"Now more than ever, the UK needs to build and protect sovereignty over its digital infrastructure, and not leave itself vulnerable to the policies and actions of foreign powers such as the US and China."

🗣 @JamesBaker on ORG's call for #DigitalSovereignty in the UK Cybersecurity Bill.

https://www.theregister.com/2026/01/06/uk_urged_to_unplug_from/

#CybersecurityBill #cybersecurity #ukpolitics #ukpol

"A data regulator that fails to deter bad practices is not worth having."

Rules only work if they're actually enforced.

With the Information Commissioner's Office (UK), we've seen a collapse in the use of corrective powers when data protection laws are broken.

We need an inquiry into this failing watchdog.

Read more about our open letter signed by over 70 organisations and experts ⬇️

https://www.theregister.com/2025/11/25/ico_inquiry_afghan_mod/

#dataprotection #gdpr #ICO #privacy #data #ukpolitics #ukpol

Scoopy, new, by me:

Meet Rey, the Admin of 'Scattered Lapsus$ Hunters'

"A prolific cybercriminal group that calls itself "Scattered LAPSUS$ Hunters" made headlines regularly this year by stealing data from and publicly mass extorting dozens of major corporations. But the tables seem to have turned somewhat for "Rey," the moniker chosen by the technical operator and public face of the hacker group: Earlier this week, Rey confirmed his real life identity and agreed to an interview after KrebsOnSecurity tracked him down and contacted his father."

https://krebsonsecurity.com/2025/11/meet-rey-the-admin-of-scattered-lapsus-hunters/

This one's a wild/messy one: Cyber giant F5, which serves most of the Fortune 500, said unknown government hackers had 'long term' access to its network:

• stole source code, some customer data
• accessed undisclosed vulns in BIG-IP
• DOJ allowed F5 to delay public notice citing national security

More, from me:

https://techcrunch.com/2025/10/15/cyber-giant-f5-networks-says-government-hackers-had-long-term-access-to-its-systems-stole-code-and-customer-data/

NEW: A notorious predominantly English-speaking hacking and extortion group, dubbed Scattered LAPSUS$ Hunters, has published a data leak site claiming the theft of 1 billion records from companies who store their customer data in Salesforce databases.

The hackers claim to have stolen data Qantas, Stellantis, FedEx, Hulu, and others.

w/ @lorenzofb

https://techcrunch.com/2025/10/03/hacking-group-claims-theft-of-1-billion-records-from-salesforce-customer-databases/

ICYMI: A viral app called Neon, which pays you to record your phone calls so your audio can be used to train AI, has gone offline after I discovered a security lapse exposing users' phone numbers, call recordings, and call transcriptions.

Anyone could download users' raw audio recordings because the web links were publicly accessible from the web.

https://techcrunch.com/2025/09/25/viral-call-recording-app-neon-goes-dark-after-exposing-users-phone-numbers-call-recordings-and-transcripts/