Six sectors, covered end to end.
Two pages each, no filler — what actually moved in aviation cyber, UK construction cyber and compliance, counter-UAS, autonomous vehicles, cloud and AI platform change, and international affairs, and what it means for the people who have to act on it.
Uber's Pony.ai and Verne partnership began mapping Manchester on 14 October; Waymo confirmed Madrid as its next market on 20 October.
The FAA certified the 737 MAX 10 on 20 October, four years late, clearing deliveries to Ryanair's 150 firm aircraft plus 150 options from spring 2027 — the first capacity lever outside…
Microsoft's October release fixed around 1,400 flaws, including a Windows Shell bug under active attack that lets a crafted file bypass Mark-of-the-Web protections.
CISA added four actively exploited flaws to its KEV catalogue this fortnight, including a PAN-OS management-interface flaw Palo Alto says has no workaround.
CISA added Palo Alto PAN-OS, Cisco Secure Email Gateway and Ahsay AhsayCBS to its exploited-vulnerability catalogue on 14 October, with a federal remediation deadline of 17 October.
Government figures reported this fortnight count 340 drone incidents at British military sites in the twelve months to August 2026, with officials naming only "actors acting in the…
Zelensky says Kyiv learned of the deal from the media and had already halted strikes on Russian sites; Moscow hit a Kharkiv power plant regardless. Trump has declined to blame Russia.
The Automated Passenger Services regime has been in force since 15 May, but no operator has been granted a permit to run a driverless passenger service anywhere in Great Britain.
On 2 October AWS patched Loom, its AI-agent platform: an unconfigured identity provider made the backend return a fixed super-admin identity to any unauthenticated caller (CVSS 10.0).
Citrix confirmed active exploitation of NetScaler ADC and Gateway, used widely for site and supplier remote access, before a patch existed.
CVE-2026-88771 and CVE-2026-88772 were exploited from 3 September, planting webshells on NetScaler ADC and Gateway appliances; Citrix disclosed and patched only on 27 September.
Between 30 September and 3 October, Moldova recorded three drone incursions, then three missiles and two more drones two days later, with wreckage falling across four districts; one…
The Philippine Coast Guard says JIA HAI KE 7 faked its AIS track while loitering over the Luzon-Taiwan cable route, ignoring radio challenges before being driven off.
An indefinite Groundforce strike at Barcelona and a parallel Swissport dispute at Palma put roughly two million seats at risk and spilled into Heathrow, Schiphol and Frankfurt on 11 August.
These briefings are the thought leadership end of what we do. Beyond them sits guidance on what to prioritise, and the teams to make your remediation plans actually happen.
Get in touch