UK proposes policing reforms to combat cybercrime

Posted in Commentary with tags on January 27, 2026 by itnerd

Yesterday, the UK government announced “the largest reforms to policing since […] it was founded 2 centuries ago”, significantly in response to the rapid growth of online and cyber-enabled crime.

 “Crime itself is evolving. Criminals are operating with more sophistication than ever before, within this country, across our borders and in the online world,” Home Secretary Shabana Mahmood said in a statement.

Officials say roughly 90% of crimes now have a digital element, with online fraud accounting for 44%. 

The existing model is shared across 43 local police forces and is seen as poorly suited to tackle digital crimes that are often international. Under the plans outlined, the UK would create a new National Police Service (NPS), to handle serious and complex crimes, including cybercrime and large-scale online fraud intended to centralize capabilities and improve coordination, intelligence sharing, and investigative capacity for tech-driven crime.

The government plans to expand specialist digital skills within policing and establish clearer oversight for the use of AI and data-driven tools.

The reforms also emphasize technology and digital forensics, with investments in AI tools and centralized forensic services to address large backlogs of seized devices awaiting analysis. 

Michael Bell, Founder & CEO, Suzu Labs had this comment:

   “The 43-force model made sense when crime was local. It makes less sense when ransomware operators in Russia are hitting hospitals in Leeds while coordinating on Telegram. Centralizing cyber capabilities is the right structural response but the real constraint going forward is talent, not org charts.

   “That 20,000 device backlog won’t shrink through reorganization alone. The £115 million AI investment signals they’re planning to automate through the forensics debt rather than compete with the private sector for analysts.”

Denis Calderone CRO & COO, Suzu Labs adds this:

   “Well it’s bout time, honestly. You can’t fight international cybercrime with 43 fragmented local police forces. Criminals operate globally while police operate by postcode. When 90% of crimes have a digital element and 44% is online fraud, a National Police Service focused on complex digital crime makes sense. Cybercrime doesn’t respect constabulary borders.

   “That said, the 20,000 devices sitting in forensic analysis backlogs should terrify anyone. That’s not just a processing queue, that’s criminal cases going cold and victims waiting years for justice. Centralizing digital forensics could finally address this, but only if they actually fund it properly. Otherwise we’re just creating a bigger, more centralized backlog instead of 43 smaller ones.

   “Here’s where I get skeptical though. They want cybersecurity experts to join as Special Constables, but special constable numbers are down 73% since 2012. Why would a cybersecurity professional making six figures work part-time as a volunteer police officer?

   “The private sector pays better, offers remote work, and doesn’t require wearing a uniform. This recruitment strategy seems disconnected from the reality of the cybersecurity talent market. If they’re serious about bringing digital expertise into policing, they need to compete with private sector compensation, not rely on volunteerism.”

John Carberry, Solution Sleuth, Xcape, Inc. follows with this:

   “The UK government’s launch of the National Police Service (NPS) signifies a much-needed shift from a fragmented, Victorian-era system to a centralized, “cyber-first” defense strategy. Virtually all crimes now involve technology and online fraud is rampant, so isolated local policing struggles to combat borderless, tech-savvy criminals.

   “Establishing a National Police Service to consolidate cybercrime and major digital investigations promises enhanced coordination and intelligence sharing. This reform represents a significant technological leap, infusing £140 million in AI-powered forensics and suspect identification.

   “By aggregating analysis to a central location, this new system aims to overcome the current backlog of 20,000 evidentiary devices that delay digital investigations. Moreover, the mandatory “license to practice” requires all officers to possess a fundamental level of digital proficiency, indicating that technological skill is now a universal law enforcement requirement.

   “With 90% of all crimes leaving a digital trace, this restructuring enables the UK to combat crime at Internet speeds, rather than at the pace of local bureaucracy. Sustained investment, transparent governance, and the capacity to attract and retain cyber expertise are all necessary for this makeover to be successful.”

   “When nine out of ten crimes are digitally enabled, a policing model that stops at a county border isn’t just outdated, it’s a gift to the modern criminal.”

This is a really good move to make sure that crime doesn’t pay. Because the opposite is happening and that’s not good.

The Galaxy Tab S11 turns AI into a real productivity tool

Posted in Commentary with tags on January 27, 2026 by itnerd

The Galaxy Tab S11 series continues to stand out as one of Samsung’s most powerful productivity-focused tablets, especially for users who want advanced multitasking and AI tools on a larger screen? 

Designed to handle demanding workflows, the Galaxy Tab S11 combines flagship performance, enhanced Samsung DeX, and Galaxy AI features that feel genuinely useful for work, study, and creative projects. 

Here’s what sets the Galaxy Tab S11 apart: 

Performance built for multitasking 
Powered by a 3nm processor and optimized for large-screen workflows, Galaxy Tab S11 delivers fast, smooth performance whether users are running multiple apps, editing content, or working across displays using Samsung DeX. 

A smarter way to work with Galaxy AI 
Galaxy AI features are optimized for the tablet’s larger display, allowing users to summarize documents, refine writing, and turn rough sketches into polished visuals without interrupting their workflow. With Gemini Live, users can even interact with on-screen content in real time, making research, studying, and content review faster and more intuitive. 

Enhanced productivity with Samsung DeX and S Pen 
Upgraded Samsung DeX enables extended dual-screen setups and multiple customizable workspaces, while the redesigned S Pen offers improved control and comfort for notetaking, editing, and creative work. Together, they help transform the Galaxy Tab S11 into a true laptop alternative, wherever work happens. 

Built to be thin, light, and powerful, the Galaxy Tab S11 is designed for users who want serious productivity without sacrificing portability. 

Check out Samsung.ca for more info.

Canada Computers Website Pwned In Cyberattack That Swiped Credit Cards….. Oh Crap

Posted in Commentary with tags , on January 27, 2026 by itnerd

Here in Canada, the biggest retailer of computer gear not named Best Buy is Canada Computers. I’ve shopped there for years. But only in store. That’s likely a good thing because a report surfaced on Reddit on January 18th that an credit card skimmer had been set up on the Canada Computers online store around December 8 of last year. It was removed on January 22. Though it’s not clear if this was removed by the retailer or by the threat actor because it was discovered.

Now Canada Computers was apparently notified that this was a valid threat, but they didn’t make any acknowledgement of said threat. Then stories started to appear in places like MobileSyrup and iPhoneInCanada over the last couple of days that this had happened. And only yesterday did emails go out to Canada Computer Customers that this breach had happened. The cynic in me says that that attention in Canadian tech media forced their hand.

So what data did the bad guys get? How about:

  • credit card number
  • CVV
  • expiration date
  • first name
  • last name
  • billing address
  • billing city
  • billing province
  • billing postal code
  • phone number
  • email address
  • the Canada Computers account you’re logged into

This is more than enough information for a threat actor to do anything from commit fraud to identity theft. Given that, the smart thing for anyone who used Canada Computers website to order goods is to cancel their credit cards. And you should keep a close eye on your statements and transactions from your credit cards. I say this because there are reports that fraudulent purchases have been made using the information that this credit card skimmer obtained.

Now here’s the part where I hold Canada Computers feet to the fire. They need to urgently check to see if there was any lateral movement within Canada Computers environment. They also need to look at their website and address the weaknesses that allowed this threat actor to get in, along with any other weaknesses that they find. Then they need to explain in detail how the threat actors got in, what they are doing to make sure that this doesn’t happen again, and why any consumer should trust them. I say this because upon learning about this, I set up a Memory Express account as I am pretty skittish at stepping into Canada Computers. After all, I don’t know how far into their environment the threat actors got, or if they are still there. Thus it’s better to take my purchases for computer gear elsewhere. At least until Canada Computer says something that makes me want to reconsider that decision.

Nikon releases first firmware (V1.10) for the Nikon ZR cinema camera

Posted in Commentary with tags on January 27, 2026 by itnerd

 Nikon Canada Inc. is pleased to announce the first firmware update for the recently released Nikon ZR full-frame cinema camera. Version 1.10 is available now and adds an assortment of functional enhancements and features to benefit a wide range of videographers.

Firmware version 1.10 supports timecode input over a wired connection, making it easier to synchronize with audio recording devices and other cameras. The update also significantly extends the maximum recording time, making continuous shooting possible even for long recording sessions. In addition, a file-naming convention similar to that of RED cameras has been adopted, enabling more efficient data management, especially when shooting with multiple cameras. A number of features that enhance usability have also been added, including a function that displays a warning line indicating the maximum brightness level in the brightness information display (histogram and waveform monitor) when recording R3D NE videos in Log3G10, as well as a setting to prevent unintentional battery drain.

Nikon will continue to enhance its products through firmware updates that address user needs, while also contributing to the development of imaging culture in the field of cinema.

Enhanced Multi-Camera Production and Workflow Features

In addition to conventional timecode synchronization over a Bluetooth connection, the camera now supports a simpler and more reliable wired connection that enables timecode synchronization with external devices connected to the camera via the external microphone/line input connector. Timecode synchronization is simplified, as Bluetooth pairing is not required. Once initially synchronized, the timecode remains running even after disconnecting the generator (jam sync), eliminating the need to re-synchronize.

In addition, a file-naming function similar to that of RED cameras has been implemented to enhance production workflows. This feature prevents duplicate video file names, and makes managing large numbers of files from multiple cameras much more efficient with video-specific file names and the display of file names on the live view screen.

Significantly Extended Recording Time

The maximum recording times for continuous recording have been significantly extended from 125 minutes to up to 360 minutes (6 hour)1. This enables long takes and shooting at events that require extended recording, such as interviews, concerts, documentaries and special events. This extended recording time applies to ProRes 422 HQ, H.265 and H.264 formats at various frame rates.

Improved Exposure Monitoring

Firmware version 1.10 offers users a function that displays a warning line indicating the maximum brightness level in the histogram or waveform monitor to avoid unintentional clipping. This indicator line varies according to ISO sensitivity when recording R3D NE videos in Log3G10, making exposure easier to control.

Additional Enhancements

A [Power-on lamp energy saver] option has been added to the setup menu, allowing users to choose an option that keeps the power-on lamp lit at all times when the camera is powered on. This allows users to check whether the camera is on or off at a glance, even when the monitor is closed, helping to prevent unintentional drain on the battery while carrying or transporting the camera. In addition, [Video file type] can now be set to [R3D NE 12-bit (R3D)] in the video recording menu even if the shooting mode is set to AUTO.

Furthermore, the number of LUTs that can be viewed while importing from a memory card using Custom Setting [3D LUT] > [Import CUBE file] has been increased from 10 to a maximum of 50. This allows users to have greater variety when choosing the LUT that will best match the intended final look from a broader range of options while on location.

Availability

Starting today, ZR owners can visit the Nikon download centre to get the new firmware for free.

For more information about the latest Nikon products, including the vast collection of NIKKOR Z lenses and the entire line of Z series cameras, please visit www.nikon.ca.

Calling all women in tech in Toronto!

Posted in Commentary with tags on January 27, 2026 by itnerd

Join a WomenTech Network in-person event in Toronto, organized by Criteo, a space designed to share knowledge, connect, and empower women across the tech community.

The event’s keynote will focus on how to deal with legacy systems based on a real-world experience rearchitecting a tightly coupled monolith through incremental delivery. Modernizing a legacy system is more than a technical challenge. They’ll look at how to use vertical slices to reduce risk while continuing to ship value.

Event details:

Date: Wednesday, February 25, 2026Time: 5:30 PM – 8:30 PM EST

Location: Toronto (venue details shared after RSVP).

Agenda:

  • 05:30 PM – Check-In 
  • 06:00 PM – Welcome remarks by Women in Tech Network & Criteo
  • 06:15 PM – Keynote: Rearchitecting Legacy Systems Through Incremental Delivery
  • 07:00 PM – Panel Discussion by Women in Tech Network & Criteo
  • 07:45 PM – Networking

Take the next step in your career journey and explore opportunities with Criteo. Don’t miss this opportunity to connect, learn, and grow!

This event is intended for those individuals authorized to work in Canada. Register now to secure your place and join us in shaping the future of technology!

Guest Post: TikTok Is Finally American. But Is It Actually Better for Its US Users?

Posted in Commentary with tags , on January 27, 2026 by itnerd

By Jurgita Lapienytė, Editor-in-Chief at Cybernews 

TikTok is finally a US-owned company. Initially, the executive order pushing for TikTok’s ownership change in the US was meant to protect users. However, short video platforms will now potentially collect even more user data than they did before.

The app will collect your exact location, AI interactions such as prompts or uploaded files, and information provided by third parties, essentially to serve you better-tailored ads.

The first executive order regarding the divestment of TikTok was signed by President Donald J. Trump back in 2020, with the reasoning that TikTok automatically captures “vast swaths” of information from its users that the Chinese Communist Party could eventually access and use against the US and its citizens.

It took nearly six years for the TikTok USDS Joint Venture LLC, in which a group of investors including Oracle holds stakes, to be established. And while the hypothetical danger that the Chinese government might have used collected data for espionage has been largely mitigated, a new reality presents itself. 

The data collected by TikTok, while theoretically safe from China’s ruling party, will now be extensively exploited to provide personalized experiences to users – all in favor of maximizing TikTok’s profits.

How many times have you bought something via an ad on social media? For many who aren’t opting out, ads are becoming more personalized and more targeted. Advertisers are able to serve you better ads because of this tracking. Knowing where you reside, how old you are, and what things you’re looking for online, they can serve you an offer you can’t refuse.

But tailored ads are nothing compared to the danger the excessive data collection policy by this now US-owned entity might pose to vulnerable groups in society, such as LGBTQ+ community and immigrants.

The data that TikTok collects includes information that the current US government could easily use against people: racial origin, religious beliefs, sexual orientation, mental health diagnoses, and immigration status, among others.

Given the charged political climate and Immigration and Customs Enforcement (ICE) operations resulting in casualties and detainees, such information might become yet another weapon against unarmed protesters.

So, while TikTok changing hands might be a good thing for national security, the app still poses significant privacy and security issues for its 180+ million users in the US.

ABOUT THE AUTHOR 

journalists and security experts dedicated to uncovering cyber threats through research, testing, and data-driven reporting. With a career spanning over 15 years, she has reported on major global events, including the 2008 financial crisis and the 2015 Paris terror attacks, and has driven transparency through investigative journalism. A passionate advocate for cybersecurity awareness and women in tech, Jurgita has interviewed leading cybersecurity figures and amplifies underrepresented voices in the industry. Recognized as the Cybersecurity Journalist of the Year and featured in Top Cyber News Magazine’s 40 Under 40 in Cybersecurity, she is a thought leader shaping the conversation around cybersecurity. Jurgita has been quoted internationally – by Metro UK,  The Epoch TimesExtra BladetComputer Bild, and more. Her team reports on proprietary research highlighted in such outlets as the BBC, Forbes, TechRadar, Daily Mail, Fox News, Yahoo, and much more.

ABOUT CYBERNEWS

Cybernews is a globally recognized independent media outlet where journalists and security experts debunk cyber by research, testing, and data. Founded in 2019 in response to rising concerns about online security, the site covers breaking news, conducts original investigations, and offers unique perspectives on the evolving digital security landscape. Through white-hat investigative techniques, Cybernews research team identifies and safely discloses cybersecurity threats and vulnerabilities, while the editorial team provides cybersecurity-related news, analysis, and opinions by industry insiders with complete independence. 

TELUS and RingCentral expand Business Connect with AI-powered features for Canadian businesses

Posted in Commentary with tags on January 27, 2026 by itnerd

TELUS and RingCentral, Inc. today announced they are expanding their partnership to bring advanced AI capabilities to TELUS Business Connect, a comprehensive cloud-based communication platform. With new AI capabilities that span both customer engagement and employee productivity, the platform will deliver intelligent automation that helps businesses work smarter and serve customers better.

Business Connect replaces traditional phone systems with a cloud-based business phone system that transforms how businesses connect and collaborate by bringing calls, messages, and meetings together on one unified platform. 

As businesses navigate increasing customer expectations and competitive pressures, AI-powered communications have become business-critical. The expanded Business Connect platform addresses this shift with AI features specifically designed for the realities of businesses, such as automating routine tasks, enhancing customer interactions, and delivering actionable insights without requiring technical expertise.

Business Connect’s AI-powered capabilities from RingCentral include:

  • AI Assistant (RingCentral AVA): Provides real-time assistance across interactions, turning every live conversation into action through context-aware guidance, automation, and insights
  • AI ReceptionistTM (RingCentral AIR): An AI phone agent that understands caller intent, answers common questions with personalized responses, schedules appointments, and transfers calls to the best destination, based upon context and directory
  • AI Insights (RingCentral ACE): Delivers data-driven sentiment analysis to help sales teams improve performance through intelligent coaching
  • AI Chat: Engages customers through real-time website messaging, enabling live support teams to instantly respond to common questions and focus on more complex conversations
  • AI Contact Centre (RingCX): An omnichannel contact center solution designed to improve customer service across 20+ digital channels as well as agent performance with AI-powered agent and supervisor assistance.

This comprehensive AI integration represents TELUS’ commitment to making enterprise-grade technology accessible and practical for businesses of all sizes. The expanded TELUS Business Connect platform with enhanced AI features will be available to customers in early 2026. For more information about TELUS Business Connect, visit telus.com/BusinessConnect.

LevelBlue and Fortra Launch Strategic Managed Services Partnership to Accelerate Cybersecurity Innovation

Posted in Commentary with tags on January 27, 2026 by itnerd

LevelBlue, the world’s largest pure-play provider of managed security services, today announced a strategic partnership with Fortra, a global leader in cybersecurity solutions. This collaboration integrates Fortra’s best-in-class solutions with LevelBlue’s elite managed services, delivering a comprehensive security offering designed to combat the evolving threat landscape.

The partnership marks a major milestone in LevelBlue’s mission to deliver world-class, proactive cybersecurity and secure what’s next for its clients, while also representing a significant step forward in Fortra’s evolution as a channel-first company focused on empowering resellers, service providers, and distributors to deliver its solutions.

As part of this long-term partnership, LevelBlue will acquire the managed services of Fortra’s Alert Logic Managed Detection and Response (MDR), Extended Detection and Response (XDR), and Web Application Firewall (WAF) solutions. LevelBlue’s expanded MDR platform, strengthened through recent acquisitions, will provide Alert Logic’s client base with access to a larger global footprint, broader threat telemetry, and accelerated detection and response across complex environments. In parallel, Fortra will become one of LevelBlue’s leading cybersecurity partners, making its best-in-class software and platforms available to LevelBlue’s global client base.

Fortra’s technologies complement and extend LevelBlue’s existing strengths across data security, brand protection, email security, and offensive security, adding additional depth, optionality, and specialization for LevelBlue clients. Together, LevelBlue and Fortra will provide clients with greater choice, broader coverage across the attack surface, and improved security outcomes, all delivered through LevelBlue’s managed services model.

This partnership further reinforces LevelBlue’s position as the global pure-play leader in MDR and managed cybersecurity services, while underscoring Fortra’s role as a global leader in cybersecurity software and solutions. Following the launch of Fortra’s new partner program, Fortra Protect, last year, the partnership with LevelBlue further illustrates Fortra’s commitment to work with the world’s best service providers and channel experts to serve cyber clients.

LevelBlue, an innovator in cloud-based, AI-driven managed security services, continues to expand its leadership as the world’s largest pure-play MSSP, offering one of the most comprehensive portfolios spanning managed security, offensive security, incident response, threat intelligence, and MDR. This scale and breadth enables clients and partners to accelerate threat detection, streamline security operations, reduce cyber risk, and continuously mature their cybersecurity posture, now with even more choice and value through Fortra’s complementary technologies.

Santander served as the exclusive financial advisor to LevelBlue in this transaction and Stephens served as the exclusive financial advisor to Fortra/Alert Logic.

AI tools linked to 37 unsafe or violent incidents in 2025

Posted in Commentary with tags on January 27, 2026 by itnerd

Cybernews analyzed AI incidents and found that 37 AI incidents involving violent and unsafe content were reported in 2025, some of which resulted in loss of life. As more people turn to AI chatbots for advice and emotional support, there have been multiple cases in which these chatbots provided dangerous, life-threatening advice.

Examples from reported incidents:

  • One widely reported case involved 16-year-old Adam Raine, who died by suicide after ChatGPT allegedly encouraged his suicidal thoughts instead of urging him to get support.
  • An IT professional tested a chatbot called Nomi and found that, when prompted, it can encourage users to commit murder, providing detailed instructions on how to commit the act.

Recent Cybernews research has shown that popular LLMs do, in fact, provide self-harm advice if prompted correctly, indicating that current guardrails in popular chatbots are far from enough. 

For more information, you can find the full research here

Age Assurance’s Shared Future: Persona, Incode and Veratad Boost OpenAge Initiative Momentum

Posted in Commentary with tags on January 27, 2026 by itnerd

OpenAge today announced that Persona, Incode and Veratad have joined the OpenAge Initiative, adding further momentum to the industry’s move toward privacy-preserving, interoperable age assurance as foundational trust infrastructure.

Their participation builds on recent commitments from Meta and Socure, along with broad adoption across k-ID clients and reflects a growing consensus across platforms and identity providers that age assurance is becoming a baseline operational requirement, not a bespoke or jurisdiction-specific feature.

Launched in late 2025, the OpenAge Initiative brings together platforms, identity providers, and trust infrastructure partners to establish a user-centric, privacy-first framework for age assurance that works across services, jurisdictions, and regulatory regimes. The Free Speech Coalition (FSC) recently announced its support for the OpenAge Initiative and AgeKey, as a privacy-preserving and low-friction approach to meeting age-assurance requirements without compromising user anonymity or security.

At the centre of the initiative are AgeKeys, a reusable age credential that allows individuals to verify their age once with a participating provider and reuse that age signal across services that accept AgeKeys. Designed around open standards and double-anonymity principles, AgeKeys minimise data exposure, eliminate repeated verification, and support consistent protections for minors while preserving adult privacy.

Persona and Incode bring configurable age assurance and identity verification used by global platforms, while Veratad supports privacy-preserving, risk-based age and identity assurance through its global orchestration capabilities. Their participation expands the ecosystem of providers able to support OpenAge-aligned implementations.

AgeKeys have already been used millions of times across participating services, significantly reducing friction compared to traditional age-verification methods while strengthening privacy protections. The OpenAge Initiative remains open to platforms, identity providers, and ecosystem partners committed to advancing interoperable, privacy-preserving age assurance globally.