Section
Breaches, ransomware, threat intelligence and the business fallout of digital attacks.
Attackers reportedly altered refrigeration settings at about 700 French supermarkets, spoiling food and exposing the physical consequences of cyber intrusion. The incident puts connected machinery, supplier access and recovery responsibilities under scrutiny.
Half of respondents to PwC’s global survey identified attacks on AI systems among their biggest cyber readiness gaps, while geopolitical uncertainty is prompting businesses to reassess suppliers, crisis planning and operational resilience.
Organisations should prepare for quantum threats before practical attacks emerge, FTI Consulting specialists warn. Sensitive data stolen today could be decrypted later, while replacing vulnerable cryptography and securing supplier commitments could take years.
A Ukrainian ransomware affiliate arrested in Spain has received a 70-month US prison sentence. His involvement with Nefilim and Hive highlights cross-border enforcement and the limits of prosecuting individuals while criminal administrators remain at large.
Google and Mozilla have released fixes for 219 browser vulnerabilities, including sandbox escape risks. Organisations face updates across Chrome, Firefox, extended-support releases and Thunderbird, although neither vendor mentioned exploitation in real-world attacks.
Three GoAhead flaws could undermine certificate checks or expose some encrypted traffic in embedded devices. Two software fixes are available, but exposure and access to firmware updates depend on manufacturers’ implementations.
Nvidia’s cybersecurity policy chief has urged CISOs to clarify who accepts AI-related business risks, warning that adoption decisions require commercial understanding as well as technical scrutiny.
Engie has warned customers in France of possible exposure of personal and contract details through a partners’ marketing platform. The company says its own systems were unaffected, but the information could enable impersonation and targeted fraud.
Attackers have compromised 953 online shops with code that can hide from automated scanners. Sansec’s findings show why clean scans and up-to-date software cannot, on their own, establish that a retailer has removed an intruder.
ThreatAware has launched Dimension to govern security applications built with AI coding tools, as accompanying research highlights gaps in software review, approval and policy enforcement.