A trusted government mailbox tricked Revolut into releasing customer data
Hackers took control of an unused Italian government-agency email address and used it to request customer information from Revolut. The bank sent personal data belonging to 680 customers, including 55 in France, and says it will cover the cost of replacement identity documents where required.
Why it matters to you
A legitimate domain does not authenticate an unusual request. For sensitive SaaS exports, require a known case identifier, call-back or signed portal confirmation, dual approval and an audit trail that records exactly which fields were disclosed and why.
Microsoft adds operating-system containment for desktop AI agents
Microsoft introduced Execution Containers, or MXC, to stop desktop agents accessing data or performing unauthorised tasks. Windows administrators will be able to define agent rules that the operating system enforces, while Microsoft also moves more coding and Copilot work from the cloud onto capable PCs.
Why it matters to you
Treat every endpoint agent as untrusted code with a delegated identity. Enforce filesystem and network boundaries below the model, use short-lived credentials, separate administration from everyday browsing and retain logs outside the agent's writable environment.
Drone attack forces a Yandex data centre to suspend operations
Drones hit a Yandex data centre in Russia's Ryazan region, causing a fire and fully suspending the site's operations. Yandex Cloud reported electricity problems in one availability zone and advised customers to use other zones; the company's core consumer services remained available.
Why it matters to you
Availability zones are useful only when applications can actually move between them. Test cross-zone and cross-region recovery, keep backups and control planes outside the primary site, map shared power and fibre dependencies and define which services may degrade during evacuation or isolation.
French group plans a €10 billion AI campus in Finland
Sesterce plans to develop an AI data-centre site at a former paper mill in Jämsä, Finland. The first phase is planned for 200 MW, followed by 600 MW, with a longer-term ambition exceeding 1 GW; the company says an anchor customer is already committed.
Why it matters to you
Industrial-site reuse can accelerate access to land, power and cooling, but announced megawatts are not deployable compute. Verify grid connection, construction stages, network routes, customer concentration and exit options before relying on future European capacity.
FCC moves toward new spectrum for direct-to-device satellite service
The US Federal Communications Commission will vote on 29 October on advancing a 25 MHz spectrum auction for direct-to-device services. It is also considering 482 MHz for supplemental coverage from space and updated rules for hybrid terrestrial and satellite networks.
Why it matters to you
Satellite-to-phone service changes network design rather than merely adding coverage. Plan for variable latency and capacity, roaming and emergency-routing behaviour, spectrum coexistence, lawful-access requirements and clear monitoring at the terrestrial-satellite boundary.