NatWest blocks messaging apps for staff

NatWest Group has prohibited the use of messaging apps like WhatsApp, Facebook Messenger, and Skype on company devices in the UK. The decision aims to prevent employees from using unapproved platforms to discuss business matters, enhancing oversight and compliance. These platforms, known for disappearing messages, raise concerns over accountability and record-keeping.

The bank’s updated policy comes as regulatory scrutiny over ‘off-channel’ communications intensifies. UK and US regulators have fined banks billions in recent years for failing to retain such communications. NatWest emphasised that all work-related discussions should occur on approved, retrievable channels to ensure transparency.

The Financial Conduct Authority is reportedly considering a broader investigation into the use of private messaging in UK banks. Beyond banking, similar issues have arisen in government, including the loss of key WhatsApp messages during the UK Covid-19 pandemic, raising questions about accountability in public affairs.

Indian VVDN partners with SecureThings.ai to boost automotive cybersecurity

VVDN Technologies has partnered with SecureThings.ai to enhance cybersecurity across various industry sectors, primarily focusing on the connected vehicle ecosystem. Through this collaboration, SecureThings.ai’s advanced cybersecurity solutions will be integrated into VVDN’s automotive products and services, including vehicle connectivity, in-vehicle infotainment systems, instrument clusters, advanced driver assistance systems (ADAS), and software-defined vehicle (SDV) solutions.

As a result, this partnership ensures that VVDN meets global cybersecurity standards, such as ISO 21434, while providing robust security for connected vehicles and IoT ecosystems. Specifically, key initiatives include intrusion detection and protection systems, real-time threat intelligence services, the establishment of a security research lab, and the provision of a red team as a service for independent cybersecurity assessments.

These efforts will help VVDN fortify connected devices, comply with evolving regulations like R 155/156 and AIS 189/190 in India, and offer comprehensive protection against cyber threats. Moreover, this partnership strengthens both companies’ positions in the cybersecurity market, with VVDN emphasising its commitment to delivering secure, reliable solutions globally.

Furthermore, SecureThings.ai’s expertise in cutting-edge security research and technologies will empower OEMs and tier-1 suppliers to combat emerging threats and adhere to stringent regulatory standards. The collaboration also leverages VVDN’s product engineering capabilities, thus driving innovation and setting new standards for cybersecurity in the automotive and IoT industries.

Australia and South Korea partner for advanced defense communications

Australian electronics manufacturer GME, Hanwha Defence Australia (HDA), and South Korean Hanwha Systems have entered a strategic partnership to develop advanced defence communications systems. The collaboration, formalised through a Memorandum of Understanding (MoU) signed at the MilCIS Conference in Canberra, focuses on exploring manufacturing and technology transfer opportunities for the Australian Defence market.

GME, known for its expertise in RF communication technology, will contribute its capabilities in radios, beacons, and antennae and is the only Australian manufacturer of UHF CB radios and emergency beacon products. HDA and Hanwha Systems bring extensive experience in land platforms, C4I hardware and software, electronic optics, radars, and avionics electronics alongside advanced solutions such as tactical 5G and LEO Satcom. Together, they aim to enhance secure, interoperable, and resilient communications for military operations, ensuring seamless all-domain operations across defence sectors.

The partnership strengthens the sovereign defence capabilities of Australia and positions the companies to explore growth opportunities in the global defence market. By combining local manufacturing expertise with cutting-edge global technologies, the collaboration seeks to empower the Australian industry with innovative solutions. This long-term vision focuses on fostering ongoing innovation, expanding Australian defence capabilities, exploring new global defence market opportunities, and advancing national and international defence objectives.

EU Commissioner calls for tougher 5G security measures

The incoming European Commissioner for Tech Sovereignty, Security, and Democracy, Henna Virkkunen, expressed dissatisfaction with the limited action taken by EU member states to exclude high-risk telecom suppliers, such as China’s Huawei and ZTE, from critical infrastructure. During her confirmation hearing in the European Parliament, Virkkunen noted that although the European Commission adopted 5G security measures in 2020, fewer than half of the EU member states have implemented restrictions on these suppliers. She indicated that this issue will be addressed in the planned revision of the Cyber Security Act next year and stressed the need for more serious action from national governments.

Virkkunen also pointed out that while the EU had adopted the 5G Cybersecurity Toolbox to protect telecom networks, only 11 of the 27 member states have fully implemented measures, including bans and restrictions on high-risk vendors. In addition to her efforts to strengthen cybersecurity, Virkkunen plans to propose a Digital Networks Act in 2025 to overhaul telecom regulations and boost investment and connectivity. On the topic of US Big Tech compliance with EU rules, she reaffirmed the importance of cooperation but emphasised that all companies must adhere to EU regulations, including those set out in the Digital Services Act.

UK proposes fines for executives over illegal knife sales ads

The UK government is considering fines of up to £10,000 for social media executives who fail to remove illegal knife advertisements from their platforms. This proposal is part of Labour’s effort to halve knife crime in the next decade by addressing the ‘unacceptable use’ of online spaces to market illegal weapons and promote violence.

Under the plans, police would have the power to issue warnings to online companies and require the removal of specific content, with further penalties imposed on senior officials if action is not taken swiftly.The government also aims to tighten laws around the sale of ninja swords, following the tragic case of 16-year-old Ronan Kanda, who was killed with a weapon bought online.

Home Secretary Yvette Cooper stated that these new sanctions are part of a broader mission to reduce knife crime, which has devastated many communities. The proposals, backed by a coalition including actor Idris Elba, aim to ensure that online marketplaces take greater responsibility in preventing the sale of dangerous weapons.

Germany’s cybersecurity on high alert ahead of elections

Germany is strengthening its cyber defences as elections approach, with Interior Minister Nancy Faeser highlighting the need for robust protections against cyber-attacks and disinformation. Faeser warned of potential threats from Russia and other foreign actors, stressing that democracy must also be safeguarded in the digital realm.

The annual report from the Federal Office for Information Security pointed to Germany’s vulnerability to hybrid threats, which include hacking, manipulation, and disinformation. Faeser confirmed plans to bolster cybersecurity, aiming to counteract any attempts at digital interference that could destabilise the election process.

Germany’s snap elections are set for early next year, following the collapse of Chancellor Olaf Scholz’s coalition government amid economic concerns and rising populism. While recent elections saw no major cybersecurity incidents, authorities continue to monitor for risks.

With the political landscape in flux, security agencies remain vigilant. Enhanced measures are in place to detect and address cyber threats as the nation prepares for a potentially turbulent electoral period.

TSA proposes new cybersecurity rule to bolster US transportation infrastructure resilience

The US Transportation Security Administration (TSA) has proposed a new cybersecurity rule designed to strengthen the resilience of surface transportation infrastructure. Specifically, the rule mandates high-risk operators, including those in the pipeline, railroad, and bus sectors, to implement comprehensive Cyber Risk Management (CRM) programs to manage and mitigate cybersecurity risks.

In addition to this, operators will be required to report cybersecurity incidents to the Cybersecurity and Infrastructure Security Agency (CISA) and physical security concerns to TSA. Furthermore, the rule stipulates that operators must develop and maintain detailed cybersecurity plans, including a Cybersecurity Assessment Plan (CAP) for annual evaluations and a Cybersecurity Operational Implementation Plan (COIP) to guide improvements.

These plans must incorporate governance structures, designate cybersecurity coordinators, and undergo regular audits to assess their effectiveness. Moreover, the rule promotes a defence-in-depth approach to cybersecurity by including system monitoring, patch management, and incident response planning, all of which aim to reduce the impact of cyberattacks.

Additionally, TSA seeks public feedback on the rule’s potential compliance burdens, economic impacts, and ways to streamline the process, particularly for smaller entities. TSA’s initiative reflects a broader commitment to enhancing the cybersecurity posture of surface transportation systems while ensuring regulatory consistency across federal, state, and local levels.

Why does it matter?

The agency is seeking input on reducing redundancies and improving alignment with existing regulations, particularly in cybersecurity training and personnel vetting for high-risk industries. By gathering feedback, TSA aims to refine the rule and ensure it effectively addresses the evolving cyber threats facing the nation’s critical transportation infrastructure.

South Korea attributes cyberattacks to pro-Russia groups amid rising tensions with North Korea

South Korea has reported a rise in cyberattacks by pro-Russia hacking groups following North Korea’s recent deployment of troops to Russia in support of its war against Ukraine. Seoul’s presidential office held an emergency meeting after detecting denial-of-service attacks on government and private websites, leading to temporary outages but no significant damage. Officials have pledged to strengthen cybersecurity defences in response to the attacks.

The South Korean government noted that pro-Russian hacktivist attacks have grown more frequent since North Korea sent troops to Russia. Reports indicate that over 10,000 North Korean soldiers are now stationed in Russia, with some reportedly engaged in combat near Ukraine.

The new military partnership between Pyongyang and Moscow has drawn condemnation from South Korea, the US, and Western allies, with Ukrainian President Volodymyr Zelensky warning that these developments mark a new era of global instability.

Australia’s proposed ban on social media for under-16s sparks global debate on youth digital exposure

Australian Prime Minister Anthony Albanese announced a groundbreaking proposal on Thursday to implement a social media ban for children under 16. The proposed legislation would require social media platforms to verify users’ ages and ensure that minors are not accessing their services. Platforms that fail to comply would face substantial fines, while users or their parents would not face penalties for violating the law. Albanese emphasised that this initiative aims to protect children from the harmful effects of social media, stressing that parents and families could count on the government’s support.

The bill would not allow exemptions for children whose parents consent to their use of social media, and it would not ‘grandfather’ existing users who are underage. Social media platforms such as Instagram, TikTok, Facebook, X, and YouTube would be directly affected by the legislation. Minister for Communications, Michelle Rowland, mentioned that these platforms had been consulted on how the law could be practically enforced, but no exemptions would be granted.

While some experts have voiced concerns about the blanket nature of the proposed ban, suggesting that it might not be the most effective solution, social media companies, including Meta (the parent company of Facebook and Instagram), have expressed support for age verification and parental consent tools. Last month, over 140 international experts signed an open letter urging the government to reconsider the approach. This debate echoes similar discussions in the US, where there have been efforts to restrict children’s access to social media for mental health reasons.

FCA cracks down on £1.5 million crypto scam targeting UK investors

The UK’s Financial Conduct Authority (FCA) has successfully prosecuted two men, Raymondip Bedi and Patrick Mavanga, for running a £1.5 million cryptocurrency investment fraud that misled 65 investors. Between 2017 and 2019, Bedi and Mavanga lured investors through cold calls and fraudulent, professional-looking websites, offering high returns on fake crypto platforms. The tactic resulted in substantial losses for their victims, totalling over £1.5 million.

The FCA charged both men with conspiracy to defraud, operating without FCA authorisation, and money laundering. Mavanga also faced additional charges for perverting the course of justice by deleting phone records linked to the scheme. The prosecution underscores the FCA’s mandate to uphold financial service standards and highlights the importance of being wary of unsolicited calls and online investment offers.

Two other suspects were involved: Rowena Bedi was acquitted, while a third defendant awaits a retrial in 2025. Another individual, Minas Filippidis, remains at large. The FCA advises consumers to stay vigilant against scams and only trust financial services authorised by the agency.