UK officials have not committed to AI-specific measures in the Cyber Security and Resilience (Network and Information Systems) Bill, even though AI minister Kanishka Narayan pledged to "legislate wherever necessary". Alexandra Jones of the Department for Business, Innovation, Science and Trade told MPs that the government is "looking at" …
A Register "On Call" column recounts a reader's account (pseudonym Daniel) of joining a UK school in 2020, after the school's network had been taken offline for three months by ransomware. Recovery relied on external contractors and a months-old backup. His audit found a password policy of six letters with no complexity or expiry, and use…
Tracebit, a London- and New York-based security vendor, published research titled 'Making attacking agents pay' on defensive deception against autonomous AI attack agents. The approach plants hidden prompts, called 'context bombs', that an attacking agent ingests while crawling a target. These prompts misdirect the agent toward fake targe…
The US Federal Trade Commission (FTC) opened a rulemaking in September asking whether platforms should be required to stop impersonation scam ads from reaching consumers, citing ad tools that generate copy, images and video and optimize targeting regardless of whether an ad is legitimate. The article reports that nearly one trillion scam …
A survey of 2,018 senior IT decision-makers in the US and UK, conducted by Censuswide for Origina and published with Thinkers50 in the report The Software Tax, finds large enterprises spend an average of 28% of software budgets on upgrades, migrations and licensing changes they would not have chosen. 95% of respondents paid for a vendor-d…
This WeLiveSecurity explainer gives practical advice to people targeted by AI-generated deepfakes, which are increasingly used in fraud, extortion, harassment and non-consensual intimate imagery (NCII). It sets out the legal context: the US TAKE IT DOWN Act criminalizes NCII distribution and requires platforms to remove reported content w…
Techscaler, the Scottish Government's startup programme run by CodeBase, is funding Scottish founders to attend the Blue Earth Summit in London (14-16 October 2026) and the InvestHer Summit in Paris (27-28 October 2026). The aim is to build investor relationships and support international growth. The article is business and funding news a…
G7 finance ministers agreed to hold simulation exercises to test responses to cyberattacks enabled by artificial intelligence. Japan's Finance Minister Satsuki Katayama announced the decision after a G7 finance ministers and central bank governors meeting held alongside the IMF annual meeting in Bangkok. The move follows an IMF warning th…
Canada's proposed C-22 bill, first put forward in 2025 and since partly revised, would require tech companies, including foreign ones, to introduce "technical capabilities" for law enforcement data access. It would also require retention of user metadata. Signal has said it would exit the Canadian market, and Psiphon VPN says it will leav…
This ESET WeLiveSecurity blog post argues that small and midsize businesses (SMBs) want advanced protection that is simple, guided and manageable. It cites ESET data showing 75% of SMBs are concerned about global conflicts and cyber warfare, nearly half had at least one cyber incident in the past year, and 58% believe they are more vulner…
The fourth weekly Security Affairs AI-cybersecurity newsletter, by Pierluigi Paganini, is a curated list of headlines on the intersection of AI and security. It contains no original analysis or technical detail. Items include CyberXero, described as an AI-augmented initial access broker targeting Ukrainian critical infrastructure, and a C…
Trend Micro published its Holidays, Scams, and AI survey of 6,536 consumers across the United States, United Kingdom, Australia, New Zealand, Singapore and Taiwan (2,100 in the U.S.), conducted 31 October to 10 November 2025. It shows a gap between scam-spotting confidence and actual exposure: 56% of Americans are very or extremely confid…
A Chainguard survey released at its Assemble London event on October 14 found that 66% of security leaders at companies with $1bn or more in revenue admit leaving high or critical vulnerabilities unpatched "at least sometimes". Among companies with under $250m in revenue, the figure was 27%. Larger firms cite business trade-offs: disrupti…