News & insights
The latest news, insights, and updates on information & cyber security, privacy, and AI governance from Taylor Baines.
Get the latest threats, vulnerabilities, and legal, standards, and AI updates in your inbox every Monday.
Get our weekly insights by email
Threat and vulnerability round-up: week ending 8 November 2026
Attacks on supermarket refrigeration controllers across Europe, exploited WordPress, SonicWall, and Zyxel flaws, and phishing that steals Microsoft and Google sessions.
Urgent: WordPress core vulnerability under active attack
WordPress core flaw CVE-2026-119977 is under active attack: update every self-hosted site to WordPress 7.1.4 or its branch fix and check for compromise.
US bank regulator sets out how examiners will assess AI agents
The OCC’s new examiner framework rates bank AI by the harm a failure could cause and how independently it acts, putting autonomous payment agents in the top risk tier.
Hackers defrost supermarket freezers across Europe
A second wave of attacks on internet-connected refrigeration controllers forced stores across Europe to throw away food, and the NCSC warned UK organisations at risk.
Cyber Security and Resilience Bill completes its passage through the Lords
The Bill returns to the Commons after third reading in the Lords on 2 November, carrying report-stage amendments and new powers to address agentic AI risks.
Threat and vulnerability round-up: week ending 1 November 2026
Ivanti Connect Secure, Cisco ASA, GitLab, and Adobe Commerce flaws under attack, plus a trojanised Claude Code extension and AI-assisted state-linked intrusions.
Urgent: GitLab vulnerability under active attack
GitLab CE/EE flaw CVE-2026-97229 (CVSS 10.0) is under active attack: upgrade self-managed GitLab to 19.4.2, 19.3.4, or 19.2.8 and check for compromise.
GCHQ cannot account for thousands of storage devices, watchdog says
The UK surveillance watchdog says GCHQ cannot account for thousands of USB sticks, hard drives, and other portable storage devices.
Hackers steal $6.3 billion from Binance in record crypto theft
Binance lost about $6.3 billion in the largest crypto theft on record, which blockchain analysts attribute to North Korea’s TraderTraitor group.
New York signs law to protect children from unsafe AI chatbots
New York now requires AI companion chatbot operators to verify ages and block 12 categories of unsafe features for users under 18.
Urgent: Adobe Commerce and Node.js Brotli vulnerabilities under active attack
Adobe Commerce/Magento flaw CVE-2026-48356 and Brotli flaw CVE-2026-111497 in Node.js are under active attack: apply APSB26-73, update Node.js, and check for compromise.
Lords complete report stage of the Cyber Security and Resilience Bill
Peers defeated the government twice, adding a 12-month review of the NIS scheme and a register of hostile state cyber actors to the Bill ahead of third reading.