Amendments to the Building Safety Responsible Actors Scheme update obligations for developers and owners and explain enforcement under UK health and safety law.
azureauthextension Authenticate fails to validate bearer tokens, allowing replay of any Azure access token against OpenTelemetry receivers when a matching Host header is chosen.
New traffic order on the M77/A77 Girvan imposes temporary traffic prohibitions and a 10 mph limit, with significant implications for fleet operations and regulatory compliance.
Exim before 4.99.3 has a GnuTLS use-after-free triggered by a TLS close_notify mid-body during BDAT chunking, enabling potential remote code execution; patch and isolate mail hosts immediately.
UK extends roadworthiness testing and tachograph rules to certain zero-emission goods vehicles in the 3.5–4.25 t band, creating new duties for fleet operators.
A blind SQL injection in the APIExperts Square for WooCommerce WordPress plugin was reported ~34 minutes ago; site owners should inventory, isolate, patch or remove the plugin and follow ISO-aligned controls.
The Crime and Policing Act 2026 introduces corporate liability provisions with implications for governance and health and safety compliance.
Magic Link in WSO2 Identity Server can be driven to consume all memory and cause service unavailability; immediate checks, rate limiting and vendor contact advised.
New airspace restrictions at RAF Cosford Airshow require duty holders to update risk management and governance to stay compliant with UK health and safety law.
ShinyHunters claim a ransom after a reported breach of Canvas affecting roughly 275 million students and 9,000 institutions; immediate supplier engagement, forced credential resets and ISO-aligned steps advised.
ShinyHunters claimed responsibility for a Canvas incident affecting almost 9,000 schools, with outages and personally identifying information reported; urgent supplier checks, log preservation and backup testing are immediate priorities.
Critical CVE-2026-8076: CashDro 3 web admin panel allows numeric PINs and lacks account lockout, enabling brute-force admin access to POS cash systems.
Let’s start your compliance journey together.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.