Infosec stories
UK firms face tighter cyber rules and faster reporting deadlines, as a new package combines protection, compliance and insurance cover.
Charities, small firms and fraud victims across Scotland got more than GBP £3 million in cyber support as the centre reinvested profits.
Only 12% of chief information security officers have recently validated controls they expect to stop intruders moving sideways through networks.
New silicon-level controls aim to curb unauthorised agent access and data exposure in enterprise AI storage, while keeping traffic fast.
AI-driven vulnerability discovery is leaving companies less time to patch, prompting new focus on clean recovery, air-gapped backups and testing.
Organisations are being pushed to spot hidden privilege paths in AI and machine accounts as BeyondTrust widens its identity risk assessment.
AI-driven vulnerability scanning is forcing firms to rethink complacency as Check Point says existing defences still help against Mythos.
Microsoft patched a CVE-2025-59199 flaw in October after researchers showed a single click could let low-integrity code escape Windows 11's sandbox.
Excessive access rights across hybrid estates can now be trimmed more safely, as XM Cyber adds usage data to pinpoint permissions that are no longer needed.
Regulated sectors can now route AI prompts through regional controls and zero-retention storage, reducing data-leakage risk for sensitive workloads.
Enterprises using AI tools may now face a tougher check on their defences as benchmark scores give way to real-world attack testing.
Industrials remained the main target as the monthly ransomware total eased 7%, even as The Gentlemen surged to second place among active gangs.
The move gives the cyber risk provider closer access to EMEA customers as demand rises for better oversight of supplier vulnerabilities.
Demand for secure AI infrastructure is pushing enterprises towards systems that combine computing, networking and storage in one stack.
More than half of patched flaws in major DevOps tools were high or critical in 2025, putting software supply chains at greater risk.
Enterprises are putting greater weight on fraud controls and identity checks as AI-driven customer messaging becomes central to CPaaS buying decisions.
The high-level clearance could ease uptake of Riverbed's cloud tools by US agencies and bolster its credentials in regulated commercial markets.
Security teams can now fold supplier risk alerts into incident response as GuidePoint's new service targets breaches from third-party tools.
A short remote programme cut burnout and attrition risk among cybersecurity staff, while also improving sleep and stress scores.
Security teams may get broader visibility into phishing campaigns as Doppel adds inbox defence to its platform for social engineering attacks.