Section
Cybersecurity, privacy, and the fight to stay safe online.
SonicWall UK packaged attachment quarantine and sandbox routing for councils still on legacy Exchange after LGSS digital flagged proxy-log spikes, bundling Capture ATP with a council licensing tier that assumes on-prem mail through 2027.
NatWest shortened reimbursement clocks on authorised push payment claims tied to romance fraud and bulk gift-card loads after City of London Police shared terminal metadata from a Square Mile probe, telling victims who bought high-street vouchers for fake partners that cases with matching MCC codes now skip a second manual review.
Starling Bank shipped an emergency app build invalidating reused push-payment tokens after Liverpool trading-standards officers flagged a merchant terminal that replayed wallet authorisations across split-ticket card sales.
The FCA reissued a clone-firm alert after weekend SMS blasts mimicked Hargreaves Lansdown’s Bristol switchboard, steering savers toward spoof portals that replay genuine company numbers while stripping FSCS cover from any transfer.
Revolut will bind high-risk transfers to registered handsets after briefing the Payment Systems Regulator’s APP fraud taskforce, tightening in-app OTP flows that ombudsman cases show scammers still defeat through coached screen sharing.
The NCSC warned councils to lock OAuth redirect URIs after a Midlands authority lost staff SSO sessions to a forged callback domain, pushing suppliers to audit open redirectors on planning portals tied to Microsoft Entra logins.
