65 casos · pág. 2/4
Analysis by Bridewell of reports to the UK Information Commissioner's Office (ICO) found more than 26,000 data breaches caused by human error between 2020 and 2025. Annual human-error breaches rose from 3,847 to 5,496 (+43%). The leading cause is data emailed to the wrong recipient (11,214 incidents, up 62% from 1,519 in 2020 to 2,459 in …
Accenture's Tech Talent Tracker reports that UK demand for AI skills rose 51% in six months to nearly 100,000 vacancies. London accounts for 70% of AI-related listings, which points to a regional divide. Overall technology job listings rose 21%, with Manchester (+35%), Bristol (+25%) and Birmingham (+17%) growing fastest outside the capit…
The organizers of DIGIT Expo 2026 released a partial agenda for two stages of Scotland's largest enterprise technology event, to be held on 19 November at the Edinburgh International Conference Centre (EICC). Speakers include representatives from Microsoft, Multiverse, IBM, Skyscanner, Adobe, FanDuel and Wayve. Stage 1 centres on practica…
The UK Information Commissioner's Office (ICO) issued a reprimand and enforcement notice to the Metropolitan Police Service (MPS) after officers and staff shared personal information through the unapproved third-party platform Auror without adequate data protection safeguards. The platform was used between March 2023 and September 2024, w…
A Bank of Scotland (Lloyds Banking Group) survey found that 66% of Scottish businesses recruited early careers talent in the past year, and 90% of those expect to hire more in the next year. 89% of Scottish firms are confident they can secure funding for skills investment, the highest in the UK against an 80% national average. Employers c…
CymruSec 2026, billed as Wales' leading cross-sector cyber security event, takes place on Thursday 22 October at Cardiff City Stadium. Final places remain for delegates. The agenda covers the evolving threat landscape, AI-driven cybercrime, identity security, agentic threat hunting and organisational resilience. Speakers come from industr…
This is an interview-based industry feature with no threat activity. Clare Johnson, founder of Women in Cyber Unlimited and Head of Capability at ITSUS Consulting, says that eight years on, greater awareness of gender inequality has not produced meaningful progress in cyber security. The UK Government's Cyber Security Skills in the UK Lab…
Records were exported from the management information system (MIS) of Southville Primary School in Bristol during a targeted cyberattack, according to Bristol City Council. The council has not disclosed what data was taken or how many students, parents or staff are affected. The school has notified affected parents and guardians and repor…
UK officials have not committed to AI-specific measures in the Cyber Security and Resilience (Network and Information Systems) Bill, even though AI minister Kanishka Narayan pledged to "legislate wherever necessary". Alexandra Jones of the Department for Business, Innovation, Science and Trade told MPs that the government is "looking at" …
The UK government has disclosed that the April 2025 breach of the Legal Aid Agency (LAA) was larger than first reported. Around 250,000 stolen records predate 2007, with the oldest dating to 1978. The LAA had initially said the stolen data covered applications, claims and payments from 2007 onward. The Ministry of Justice (MoJ) also found…
A vehicle belonging to school photography firm Pret-a-Portrait was broken into overnight on 6-7 October, and a camera bag containing SD memory cards was stolen. The cards may hold photographs taken at Priory School in Lewes, UK, plus images of QR code cards showing pupils' names and class names. The same equipment was used for three furth…
A Register "On Call" column recounts a reader's account (pseudonym Daniel) of joining a UK school in 2020, after the school's network had been taken offline for three months by ransomware. Recovery relied on external contractors and a months-old backup. His audit found a password policy of six letters with no complexity or expiry, and use…
Tracebit, a London- and New York-based security vendor, published research titled 'Making attacking agents pay' on defensive deception against autonomous AI attack agents. The approach plants hidden prompts, called 'context bombs', that an attacking agent ingests while crawling a target. These prompts misdirect the agent toward fake targe…
The US Federal Trade Commission (FTC) opened a rulemaking in September asking whether platforms should be required to stop impersonation scam ads from reaching consumers, citing ad tools that generate copy, images and video and optimize targeting regardless of whether an ad is legitimate. The article reports that nearly one trillion scam …
Unknown threat actors breached the TeamUpdraft website on 17-18 October 2026 and likely accessed its customer database, which holds connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. Patchstack observed an attacker holding valid UpdraftCentral dashboard keys issuing signed commands to install backdoor plugins on connected …
A disruption in Google Cloud's europe-west2 region in London took several Google Cloud services offline on Tuesday. Digital bank Revolut reported a widespread outage at about the same time, including card payments and ATM withdrawals. A person familiar with the matter told Reuters the two events were connected. ING Germany also reported o…
A survey of 2,018 senior IT decision-makers in the US and UK, conducted by Censuswide for Origina and published with Thinkers50 in the report The Software Tax, finds large enterprises spend an average of 28% of software budgets on upgrades, migrations and licensing changes they would not have chosen. 95% of respondents paid for a vendor-d…
CISA and the UK NCSC, with co-sealing partners, published advisory AA26-113A on China-nexus cyber actors' use of large, dynamic covert networks of compromised devices, mainly SOHO routers and IoT devices. These networks are shared by multiple threat actors and each may contain hundreds of thousands of endpoints. This makes static IP block…
On October 6, 2026, ASOS app users received a push notification stating the company had been hacked, sent by attackers who gained access to third-party customer messaging platforms used by ASOS. The note, addressed to ASOS's DPO and IT team, claimed the Snowflake instance was "fully compromised" and threatened a leak unless ASOS engaged. …
Trend Micro disclosed its part in a multinational law enforcement operation against the LockBit ransomware group, working with the FBI and the NCA. Per the vendor, undercover infiltration helped prevent the release of the group's next malware product, LockBit-NG-Dev, and Trend customers received protection before LockBit had finished test…
