Manchestereveningnews Daily Cyber Attacks Target Greater Manchester's Infrastructure
Article Content
- •Greater Manchester faces daily cyber attacks from global hackers.
- •Ransomware is the primary threat, with significant risks to emergency services.
- •The GMCA has invested £1.2 million to enhance cyber resilience.
Greater Manchester is experiencing daily cyber attacks from global hackers, as reported by the Greater Manchester Combined Authority (GMCA). The region is in a 'hostile threat landscape' with major risks from cybercriminals and state-sponsored actors from countries like Russia, China, Iran, and North Korea. Ransomware is identified as the most serious threat, with attacks aimed at disrupting emergency services and spreading disinformation. A recent data breach at Manchester Airport Group compromised customer data. The GMCA has invested £1.2 million in enhancing cyber resilience, including monitoring and incident response. Phishing is highlighted as the biggest risk for security breaches. A dedicated cyber group is being considered to improve defenses across local councils. The urgency of the situation is emphasized by GMCA officials, who note that attacks occur daily, with a reliance on existing defenses.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Manchester Airport Group in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…