11 casos · pág. 1/1
The UK government has scrapped its national digital ID scheme, but officials told the Public Accounts Committee on 20 October 2026 that the underlying identity infrastructure remains in development. Work continues on GOV.UK One Login, the Gov Wallet and the digital identity trust framework, with more than 80 document types earmarked for t…
The UK Financial Conduct Authority (FCA) says existing major-incident reporting rules must extend to significant AI failures and near-misses as financial firms adopt more autonomous, agentic systems. Speaking at Bloomberg's UK Policy Series, FCA chief data, information and intelligence officer Jessica Rusu warned that poorly governed AI c…
This sponsored piece from Zscaler argues that UK public services have reached a cyber resilience inflection point. It cites a new Prime Minister, the scrapping of DSIT, and the redistribution of its cyber and digital functions across Whitehall. Three forces are named: policy raising expectations for boards, organizational reform (Local Go…
UK officials have not committed to AI-specific measures in the Cyber Security and Resilience (Network and Information Systems) Bill, even though AI minister Kanishka Narayan pledged to "legislate wherever necessary". Alexandra Jones of the Department for Business, Innovation, Science and Trade told MPs that the government is "looking at" …
The UK government has disclosed that the April 2025 breach of the Legal Aid Agency (LAA) was larger than first reported. Around 250,000 stolen records predate 2007, with the oldest dating to 1978. The LAA had initially said the stolen data covered applications, claims and payments from 2007 onward. The Ministry of Justice (MoJ) also found…
A vehicle belonging to school photography firm Pret-a-Portrait was broken into overnight on 6-7 October, and a camera bag containing SD memory cards was stolen. The cards may hold photographs taken at Priory School in Lewes, UK, plus images of QR code cards showing pupils' names and class names. The same equipment was used for three furth…
A Register "On Call" column recounts a reader's account (pseudonym Daniel) of joining a UK school in 2020, after the school's network had been taken offline for three months by ransomware. Recovery relied on external contractors and a months-old backup. His audit found a password policy of six letters with no complexity or expiry, and use…
The UK Information Commissioner's Office (ICO) has reprimanded the Metropolitan Police Service (MPS) and issued an enforcement notice. Between March 2023 and September 2024, officers registered about 500 free accounts on the retail crime platform Auror without formal procurement, a data protection impact assessment (DPIA) or data-sharing …
Bullhorn, a US-based recruitment software provider serving more than 10,000 customers, disabled access to its platform after detecting a cyber incident on October 16-17, 2026. The company engaged CrowdStrike to investigate and restore services. Systems are back online in the UK, US and Australia, but as of October 20 some users still had …
Unknown attackers compromised thousands of internet-exposed refrigeration controllers late on Sunday, raising temperatures to as high as 122°F (50°C), spoiling food and causing fires at nearly 700 French supermarkets. France's ANSSI warned of widespread compromises of Danfoss controllers and a day later added Copeland and its Dixell brand…
A still-unknown actor hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores, spiking temperatures, spoiling food and sparking fires. The incident fits a broader trend of extortionists and other attackers going after physical systems to maximise real-world pressure on victims. Earlier examples…
