Cybersecurity News Today and What to Look Out For

certiprof

Here’s what’s happening in the cybersecurity world today

United Kingdom Proposed New Shields to Strengthen Defences Against Cyberattacks

First, across the pond in the UK. The government has formally introduced the Cyber Security and Resilience Bill to Parliament today, 12 November 2025, marking a major moment in Britain’s cyber-defence story.

Why does it matter? Because this isn’t just tweaking around the edges, it’s a full-on rethink of how crucial services (healthcare, water, energy, transport) are protected in an era of ramped-up cyber-threats.

Hospitals, power stations, water-works, and train networks, all being targeted with increasing frequency. The UK government says the cost of cyber-attacks to the economy is nearly £15 billion per year. This comes after the Office for Budget Responsibility has estimated that cyberattacks on critical national infrastructure can temporarily increase borrowing by over 30 billion euros.

Here are some of the concrete changes this Bill proposes :

Medium & large companies doing IT management, help-desk support, or cybersecurity services for public/private sector organisations will now be regulated for the first time.
These companies will have to report significant or potentially significant cyber-incidents promptly (for example, within 24 hours) and have robust plans in place to deal with consequences.
Regulators will be empowered to designate certain suppliers as “critical” (e.g., firms providing diagnostics to the NHS or chemicals to a water firm) so they meet minimum security standards.
Penalties will be tougher. The message: cutting corners will cost you.
The Secretary for Technology gets powers to instruct regulator-overseen organisations (NHS trusts, water companies) to take specific steps if national security is at risk, like isolating high-risk systems.

In short, the UK is saying: “We’re not easy pickings anymore.” As Liz Kendall, UK Science, Innovation, and Technology secretary, put it, “We all know the disruption daily cyberattacks cause,” she said. “Our new laws will make the UK more secure against those threats. It will mean fewer cancelled NHS appointments, less disruption to local services and businesses, and a faster national response when threats emerge.” The proposed laws will strengthen defenses against hospitals, ensuring every electricity and water supply is fully armed against the threat of cyber-attacks.

That tone is new, and it’s significant.

The United States is Reauthorising the Backbone of Cyber Threat-Sharing

Now, over in the United States. The Cybersecurity Information Sharing Act of 2015 (“CISA 2015”), a law that has underpinned the legal framework for companies and government to share cyber-threat data, expired on 30 September 2025. That left a hole. A real one. Because sharing threat intel is a key part of modern cyber-defence.

But there’s movement. Congress, in the recent funding/deal to reopen the government, included a short-term reauthorization of CISA 2015, extending it through 30 January 2026.

And there’s more: the deal also extends the State and Local Cybersecurity Grant Program, which helps states and municipalities bolster their cyber-defences.

The Trump administration, however, wants a “10-year renewal of the law.” National Cyber Director Sean Cairncross said, “It’s a common-sense law. “The White House is pushing for a 10-year, clean reauthorization of this authority. It’s something that we want to see done. It’s important to national security and it fosters the sort of collaboration, not only amongst the private sector, but between the public and private sector that’s vital.”.

Why the urgency? Because when that law lapsed, analysts flagged that the sharing of threat intelligence dropped significantly in some cases by more than 70%.

What the Shifts Suggest

So what’s the upshot? The U.S. is saying: “Okay, we patched this bit — for now.” But the longer-term path remains unclear. Will there be a full reauthorisation? What changes will be baked into any new version? The clock’s ticking.

It might feel like simply “cyber-laws and numbers,” but beneath this lies something more human. People rely on these systems. Your hospital appointment, your clean water, and your train commute are all vulnerable if defenders don’t stay ahead. These bills reflect that reality: the digital is no longer separate from “real life.”

And there’s a sense of momentum rising. The UK is stepping up its regulation. The U.S. is scrambling to close a gap in its cyber-framework.

What you might want to keep an eye on next:

How quickly the UK Bill moves through Parliament (first reading today; next steps will matter).
How businesses respond: will they be ready for stricter rules and faster reporting?
In the U.S., whether Congress moves from the short-term “band-aid” to a full-scale reform of CISA 2015 or something new.
Global ripple effects. When large economies tighten their cyber-rules, vendors, suppliers, and international supply chains feel it.
Regulatory burdens will increase for service providers and infrastructure operators. The question becomes: can they scale compliance without stifling innovation?

Today marks a pivot. A pivot toward stronger cyber-governance. Not a guarantee of safety. But a clearer acknowledgement of risk. And that matters.