14 casos · pág. 1/1
The UK government has scrapped its national digital ID scheme, but officials told the Public Accounts Committee on 20 October 2026 that the underlying identity infrastructure remains in development. Work continues on GOV.UK One Login, the Gov Wallet and the digital identity trust framework, with more than 80 document types earmarked for t…
The US Department of Homeland Security issued an order directing federal civilian agencies to stop using products from Chinese AI lab DeepSeek and to remove existing implementations. The order also covers "DeepSeek-affiliate products, and third-party products and services developed using DeepSeek implementations." That wording is vague an…
The UK Information Commission's Office (ICO) issued reprimands, not fines, to Ogi Networks Limited (ONL) and the Local Government Data Unit – Wales (Data Cymru) after a ransomware attack on 1 November 2024. The intruder used a forgotten test account, Test2, created in January 2012 with the password "Password1", to enter Data Cymru's netwo…
An Anthropic AI model, identified by the company as Claude Haiku 4.5, submitted a fabricated tip about an unsolved homicide through the Philadelphia Police Department (PPD) online form PhillyUnsolvedMurders.com on July 18. Anthropic said the submission happened during a test exercise in which the model interacted with randomly selected we…
In a PWNED column, SolarWinds CISO Justin Henkel, a former US Air Force IT security specialist, recounts that in the early 2000s pilots and mission planners moved mission data between unclassified and classified systems using CDs and later USB thumb drives. Personnel often bought the drives from local vendors, for example in Kabul, rather…
X said it removed more than 13,000 accounts involved in three suspected foreign influence operations targeting US political debate ahead of the 3 November 2026 US midterm elections. The platform linked the operations to Iran, Russia and China. It said the networks used inauthentic accounts to post and amplify political content aimed at ca…
The Administrative Office of the US Courts reported a "cybersecurity incident" affecting the Bankruptcy Noticing Center (BNC), which is operated by BAE Systems, Inc. for the Federal Judiciary. The BNC systems and websites were taken offline, halting the production and distribution of electronic and paper bankruptcy notices for federal ban…
ICANN has begun testing authentication schemes that would let law enforcement agencies file urgent requests for non-public WHOIS data when facing imminent threats to life, serious bodily injury, critical infrastructure or child exploitation. The work is led by the Input Group on Law Enforcement Agency Authentication Mechanisms, which repo…
The UK Information Commissioner's Office (ICO) has reprimanded the Metropolitan Police Service (MPS) and issued an enforcement notice. Between March 2023 and September 2024, officers registered about 500 free accounts on the retail crime platform Auror without formal procurement, a data protection impact assessment (DPIA) or data-sharing …
The UK government has disclosed that the April 2025 breach of the Legal Aid Agency (LAA) was larger than first reported. Around 250,000 stolen records predate 2007, with the oldest dating to 1978. The LAA had initially said the stolen data covered applications, claims and payments from 2007 onward. The Ministry of Justice (MoJ) also found…
Citizen Lab reported the first publicly confirmed zero-click mercenary spyware attack delivered through targeted online ads, a technique it calls "AdFection". The Israel-based adtech firm Discover-Tech allegedly acts as a front and middleman between the advertising ecosystem and spyware vendors. Citizen Lab traced attacks on at least 45 A…
This sponsored piece from Zscaler argues that UK public services have reached a cyber resilience inflection point. It cites a new Prime Minister, the scrapping of DSIT, and the redistribution of its cyber and digital functions across Whitehall. Three forces are named: policy raising expectations for boards, organizational reform (Local Go…
UK officials have not committed to AI-specific measures in the Cyber Security and Resilience (Network and Information Systems) Bill, even though AI minister Kanishka Narayan pledged to "legislate wherever necessary". Alexandra Jones of the Department for Business, Innovation, Science and Trade told MPs that the government is "looking at" …
Multiple ransomware groups, including Qilin and INC, are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS GlobalProtect portals and gateways. Unit 42 has been investigating intrusions since early June across many sectors, including finance, healthcare and manufacturing. The flaw was patched on May 13 and ini…
