Crooked Bough News Round-up

— Surging CVE disclosures force NIST to shake up workflows

 

at 4/17/26 9:19am

NIST announces big changes to the way it categorises and manages CVEs, set to have a big impact on how organisations manage patching and remediation.

— North Korean social engineering campaign targets macOS users

 

at 4/17/26 8:13am

A MacOS-focused social engineering campaign orchestrated by North Korea-based threat actor Sapphire Sleet has been exposed by Microsoft’s Threat Intelligence Unit.

— Oslo’s robots aren’t yet taking over, but are already punching above their weight

 

at 4/17/26 2:42am

The Norwegian capital’s leading innovators have got the ecosystem up and running, and are now calling for greater access to risk capital to take it to the next level

— Privacy, power, and encryption: why end-to-end security matters

 

at 4/16/26 7:55am

Governments may continue to look for ways to restrict end-to-end encryption, but the greater danger lies in demanding insecurity by design that would undermining trust, resilience, and the security of the global communications ecosystem.

— UK’s Sovereign AI supports supercomputing and drug discovery AI startups

 

at 4/16/26 7:30am

The UK government’s £500m Sovereign AI fund announces first cohort of startups backed to boost economic growth and national security

— CYBERUK ’26: UK lagging on legal protections for cyber pros

 

at 4/16/26 6:13am

Ahead of next week's CYBERUK conference, the CyberUp Campaign for reform of the UK's hacking laws urges the government to keep focus, and proposes a four-pillar framework that would protect cyber professionals from prosecution.

— One year on from the M&S cyber attack: What did we learn?

 

at 4/16/26 1:30am

A year on from the Marks & Spencer cyber attack, we look back at the incident, consider the lessons learned and ask if the retail sector is any more secure today

— UK businesses must face up to AI threat, says government

 

at 4/15/26 10:53am

Business secretary Liz Kendall urges Britain’s business community to sit up and pay attention to emerging AI threats, following the debut of Anthropic’s new frontier model, Mythos.

— Danske Bank upgrade error exposed 20,000 customer addresses

 

at 4/15/26 3:23am

Danish bank revealed details of a customer data leak last year which affected thousands of customers

— April Patch Tuesday brings zero-days in Defender, SharePoint Server

 

at 4/14/26 8:53am

Microsoft's latest Patch Tuesday update may be one of the largest in history, with over 160 issues in scope.

— Department for Transport shows how its AI system avoids bias

 

at 4/14/26 4:45am

A report looking at a system to extract themes from public consultations highlights human and LLM-based checks

— UK reliance on US big tech companies is ‘national security risk’, claims report

 

at 4/13/26 1:00pm

UK government urged to follow European countries by backing technology based on open standards

— ‘Grand Theft Auto’ publisher Rockstar hit by hackers again

 

at 4/13/26 5:55am

The notorious ShinyHunters hacking collective menaces video game publisher Rockstar and says it will leak data on 14 April

— Businesses are paying the price for CISO burnout

 

at 4/10/26 5:15am

Discussions of burnout among security pros are about more than just mental health: when burnout strikes, it can present a serious business risk

— Breaking the stranglehold: Responses to data sovereignty risk

 

at 4/10/26 1:50am

We look at the political and government responses to risks around data sovereignty and massive dependence on the three US hyperscalers – AWS, Azure and GCP – in the UK and Europe

— Capita’s troubled Civil Service Pension Scheme hit by data breach

 

at 4/8/26 6:42am

A data breach affecting 138 members of the Civil Service Pension Scheme piles pressure on the service’s administrator, Capita, amid ongoing issues

— Russian cyber spies targeting consumer, Soho routers

 

at 4/7/26 8:55am

The UK’s NCSC and Microsoft have shared details of an ongoing cyber espionage campaign targeting vulnerable network routers, orchestrated by Russian state actor Fancy Bear

— Tech can’t wait for regulation to protect children online

 

at 4/7/26 8:38am

The general secretary of the UK's largest teachers’ union explains why social media should be banned for under-sixteens

— Identity and AI: Questions of data security, trust and control

 

at 4/2/26 8:15am

The Computer Weekly Security Think Tank considers the intersection of AI and IAM. In this article, learn how AI-driven IAM projects must account for important questions around data protection, user trust, accountability and control.

— How ‘Wikipedia of cyber’ helps SAP make sense of threat data

 

at 4/2/26 4:15am

SAP runs enormous cloud environments for some of the world’s most heavily-regulated organisations, and in the hyperscale era, data security and compliance were becoming big challenges. It turned to cutting-edge agentic tools from Uptycs to cut through the noise

— What’s driving Oracle’s latest job cuts?

 

at 4/2/26 12:45am

Thousands of job losses have been reported, affecting many roles at Oracle Cloud Infrastructure, including those in software engineering and product compliance

As of 4/19/26 4:34am. Last new 4/17/26 2:44pm.