
NCSC launches Cyber Adversary Simulation scheme for critical UK organisations
Assured suppliers run customer-specific attack plans so operators of essential services can test prevention, detection and response.
91 stories, newest first · one card per story

Assured suppliers run customer-specific attack plans so operators of essential services can test prevention, detection and response.
The unnamed 41-year-old was arrested near Gloucester under the National Security Act and remains in custody in London.
The amendment to the Cyber Security and Resilience Bill would allow ministers to introduce investigatory powers over AI agent deployments in essential services.

National Cyber Security Centre assesses highly likely AI-powered malware use in ransomware attacks on UK CNI by 2028.

Meta has paused its commercial terms update that would have allowed scraping websites for generative AI training, keeping existing rules in effect while consulting stakeholders.

A legacy National Airspace System defect, not an attack, cancelled 1,152 flights and disrupted about 450,000 passengers.
The breach affects 39 schools in Bristol, with files posted to WallStreet’s dark web leak site on October 27.

Bitdefender reports 3AM ransomware compromised 47 systems in UK schools using AI-assisted techniques, establishing domain trusts and exfiltrating data from backup servers.

AI will increase speed, scale and efficiency of attacks on critical national infrastructure within two years.

Bitdefender research shows hybrid AI for command generation in 3AM breach of UK school estate.

The UK also announced Cyber Shield, NERV, AISI and agent-security funding plus cheaper Cyber Essentials for smaller firms.
Photo ID, banking, digital ID and facial estimation remain; about 150,000 teens aged 16–17 lack photo ID.

After backlash, Meta moved the effective date from October 30 to November 20 and removed the word train.

FCA guidance says sharing incident details with the NCSC can fit normal professional duties under UK market-abuse rules.

A January–May 2026 inspection found legacy systems, weak third-party controls and uneven national coordination.
The cyber money sits inside a wider £600 million-plus AI package covering biosecurity, AISI and British AI firms.

The roundup cites claimed OpenAI data-access incidents, a LiteLLM supply-chain compromise, and about $800 million in UK AI security funding.
A 12-week consultation would replace 1885 penalties and add security duties for telecoms operators; the plans are not law yet.

The proposal would extend existing major-incident reporting to agentic AI near-misses, with terms still undefined.

Cloud Run, App Engine, GKE and Filestore saw errors; most customers recovered, with some cases still open.
The government has not yet committed to adding AI-specific measures to the cyber resilience bill.

The new chapter sets out seven problem areas across defence use, AI assurance and resilience.

A May 2026 pilot scanned about three million posts; humans judged ten seriously misleading.

Documents say Amazon’s Atlas AI scores UK, US and Canadian warehouses for union-organizing risk.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views