SecurityBrief UK

Technology leaders are using AI Appreciation Day to highlight a shift towards more pragmatic, resilient uses of artificial intelligence in business. Executives at Commvault and Alphatax say AI is moving from hype to infrastructure and deeper automation. Vendors and customers are reassessing AI strategies as boards scrutinise cost, return on investment, and operational risk. Industry figures say the conversation has moved beyond experimentation and headline features.

Iron Mountain has opened a new campus with Creating Tomorrow College at its Rugby site to help young adults with special educational needs and disabilities move into employment. Learners aged 18 to 25 will combine specialist education with supported work placements in a live operational setting. The programme starts in September, placing students in a working business environment rather than separating study from workplace experience.

Leaseweb has partnered with ITQ to provide VMware Cloud Foundation services across Europe. Under the agreement, Leaseweb becomes the infrastructure partner for ITQ's services within Broadcom's VMware cloud service provider programme. Customers using VMware as a cloud service through ITQ will run on Leaseweb's infrastructure platform.

Gen has identified a WhatsApp attack tactic called GhostPairing that can give intruders ongoing access to an account, according to its H1 2026 Threat Report. The tactic relies on a user approving what appears to be a normal linked-device request, allowing an attacker to remain in the account without a password. Access can continue without a login alert, leaving messages, voice notes and contact patterns exposed.

ManageEngine has added post-deployment automation for TLS certificates in Key Manager Plus, completing automated certificate life cycle management in the software. The feature automates tasks that typically follow certificate renewal, including pushing certificates to target servers, running configured scripts, restarting dependent services, and notifying stakeholders. It works across both on-premises and cloud deployments.

Sonatype has published research showing a sharp rise in targeted open source malware attacks on developers. Malicious package advisories increased from 21 incidents in 2023 to 1,576 in 2025. The findings point to a shift in software supply chain attacks away from broad campaigns and toward packages designed to influence what developers choose to install. Attackers are increasingly trying to compromise developer environments before code reaches production.

SnapLogic has launched SnapCode and the SnapLogic MCP Server for AI coding environments, extending its integration platform into tools used for AI-assisted software development. The products are designed to let developers create integrations for business systems from within AI coding tools while keeping deployment and management inside SnapLogic's existing platform. SnapCode works with Claude Code at launch, including the Claude Code extension for Visual Studio Code.

Eluviant has launched Aurora Flow, a generative artificial intelligence model for enterprise video surveillance that is already in use in live deployments. The product is designed to analyse CCTV footage from multiple cameras in near real time and can operate in isolated environments without external network connectivity. It focuses on understanding sequences of actions and events rather than assessing individual frames in isolation.

Fourthline has agreed to merge with Veridas, combining two European identity verification groups with operations across Europe, Latin America and the US. The combined business is expected to complete 115 million verifications this year and operates in more than 50 countries. It will combine Fourthline's know-your-customer and anti-money laundering compliance systems with Veridas's identity, biometric and anti-fraud products.

HSBC UK is working with Visa on AI-powered shopping services for cardholders, including what the companies describe as an industry-first agentic card transaction on a live merchant website. The project is designed to let customers shop and pay through AI platforms without moving between multiple websites. An HSBC UK-issued card has already been used to complete an end-to-end transaction in that setting.