Menu
Security Digest · 26 December 2025

The changing online world - and what it means for security.

Memory shortages drive up hardware prices. And young Brits lose faith in the internet.

Looking ahead

2025 saw big changes in how people interact with online services. The open web is becoming far more closed, with age verification measures becoming increasingly common and Australia banning social media access for under 16s altogether. Of course, such regulations mean every user has to verify their age, and hand over personal information in the process. 2026 will see mandatory ID checks becoming the norm, covering passports, driving licences, ID cards as well as added requirements to access financial services. All this will create treasure troves of personal information that will be an irresistible target for criminals and nation states alike.

Although attacks will continue to exploit the endless stream of hardware and software vulnerabilities, the easiest way to get into a system is simply to log into it. That means users will remain a key focus as attackers seek to exploit human trust and human weaknesses. While technology can provide some protection - particularly if it involves continuous threat detection - making sure people are aware of the threats is still a key defence. That doesn’t mean clickbox training exercises, it does mean making information security a central part of business (and personal) life. Above all, we continue to believe the most important thing is to focus on the basics because if they’re missing a security incident is inevitable.

  • Ensure systems and devices are updated.

  • Enforce safe use of AI.

  • Use passkeys wherever possible but don’t ignore password hygiene.

  • Adopt and enforce phishing-resistant multi-factor authentication.

  • Make sure an effective governance framework is in place.

  • Make awareness of cyber risks a key priority for everyone.

In brief

Memory: Next year is expected to see a sharp rise in smartphone and computer prices driven by increasing memory costs. There’s a growing shortage of memory chips as AI data centres suck up available supplies. This is unfortunate since new AI features require upgraded hardware. As a consequence, IDC says PC manufacturers are preparing price increases of up to 8%. Apple and Samsung are less affected because they have contracts covering their memory supplies for the next 18-24 months. As The Register suggests, perhaps one answer is to make software more efficient so that machines don’t need so much memory.

Drones: The US has banned the import of drones made abroad, including the popular Chinese DJI brand. The Federal Communications Commission said the ban was prompted by a White House-led group that concluded the drones posed “unacceptable risks.” The headline for the FCC’s news release reads, “Decision Helps Restore Our Airspace Sovereignty and Unleash American Drone Dominance Without Disrupting Ongoing Use of Previously Authorized Drones.”

Workers: Amazon says it caught a North Korean remote IT worker masquerading as a US employee after noticing delays in the commands he was typing. In total, Amazon claims to have identified over 1,800 North Koreans job seekers. Bloomberg

Outage: A widespread power cut in San Francisco affected more than 130,000 homes, took out the city’s traffic lights and paralysed Waymo’s fleet of driverless taxis. If traffic lights aren’t working, the robotaxis are programmed to treat them as four-way stops. Apparently, the vehicles found them as confusing as many foreign visitors do. Ars Technica

Online: An increasing number of young people in the UK view the internet as damaging to society and to their mental health, according to research by the communications regulator. Ofcom’s survey found that in June 2025, just a third of those aged 18-34 agreed the internet is good for society, down from 42% a year earlier. Despite this, the research also found that young adults continue to spend more time online, with the average reaching six hours and 20 minutes a day. And that’s on personal rather than work devices.

Updates

Microsoft: Emergency update to address an issue that affected Windows 10 and Windows Server.

Thanks for reading. We’re taking an editorial break next week and will be back on January 9. In the meantime, we wish you and yours all the very best for 2026.