SecurityBrief UK

There is a question every business handling sensitive information should be asking before it ships another AI feature: when we give this model access to our data, what stops that access from quietly becoming access to everything? In IBM's 2025 breach research, found that 63% of organisations had no AI governance policy in place, and that among those experiencing an AI-related security incident, 97% lacked proper AI access controls. That is the real story behind the current rush to adopt AI.

Google Cloud and Valtech have released the open-source core of Nexus SDV, a software-defined vehicle platform designed to support connected car systems at scale. The launch is the first public release of a platform developed to help carmakers build software-led vehicle services. Built on Google Cloud infrastructure, it also integrates with Android Automotive OS, the in-vehicle operating system used by some manufacturers.

Amazon Web Services has added a series of artificial intelligence and infrastructure products and updated the availability status of a wide range of existing services. The changes span model access, desktop automation, observability tools, and product lifecycle notices.

Google has outlined a series of artificial intelligence product launches and updates across its consumer, developer and research businesses. The changes include Gemini 3.5 Live Translate and new features in Android 17. The update spans software for phones and laptops, tools for app developers, education products, research systems and a new Google Home Speaker built around Gemini.

Check Point has published its 2026 Exposure Gap Report, which found that vulnerabilities now account for 42.6% of critical exposures. That marks a sharp rise from 18.7% a year earlier, indicating a significant shift in the composition of cyber risk across connected environments. Vulnerabilities and internal information disclosure now account for about 76% of all critical exposures.

Authologic has added support for identity credentials stored in Google Wallet to its OmniID verification platform, giving businesses a way to use those credentials in Know Your Customer and Anti-Money Laundering checks. Businesses using OmniID can now accept credentials held in Google Wallet, including Google ID Pass, a digital passport available in countries including the United States, the United Kingdom, Brazil, Singapore and Taiwan.

Microlise has published its latest report on the UK transport and logistics industry. The survey found that 90% of transport and logistics managers believe drivers feel safer than they did five years ago. The study drew on responses from 250 UK transport and logistics professionals and examined changes in safety, sustainability, technology use and day-to-day fleet operations. Safety featured strongly in the findings.

DigiCert has introduced Quantum Central, a preview tool for organisations preparing for post-quantum cryptography. The self-service product, part of the DigiCert ONE portfolio, is designed to help security and IT teams identify where cryptography is used across their systems. Quantum Central is aimed at organisations beginning work on post-quantum cryptography, or PQC.

DroneShield has released a software update for its counter-drone platform that adds offline and air-gapped capabilities while improving RF detection performance, track update speed and localisation accuracy across its deployed systems. The Q3 2026 software release covers DroneShield's RF sensing portfolio and its DroneSentry-C2 command-and-control software.

Cloud Security Alliance has added AIUC-1 certification recognition to its STAR Registry, extending the registry's AI assurance coverage to AI agents. Organisations listed on the Security, Trust, Assurance and Risk Registry that also hold AIUC-1 certification can now add the AIUC-1 AI Agent Trustmark to their listing. The designation is intended to help companies identify providers whose AI agents have undergone third-party assessment against the AIUC-1 standard.