Dutch police struggle with cyberattacks and underfunding

A leaked report has revealed serious financial and digital failings within the Dutch police, including unchecked spending on IT and cybersecurity.

Auditors from Ernst & Young found that the force must cut €160 million, raising concerns over national security and officer safety.

The Dutch Police Union warns that chronic understaffing, daily cyberattacks and a lack of digital resilience have pushed the system to breaking point.

A September data breach affected nearly all officers, and experts say over €300 million is needed to restore proper infrastructure.

Police Chief Janny Knol acknowledged the force underestimated the costs of digital transformation.

Merged systems from 24 regional departments have caused spiralling maintenance issues, while key tech projects run over budget and behind schedule. Urgent reforms are now planned.

For more information on these topics, visit diplomacy.edu.

TikTok Shop launches in France, Germany and Italy

TikTok is expanding its e-commerce push by launching TikTok Shop in France, Germany and Italy. Already active in Spain and Ireland, the feature allows users to buy products directly within the app via videos, livestreams and a dedicated shop tab.

Customers can now browse, order, and get personalised product suggestions without leaving TikTok. However, users under 18 won’t be able to access content linked to TikTok Shop, with the platform promising stricter moderation.

The move has sparked concern among French retailers, with trade groups calling on the government to act against what they see as unfair competition from platforms like TikTok, Shein and Temu. Lawmakers are also investigating TikTok’s impact on young users.

For more information on these topics, visit diplomacy.edu.

Ukrzaliznytsia reopens online ticket sales amid ongoing disruptions

Ukraine’s state-owned railway, Ukrzaliznytsia, has partially restored its online services following a large-scale cyber attack that disrupted passenger and freight transport systems. The attack, first reported on Sunday, forced passengers to buy tickets in person as the IT system went offline.

Ukrzaliznytsia announced that online ticket sales and refunds are now available in a backup format. However, due to high demand, technical interruptions may still occur, and passengers are advised to use the service only for urgent travel.

Despite ongoing challenges, the company reported that 12,000 tickets were successfully purchased through its online system after the restoration. The railway operator continues to monitor the situation and work towards fully stabilising its services in Ukraine.

For more information on these topics, visit diplomacy.edu.

Commission seeks simpler, harmonised telecom rules

EU Tech Commissioner Henna Virkkunen has voiced support for using a Regulation, rather than a Directive, in the upcoming Digital Networks Act.

She says this would ensure consistent implementation across all member states, avoiding the patchwork seen under current telecom rules.

Virkkunen also hinted at easing merger rules and reducing ex-ante regulation within the existing framework, the European Electronic Communications Code.

These changes, she noted, could encourage investment and help the EU meet its goal of full 5G and fibre coverage by 2030.

She criticised slow national efforts to phase out high-risk Chinese components from 5G networks, calling for stronger action.

Her stance follows pressure from MEPs concerned about ongoing cybersecurity risks and lack of enforcement.

For more information on these topics, visit diplomacy.edu.

NHS contractor fined after ransomware attack

The tech firm Advanced, which provides services to the NHS, has been fined over £3 million by the UK data watchdog following a major ransomware attack in 2022.

The breach disrupted NHS systems and exposed personal data from tens of thousands across the country.

Originally facing a £6 million penalty, Advanced saw the fine halved after settling with the Information Commissioner’s Office.

Regulators said the firm failed to implement multi-factor authentication, allowing hackers to access systems using stolen login details.

The LockBit attack caused widespread outages, including access to UK patient data. While Advanced acknowledged the resolution, it declined to offer further comment or name a spokesperson when contacted.

For more information on these topics, visit diplomacy.edu.

How to protect your business from infostealer malware and credential theft

Cybercriminals stole billions of login credentials last year using infostealer malware, putting businesses worldwide at serious risk.

These malicious tools quietly harvest passwords and session tokens from infected devices, often within minutes.

To fight back, companies must use strong multi-factor authentication, store passwords in dedicated managers, and protect devices with advanced endpoint security.

Simple browser-stored logins are no longer safe, and attackers are getting better at bypassing weak defences.

Reducing session lifespans, using hardware-backed logins, and training staff to spot phishing threats are all key to staying secure.

By combining tech with human vigilance, organisations can stay ahead of attackers and safeguard their systems and data.

For more information on these topics, visit diplomacy.edu.

Ransomware spreads through online conversion tools

The FBI’s Denver Field Office has issued a national warning over a rising cyber threat involving fake file converter websites. These sites, posing as free tools for tasks like converting documents or media formats, are secretly distributing ransomware and malware while appearing to perform legitimate functions.

According to the FBI, users are lured by services that convert files such as ‘.doc’ to ‘.pdf’ or combine image files, but the downloaded output often contains hidden malware.

A recent case revealed that a site impersonating Convertio delivered RedLine Stealer, a dangerous strain that harvests sensitive data from browsers, crypto wallets, and applications like Telegram and Discord.

Security experts have identified multiple malicious domains involved, with active incidents reported in the US, Denver area, just weeks ago.

The FBI urges the public to avoid unknown converter sites, keep antivirus software updated, and use built-in conversion features within trusted apps.

For more information on these topics, visit diplomacy.edu.

India demands $601 million from Samsung

Samsung, the largest smartphone manufacturer in India, is under pressure from the Indian government over an alleged tax evasion involving telecom equipment imports.

Authorities claim the company dodged import tariffs between 2018 and 2021 by misclassifying key components it sold to Reliance Jio.

The component in question, the ‘Remote Radio Head,’ was reportedly imported from Korea and Vietnam. While Samsung argues the part does not function as a transceiver and therefore shouldn’t be subject to import duties, Indian officials point to earlier communications from the company describing it as such.

Tax raids carried out in 2021 uncovered internal documents and emails that reportedly support the government’s case. Samsung denies any wrongdoing and insists it followed local laws, citing a disagreement over technical classification rather than deliberate fraud.

The company is now exploring legal options to contest the demand. Meanwhile, seven Samsung executives in India face additional fines totalling $81 million. Reliance Jio, the buyer of the equipment, has not issued a statement.

For more information on these topics, visit diplomacy.edu.

Ticketmaster under fire for misleading Oasis ticket sales

Ticketmaster is facing scrutiny from the UK’s Competition and Markets Authority (CMA) over concerns it may have breached consumer protection laws during the recent sale of Oasis reunion tour tickets.

The CMA launched an investigation after fans complained about steep prices and a lack of transparency.

The watchdog highlighted issues with Ticketmaster’s ‘platinum’ ticket labelling, which often carried price tags more than double the standard rate.

Despite the inflated costs, the tickets did not offer better seating or added benefits. Buyers were reportedly unaware of this, leading to confusion and frustration.

Another point of concern was Ticketmaster’s handling of standing room tickets. A lower-priced category was sold off early, leaving many fans in long online queues only to be met with pricier alternatives, with little explanation provided at the time of purchase.

The CMA is now working with Ticketmaster to ensure greater clarity for consumers moving forward. It expects the platform to make changes that will help fans make better-informed decisions when buying tickets in the future.

For more information on these topics, visit diplomacy.edu.

AI physiotherapy service helps UK patients manage back pain

Lower back pain, one of the world’s leading causes of disability, has left hundreds of thousands of people in the UK stuck on long waiting lists for treatment. To address the crisis, the NHS is trialling a new solution: Flok Health, the first AI-powered physiotherapy clinic approved by the Care Quality Commission.

The app offers patients immediate access to personalised treatment plans through pre-recorded videos driven by artificial intelligence.

Created by former Olympic rower Finn Stevenson and tech expert Ric da Silva, Flok aims to treat straightforward cases that don’t require scans or hands-on intervention.

Patients interact with an AI-powered virtual physio, responding to questions that tailor the treatment pathway, with over a billion potential combinations. Unlike generative AI, Flok uses a more controlled system, eliminating the risk of fabricated medical advice.

The service has already launched in Scotland and is expanding across England, with ambitions to cover half the UK within a year. Flok is also adding treatment for conditions like hip and knee osteoarthritis, and women’s pelvic health.

While promising, the system depends on patients correctly following instructions, as the AI cannot monitor physical movements. Real physiotherapists are available to answer questions, but they do not provide live feedback during exercises.

Though effective for some, not all users find AI a perfect fit. Some, like the article’s author, prefer the hands-on guidance and posture corrections of human therapists.

Experts agree AI has potential to make healthcare more accessible and efficient, but caution that these tools must be rigorously evaluated, continuously monitored, and designed to support – not replace – clinical care.

For more information on these topics, visit diplomacy.edu.