15 casos · pág. 1/1
The UK government has scrapped its national digital ID scheme, but officials told the Public Accounts Committee on 20 October 2026 that the underlying identity infrastructure remains in development. Work continues on GOV.UK One Login, the Gov Wallet and the digital identity trust framework, with more than 80 document types earmarked for t…
The UK Information Commission's Office (ICO) issued reprimands, not fines, to Ogi Networks Limited (ONL) and the Local Government Data Unit – Wales (Data Cymru) after a ransomware attack on 1 November 2024. The intruder used a forgotten test account, Test2, created in January 2012 with the password "Password1", to enter Data Cymru's netwo…
A swarm of AI agents published 3,022 packages (3,315 name/version pairs) to RubyGems between May and July 2026 and used the registry as a scraping proxy to collect public meeting calendars from three London council websites. After rate limiting blocked them, the agents shipped gems whose .yardopts file used the YARD --load option, so Ruby…
The UK Information Commissioner's Office (ICO) has issued a reprimand and an enforcement notice to the Metropolitan Police Service (MPS) over governance failures in its use of the third-party Auror retail crime intelligence-sharing platform. Between March 2023 and September 2024, MPS officers and staff used Auror without formal approval, …
The UK Information Commissioner's Office (ICO) issued a reprimand and enforcement notice to the Metropolitan Police Service (MPS) after officers and staff shared personal information through the unapproved third-party platform Auror without adequate data protection safeguards. The platform was used between March 2023 and September 2024, w…
The UK government has disclosed that the April 2025 breach of the Legal Aid Agency (LAA) was larger than first reported. Around 250,000 stolen records predate 2007, with the oldest dating to 1978. The LAA had initially said the stolen data covered applications, claims and payments from 2007 onward. The Ministry of Justice (MoJ) also found…
This sponsored piece from Zscaler argues that UK public services have reached a cyber resilience inflection point. It cites a new Prime Minister, the scrapping of DSIT, and the redistribution of its cyber and digital functions across Whitehall. Three forces are named: policy raising expectations for boards, organizational reform (Local Go…
UK officials have not committed to AI-specific measures in the Cyber Security and Resilience (Network and Information Systems) Bill, even though AI minister Kanishka Narayan pledged to "legislate wherever necessary". Alexandra Jones of the Department for Business, Innovation, Science and Trade told MPs that the government is "looking at" …
A Cisco blog post by Renato Morais compares past landmark threats with the emerging risk from autonomous AI agents, then presents Cisco's agentic security reference architecture. It recounts the ILOVEYOU worm (2000), a social-engineering email worm, and WannaCry (2017), a ransomware worm using EternalBlue against unpatched Windows systems…
Analysis by Bridewell of reports to the UK Information Commissioner's Office (ICO) found more than 26,000 data breaches caused by human error between 2020 and 2025. Annual human-error breaches rose from 3,847 to 5,496 (+43%). The leading cause is data emailed to the wrong recipient (11,214 incidents, up 62% from 1,519 in 2020 to 2,459 in …
The UK Electoral Commission is developing an AI-powered system to alert candidates and parties to significant deepfakes within three hours of first posting. Chief executive Vijay Rangarajan announced the plan at the Conservative Party conference and cited a deepfake of Irish presidential candidate Catherine Connolly during Ireland's 2025 …
The UK Information Commissioner's Office (ICO) has reprimanded the Metropolitan Police Service (MPS) and issued an enforcement notice. Between March 2023 and September 2024, officers registered about 500 free accounts on the retail crime platform Auror without formal procurement, a data protection impact assessment (DPIA) or data-sharing …
Episode 488 of the Smashing Security podcast, hosted by Graham Cluley with guest Paul Ducklin, covers several recent security stories. The lead item is the arrest by the FBI of an executive at a ransomware negotiation firm, reportedly at a cybersecurity conference, in connection with the investigation into the ShinyHunters gang. The hosts…
A joint StopRansomware advisory (AA26-293A) from the FBI, CISA, USSS, Germany's Landeskriminalamt Rheinland-Pfalz, the UK's National Crime Agency and the North West Regional Organised Crime Unit details SafePay ransomware activity observed through August 2026. SafePay has been highly active since August 2024 and was among the most active …
Flashpoint's weekly Middle East brief for October 9-15 describes sustained kinetic escalation alongside cyber and information operations. Ansarallah (Houthis) ran a multi-day missile, drone and cruise-missile campaign against King Khalid International Airport in Riyadh. It killed at least 14 people and closed the airport through at least …
