Editor's News

Two critical PHP vulnerabilities, the widely used programming language underpinning millions of websites and web applications, have prompted urgent warnings from cybersecurity authorities worldwide. Following reports on the 20th October that details of the vulnerabilities had leaked ahead of their scheduled disclosure, PHP developers released emergency security updates on 21 October. The UK's National Cyber Security Centre (NCSC) urged organisations to identify affected systems and apply updates immediately, while Amazon's threat intelligence team reported evidence...

Cybersecurity researchers at Forescout are drawing attention to the risks posed by exposed refrigeration control systems, warning that weaknesses in operational technology (OT) could have serious consequences for food supplies, business continuity and other temperature-sensitive operations. The warning comes following cyberattacks against French supermarkets in October 2026, which reportedly disrupted refrigeration systems at hundreds of stores. Attackers were able to interfere with cooling operations, resulting in temperature fluctuations, spoiled stock and significant disruption. The incidents...

Keeper Security has introduced a new AI-powered phishing protection feature designed to prevent users from entering their credentials on fraudulent websites. Available through the Keeper Browser Extension, the new Phishing Protection capability uses a local AI engine to detect look-alike domains, spoofed websites and brand impersonation attempts. By identifying suspicious login pages directly in the browser, the feature aims to prevent credential theft before sensitive information reaches cybercriminals. The launch comes as credential-based attacks continue...

Organised by Eskenzi PR, the tenth annual awards ceremony took place at St Barts Pub in London, bringing together cybersecurity professionals, educators, industry leaders and advocates to recognise those whose work often goes unnoticed. Unlike many industry awards, the Security Serious Unsung Heroes Awards are free to enter and attend. The initiative celebrates individuals and teams going above and beyond to protect businesses, communities and individuals, while also championing diversity, wellbeing, education and the next...

Nearly half (49.8%) of organisations have confirmed or suspected that an AI agent took an unintended, unexpected or unauthorised action in the past year, according to new research from Salt Security. The findings, published in the company's State of Agentic AI and API Security 2H 2026 report, highlight growing concerns around the security of autonomous AI systems as enterprises increasingly integrate agents into everyday operations. Based on a survey of more than 380 security and...

Tines has been announced as the headline sponsor of CSIDES 2026, a community-focused cyber security event taking place at the Grand Pier in Weston-super-Mare on the 9th October. Organised by not-for-profit organisation Defend Together CIC, CSIDES aims to make cyber security more accessible to individuals, families, businesses and educators, while inspiring the next generation of cyber professionals. Tines, an intelligent workflow platform used by security and IT teams, joins a roster of sponsors including 4FOX...

Over the past few years, AI has gone from something understood and used by a select few to a cornerstone of almost every organisation. As businesses race to adopt new models, tools and autonomous agents, security and governance are struggling to keep up. Recent incidents involving AI agents behaving in unexpected ways have offered an early glimpse of what could happen as these systems are given greater autonomy. Closer to home, organisations face a more...

Security researchers have uncovered a now-fixed vulnerability in agentic AI platform Manus that could have allowed attackers to hijack an AI agent through a single malicious email and potentially access a user’s connected accounts. Researchers at Salt Labs, the research arm of Salt Security, found that Manus could interpret malicious instructions embedded within an incoming email and execute them when asked by a user to check their messages. Manus is a general-purpose agentic AI platform...

In 2026, the Cyber Security Academic Startup Accelerator Programme (CyberASAP), which is funded by the UK Government's Department for Digital, Culture, Media and Sport (DCMS) and delivered by Innovate UK, celebrates its 10th anniversary. Over the past decade, the programme has bridged the gap between academia and industry, accelerating the commercialisation of cutting-edge cyber technologies from inside UK universities. So far, programme alumni have raised well over £75m in follow-on investment, resulting in 45 cyber...

CSIDES has unveiled its full agenda for its 2026 cybersecurity community event, with more than 25 industry speakers and a programme of talks, workshops and hands-on activities set to take over Weston-super-Mare’s Grand Pier. Returning on 9th October following its inaugural event in 2025, CSIDES aims to make cybersecurity more accessible to the wider public while encouraging more people to consider careers in the industry. Among those taking to the Main Stage will be threat...