CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
The Product Security and Telecommunications Infrastructure Regulations 2025 amend the 2023 regime, raising the security obligations on relevant connectable products. This article explains who is affected, what has changed and the immediate steps organisations should take to achieve compliance.
CVE-2025-66489 lets TOTP bypass passwords in Cal.com (Severity 9.9); patch to 5.9.8, review auth flows, and align fixes with ISO 27001 and ISO 22301 practices.
England childcare and early years providers should prepare for 2025 amendments to inspection instruments reflecting Ofsted grade changes and a new independent inspectorate for independent schools.
A critical unauthenticated RCE (CVE-2025-13486) in the Advanced Custom Fields: Extended WordPress plugin allows arbitrary code execution; organisations must inventory, patch or isolate affected sites, hunt for compromise and align controls to ISO 27001 and ISO 22301.
Public Authorities (Fraud, Error and Recovery) Act 2025 elevates fraud prevention and recovery of mispaid funds; organisations that interact with public bodies must strengthen controls now.
UK Mercury Regulation amendments extend coverage to England, Wales and Scotland, creating new compliance obligations for businesses handling mercury.
Donec ullamcorper nulla non metus auctor fringilla. Cras justo odio, dapibus ac facilisis in, egestas eget
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.