UK to consult on holding software firms liable for cyber breaches
The consultation is promised for next year and will build on a Law Commission review of product liability that runs until January 14.
58
Organization
National Cyber Security Centre
- Mentions · 7d2
- Mentions · 30d19
- All mentions24
- First seenSep 1, 2026
- Last mentioned2d ago
Timeline
24 articles · newest firstUK allocates £130 million to AI-powered cyber defenses
The cyber money sits inside a wider £600 million-plus AI package covering biosecurity, AISI and British AI firms.
62
Tenable describes how shadow AI spreads and how to contain it
IBM figures cited put shadow AI breach incidents at 43%, with an average cost of $5.39 million.
34
PHP patches unauthenticated RCE flaws dubbed PHP2Shell
Fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35; a public exploit hits before application code runs.
88
PHP rushes emergency patches as early php2shell attacks reported
Cloudflare says early attacks are emerging and has pushed temporary firewall rules to all customers, including free accounts.
90
NCSC adds an AI chapter to its research problem book
The new chapter sets out seven problem areas across defence use, AI assurance and resilience.
32
UK Legal Aid Agency hack worse than thought, with stolen records dating back to 1978
The UK Legal Aid Agency says hackers stole far older records than disclosed, including about 250,000 predating 2007 and one from 1978.
80
Hackers Steal UK Legal Aid Records Dating Back to 1978 in Major Cyberattack
The UK Legal Aid Agency says its 2025 breach exposed records dating to 1978, including about 250,000 older files.
73
UK Legal Aid Agency: Hackers stole records dating back to 1978
UK Legal Aid Agency says April 2025 hackers stole records dating to 1978, including about 250,000 pre-2007 files.
78
UK Government Announces Sweeping New AI Security Plans
The UK will use frontier AI to hunt government flaws and amend cyber law for AI incidents.
66
US Disrupts China-Linked Integrity Tech ‘s Cyber Espionage Tools
US authorities seized China-linked Integrity Tech tools Microscan and FishHub used to hack critical infrastructure.
84
International coalition seizes tools used by cyber firm behind Flax Typhoon
A US-led coalition seized Flax Typhoon tools Microscan and FishHub operated by China's Integrity Tech.
80
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
FBI and six countries say China-linked Integrity Technology Group stole emails and shared them via a third-party portal.
79
China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
UK and partners attribute global data theft to China-linked Integrity Technology Group and Flax Typhoon-related activity.
76
Russian cyberattacks against UK are 'Putin Tax' costing $3.3 billion, says lawmaker
A UK lawmaker estimates Russian cyber and sabotage activity costs Britain at least $2.6–$3.3 billion a year.
38
Telegram Account Behind ASOS Rogue Notification Tied to Gaming Trading
ASOS says names and contact details may have been accessed after rogue customer notifications; broader hack claims remain unproven.
74
Incident affecting ASOS customers
NCSC says ASOS customer names and contact details may have been accessed after unauthorized notifications.
64
Police Urge Passkey Use After Surge in Cybercrime Profits
UK Report Fraud urges passkey adoption after email and social media account takeover losses surged to £6.3m, up from £1.2m.
30
AI agents hacked the hackers, stealing email addresses from security research org
Attackers chained two Zammad zero-days to breach DIVD and steal volunteer researchers' email addresses.
81
Horizon3 Earns Cyber Essentials Certification Covering NodeZero EU Network
Horizon3 earned Cyber Essentials Plus certification for the NodeZero AWS EU network supporting its German data-sovereignty site, valid through September 2027.
10
Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
watchTowr says two unpatched Citrix NetScaler remote code execution zero-days are under active exploitation.
88
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
Check Point confirms active exploitation of pre-auth VPN RCE CVE-2026-85102 and zero-day CVE-2026-93616, now both in CISA KEV.
86
UK account-hack losses surge as new reporting system exposes hidden cases
UK reported account-hack losses rose 417% to £6.3M in 2025-26, largely because the new Report Fraud system is capturing previously hidden cases.
35
Cyber risk from frontier AI poses ‘most immediate concern’ to global financial system, watchdog warns
The Financial Stability Board warns G20 ministers that frontier AI-driven cyber risk is the most immediate threat to global financial stability.
45
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2019-11510100%10.0Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN
- CVE-2021-22205100%10.0Unauthenticated RCE in GitLab CE/EE via ExifTool Image Parsing (CVE-2021-22205)
- CVE-2021-319930%9.8Path Traversal RCE in ONLYOFFICE Document Server
- CVE-2026-9361692%9.8Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
- CVE-2026-10248922%9.4Session hijack to RCE in Zammad
- CVE-2026-10249011%9.4Local privilege escalation to root in all Zammad versions
- CVE-2026-1949033%9.3Remote Authentication Bypass in Citrix NetScaler ADC and NetScaler Gateway
- CVE-2023-228944%4.9Sensitive-data leak in Strapi admin query filters (through 4.5.5)
Appears with
- CISAorganization · 4
- Flax Typhoonthreat actor · 4
- Ethereal Pandathreat actor · 3
- Legal Aid Agencyvictim · 3
- AI Security Instituteorganization · 3
- Microsoftvendor · 3
- PHP Groupvendor · 2
- GCHQorganization · 2
- RedJuliettthreat actor · 2
- Apache Strutsproduct · 2
- National Crime Agencyorganization · 2
- Ministry of Justiceorganization · 2
- watchTowrorganization · 2
- Microsoft Exchangeproduct · 2
- FBIorganization · 2
- Cloudflarevendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.