Crooked Bough News Round-up

— Watchdog investigates Europol over ‘irregular’ data processing claims

 

at 11/5/26 11:15pm

The European Data Protection Supervisor is investigating Europol’s data processing environment, after an investigation by Computer Weekly, Correctiv and Solomon exposed serious data protection and security failures

— Zurich uncovers £19m of fraud with Quantexa data analytics

 

at 11/5/26 9:19pm

The insurer has used Quantexa’s data analytics technology to uncover £109.3m in insurance fraud over the past year, including so-called crash-for-cash scams

— SailPoint: Anarchy reigns over enterprise agentic AI

 

at 11/4/26 9:30pm

SailPoint research has found 89% of EMEA enterprises deploy AI agents, but 99% lack the identity security tools to govern them

— Mastercard meets ‘responsibility’ through SME cyber security training

 

at 11/4/26 5:00am

Card giant is offering free cyber security training to millions of SMEs in the UK through its SME Academy

— TSB releases shocking fraud data to urge caution as Black Friday and Christmas near

 

at 11/3/26 12:01pm

TSB data shows that purchase fraud losses among its customers are up 4% this year

— Exposing state threats still matters - resilience matters more

 

at 11/3/26 6:57am

In October 2026, MI5 revealed it was spending more on countering state threats than it did during the Cold War. The Computer Weekly Security Think Tank explores the changing nature of state-backed cyber threats.

— UK government backs Cyber Essentials discount for SMEs

 

at 11/3/26 5:35am

Almost £10m of funding is being made available to help qualifying SMEs achieve Cyber Essentials certification

— UK abattoirs caught up in cyber attack against European supermarkets

 

at 11/3/26 5:30am

Refrigerators at three meat processors in the UK were hit by cyber attacks amid warnings from the UK’s National Cyber Security Centre to protect internet-facing industrial devices

— UK to face AI-powered cyber attacks within two years, warns NCSC

 

at 11/2/26 12:01pm

In a worst-case scenario, self-replicating artificial intelligence could launch cyber attacks at will against UK targets by 2028

— Cold chain cyber attacks highlight lack of OT security in retail

 

at 11/2/26 7:18am

A series of cyber attacks targeting supermarket cold chain equipment has highlighted a lack of attention paid to the resilience of operational technology

— Who controls the technology we depend on?

 

at 11/2/26 3:09am

In October 2026, MI5 revealed it was spending more on countering state threats than it did during the Cold War. The Computer Weekly Security Think Tank explores the changing nature of state-backed cyber threats.

— Belfast journalists subjected to unlawful spying cannot claim costs over PSNI failures

 

at 11/1/26 11:00pm

The Court of Appeal finds that the Investigatory Powers Tribunal has no power to award costs against Northern Ireland police despite ‘unreasonable conduct’ by the force

— North Korean ‘elite’ hacking group steals $6.36bn from Binance

 

at 10/30/26 4:30am

An engineer’s laptop was compromised, enabling hackers to withdraw $6.36bn from Binance wallets

— UK surveillance watchdog ‘disappointed’ over government investigatory powers failings

 

at 10/29/26 8:24am

Operational pressures do not reduce the need for lawful and consistent safeguards, says Investigatory Powers Commissioner’s Office

— Having a PHP patch available does not mean you're protected

 

at 10/29/26 6:04am

Patching is not a silver bullet solution. Turning patches into effective protection demands qualified professionals, clear responsibilities and the operational readiness to act.

— Lapsed US snooping law still running as senators object

 

at 10/28/26 7:20am

FISA 702 is one of two key US laws that undermine data sovereignty and allow the US to access foreign data without the subject knowing. Senators demand release of a secret ruling

— Austrian doctors to swap emails and phone calls for encrypted messages

 

at 10/28/26 1:50am

Austria is following Germany’s lead by introducing a sovereign encrypted messaging service for healthcare professionals

— PHP2Shell: US updates Kev catalogue as exploits spread

 

at 10/27/26 8:15am

After live exploitation of PHP2Shell was verified at the weekend, the US Cisa cyber agency has updated its vulnerability catalogue, urging organisations to prioritise their fixes

— OpenAI’s Altman: Only way out of patch apocalypse is through

 

at 10/27/26 8:00am

OpenAI CEO Sam Altman took to the keynote stage at Oracle AI World, calling for the security community to keep focus in the face of AI-enabled vulnerability discovery

— Autumn Budget 2026: Healey sets out AI funding

 

at 10/27/26 2:20am

The chancellor wants to boost UK tech sovereignty and has unveiled plans to support chip development, AI defence and biosecurity

— AI World: AI vulnerability surge brings change for Oracle’s cyber practice

 

at 10/27/26 12:45am

With CVE volumes spiking amid AI-assisted vulnerability discovery, Oracle is responding with cyber initiatives and practices for its customers

As of 11/8/26 2:25am. Last new 11/6/26 6:16am.