As security teams worldwide grapple with the deep impact of the PHP2Shell flaws, the PHP Foundation has revealed how a carefully planned vulnerability disclosure process went horribly wrong. Read more »
Patch or go offline, say UK, US and EU agencies as two AI-discovered flaws in PHP, the language behind most websites, allow unauthenticated remote code execution Read more »
Observers have noted a surge in so-called ClickFix scams targeting the UK’s higher education sector as threat actors seek valuable personal and research data Read more »
Google runs a single UK cloud region, so when one London zone lost power, there was nowhere to failover – most services recovered by late afternoon, but courts are... Read more »
The Security Think Tank explores the intersection of GDPR and artificial intelligence, considering how data protection standards in the UK and Europe are changing in this new paradigm. Read more »
At a critical moment for Britain’s national security, the Ministry of Defence’s upgraded SIEM and security analytics platform is being delivered by Centerprise and Elastic. Read more »
The UK’s data protection watchdog warns of an “ongoing failure” by the Metropolitan Police Service to restrict staff from using unauthorised IT services Read more »
Munich plant builder Martin centralises 10GB of telemetry per line each day on open-source Stackable, hosted by Ionos, to dodge US hyperscaler lock-in and the US Cloud Act Read more »
AI can speed up attacks, with faster reconnaisance, while defenders should use AI to accelerate existing SOC work, but not chase after full autonomy Read more »
Microsoft’s monthly Patch Tuesday drop breaks yet another record, with over 1,400 flaws listed. Read more »
