Hewlett-Packard Enterprise (HPE) disclosed it recently experienced a cyberattack, which it believes was led by Russian nation-state actor Cozy Bear. It was notified of “unauthorised access” to its cloud-based email environment in December, with data first accessed and exfiltrated in May 2023. HPE consulted external cybersecurity experts and is cooperating with law enforcement. The attack follows a similar breach by Cozy Bear against Microsoft.

The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.