyber threat from Iran, but be prepared

While cyber threat levels remain stable following the outbreak of war in the Middle East at the weekend, at-risk organisations in the UK should take steps to ward off potential reprisals from Iran-linked threat actors
February 26, 2026 26 Feb'26
Qilin crew continues to dominate ransomware ecosystem

The Qilin ransomware gang remained ‘top dog’ in January 2026, with over 100 observed cyber attacks to its name, amid a rapidly evolving and fragmenting cyber criminal ecosystem
February 26, 2026 26 Feb'26
CrowdStrike touts agentic SOC to tackle security woes

By embedding AI agents across its platform, CrowdStrike is looking to help security teams automate repetitive security tasks, enabling them to focus on complex and stealthier threats that could slip under the radar
February 25, 2026 25 Feb'26
Cisco Catalyst SD-WAN users targeted in series of cyber attacks

The NCSC, Cisa, and other Five Eyes agencies have warned of mass exploitation of vulnerabilities in Cisco Catalyst SD-WAN, which Cisco is attributing to an unknown threat actor called UAT-8616
February 23, 2026 23 Feb'26
Innovate UK cyber startup programme gets £10m funding booster

Graduates of DSIT and Innovate UK's CyberASAP scheme to commercialise cutting-edge cyber research projects have raised nearly £50m in the past decade
February 19, 2026 19 Feb'26
ICO wins appeal over data protection obligations in Currys cyber attack

The UK Information Commissioner’s Office has won an important appeal relating to data protection obligations arising from a 2017-18 cyber attack at electronics retailer Currys PC World
February 18, 2026 18 Feb'26
0APT ransomware crew makes embarrassing splash

A ransomware gang called 0APT has attracted attention, but many of its victims may not even be real, and its operators are being accused of over-egging their criminal pudding
February 17, 2026 17 Feb'26
Western cyber alliances risk fragmenting in new world order

The conduct of powerful nations is causing knock-on effects in the cyber world as long-standing security frameworks appear increasingly precarious
February 17, 2026 17 Feb'26
Government wages cyber campaign as half the UK’s SMEs are breached

UK government says half of all small businesses have been cyber breached in the recent past as it urges them to ‘lock the door’
February 11, 2026 11 Feb'26
The Security Interviews: Mick Baccio, Splunk

Mick Baccio, global security advisor at Splunk SURGe and Cisco Foundation AI, reveals how the experience of running cyber on a dime for a US presidential campaign has informed how he does security, and why the basics still matter
February 10, 2026 10 Feb'26
Arctic Wolf targets mid-market security gap in APAC

Following the launch of its full portfolio in Malaysia, the SOC provider discusses the security challenges facing lean IT teams, the value of supplier neutrality, and its roadmap for AI and ransomware protection
February 10, 2026 10 Feb'26
Researchers delve inside new SolarWinds RCE attack chain

Researchers at Huntress and Microsoft have shared findings from their analysis of a new SolarWinds Web Help Desk vulnerability
February 10, 2026 10 Feb'26
Singapore mounts largest ever cyber operation to oust APT actor

Operation Cyber Guardian mobilised over 100 defenders to neutralise UNC3886, which infiltrated Singtel, StarHub, M1 and Simba networks, operators issue joint pledge on defence-in-depth
February 09, 2026 09 Feb'26
Russia’s cyber attacks on Polish utilities draws NCSC alert

A series of Russian cyber attacks targeting Poland’s energy infrastructure has prompted a warning from the UK’s National Cyber Security Centre
February 04, 2026 04 Feb'26
UK government must get its hands dirty on security, report says

As the UK government develops its National Cyber Action Plan, a report from the Rusi think tank urges Westminster to take a more interventionist approach
February 03, 2026 03 Feb'26
Ransomware gangs focus on winning hearts and minds

Ransomware-as-a-service operations are increasingly seeking to forge connections with employees, contractors and trusted partners of their target organisations as an alternative to straight-up hacking, says NCC
January 29, 2026 29 Jan'26
Security now one of the UK’s fastest-growing career paths

The number of people working in the cyber security field has almost trebled in the 2020s, with one cyber professional for every 68 businesses in the UK
January 27, 2026 27 Jan'26
Wave of ShinyHunters vishing attacks spreading fast

The ShinyHunters hacking collective that caused chaos in 2025 is ramping up a new voice phishing campaign, with several potential victims already identified
January 27, 2026 27 Jan'26
Broken decryptor leaves Sicarii ransomware victims adrift

A coding error in an emergent strain of ransomware leaves victims unable to recover their data, even if they cooperate with the hackers’ demands
January 23, 2026 23 Jan'26
US punts renewal of threat data sharing law to September

US lawmakers have extended the Cybersecurity Information Sharing Act of 2015 for another nine months, buying time to enact a replacement for the legislation.
January 22, 2026 22 Jan'26
Sportswear firm Under Armour falls victim to data breach

Details of over 70 million customers of US sportswear giant Under Armour were leaked following a supposed ransomware attack by the Everest gang
January 21, 2026 21 Jan'26
UK and China reach out across cyber no-man's land

London and Beijing have supposedly conducted high-level talks seeking to establish a joint security forum to help de-escalate potential cyber flashpoints, according to reports
January 20, 2026 20 Jan'26
UK public sector, CNI in Russian hacktivist crosshairs

Hacktivists aligned to the Russian state are ramping up their targeting of UK organisations with denial of service attacks
January 14, 2026 14 Jan'26
Microsoft DCU uses UK courts to hunt down cyber criminals

Microsoft has taken down the RedDVS cyber crime-as-a-service network after obtaining a UK court order, marking its first civil legal action outside of the US
January 12, 2026 12 Jan'26
Intersec Dubai highlights why AI has become critical in the race against cyber attackers

Cigna Healthcare’s Jean Wiles warns that healthcare security teams must act faster without sacrificing accuracy or compliance as threats driven by artificial intelligence scale
January 08, 2026 08 Jan'26
Personal data of thousands stolen in attack on London councils

The West London council at the centre of a major cyber incident has now started the process of informing residents that their personal data was compromised in the attack
January 05, 2026 05 Jan'26
UK government to spend £210m on public sector cyber resilience

The UK government unveils a £120m Cyber Action Plan to help reinforce and promote IT security resilience across the country's public services
December 29, 2025 29 Dec'25
Top 10 cyber security stories of 2025

AI dominated all tech conversations this year, but the concerns of cyber security professionals extend far beyond. From remote work to supply chains, quantum to identity, there were plenty of other topics for the industry to chew over in 2025.
December 24, 2025 24 Dec'25
Top 10 cyber crime stories of 2025

In many regards, 2025 proved to be a relatively normal year for the cyber security world as threat actors and security pros continued their long-running cat-and-mouse game, but it was also a stand-out year that saw some of the largest cyber attacks ...
December 23, 2025 23 Dec'25
Top 10 ANZ stories of 2025

The 2025 tech landscape in Australia and New Zealand was dotted with major data breaches even as organisations continue to press on with their digital transformation efforts in areas such as AI and automation
December 19, 2025 19 Dec'25
‘Sensitive’ data stolen in Westminster City Council cyber attack

London borough confirms that data breach affecting three neighbouring councils in a shared IT services operation led to personal information being copied by a third party