Threat Landscape stories
UK firms face mounting attack costs as NCC Group joins a government-backed push to put cyber risk on board agendas and across supply chains.
The pact aims to help enterprises patch vulnerable open source code faster without forcing disruptive upgrades to production systems.
The certifications may help reassure UK customers and public-sector buyers as cyber breaches remain widespread and scrutiny of suppliers intensifies.
Malicious AI skills are helping criminals steal data and run malware, while QR-code phishing climbed 146% in the latest ESET report.
Security teams now see autonomous AI as a bigger internal danger, even as most say it is boosting productivity, a survey found.
Average losses from successful attacks have fallen sharply, but one in three German SMEs says a major breach could still threaten its existence.
Vendor consolidation among managed service providers is pushing WatchGuard to sharpen its platform strategy as it appoints a new product chief.
The tactic now reaches Mac users, as attackers turn to trusted tools and social engineering to evade defences and steal credentials.
Recovery plans are lagging as Asian companies rush into agentic AI, with average incident downtime stretching to 28 days, a survey found.
Attackers are increasingly using genuine Microsoft pages and browser tricks to steal session tokens, passwords and spread malware, Barracuda says.
Criminals are using AI to scale phishing and hunt flaws faster, forcing firms to harden defences as alert volumes and risks rise.
Attackers are already using AI to exploit flaws faster than many organisations can detect them, Five Eyes agencies warned.
Cisco and OpenAI say AI agents are reshaping cyber defence by helping organisations detect, fix and respond to security threats more quickly.
Supplier breaches are amplifying disruption, with ransomware incidents in Europe rising 55.1% year on year in the first four months of 2026.
Half of organisations in Australia and New Zealand say AI use is ungoverned, heightening fears of deepfake scams and prompt-injection attacks.
Security teams may be able to cut false alarms as Picus says its new platform proves whether a vulnerability can actually be exploited.
Recent breaches have exposed how weak vendor oversight is leaving schools and businesses more vulnerable to supply chain attacks.
Australian businesses face a new cyber baseline as regulators move to align guidance with cloud, SaaS and AI-driven threats.
Australian firms are using AI at scale, but many lack the visibility to stop shadow tools, agentic access and rising incidents.
Most customers still face avoidable phishing risk, as 59% of Australian banks lack the strict DMARC setting that blocks spoofed emails.