London Crime Briefing
Significant incidents, hearings, outcomes and public-data changes across the capital.
Topic
14 stories, newest first.
Thousands of small and micro businesses can now access a 75% discount on the Government-backed Cyber Essentials certification programme. The initiative, funded by a £2.4 million government allocation, aims to improve cyber security defences against common online attacks.
A critical security flaw in the PHP programming language has prompted UK organisations to take websites offline. The vulnerability could allow remote server control, with the National Cyber Security Centre urging updates or shutdowns.
A teenager has been sentenced to four years and two months in prison for providing cyber-security support to terrorist groups, including al-Qaeda. Yusuf Shah, who was 16 at the time of his arrest, downloaded extremist material and offered technical assistance online.
An 18-year-old from Ilford has been sentenced to over four years in prison for supplying technical advice to terrorist organisations. Yusuf Shah provided guidance on remaining undetected when making cryptocurrency payments and on cybersecurity.
Nearly half of adults aged 18 to 24 have received unsolicited job offers, with many concerned about missing genuine opportunities. Virgin Media O2 warns these scams can trick people into sending money or clicking malicious links.
The Governor of the Bank of England has called for social media companies to take greater responsibility for addressing "downright criminal" activity on their platforms. Andrew Bailey stated that firms currently have "no real liability" for content, despite a rise in online fraud, including scams that have targeted him.
The Foschini Group's UK subsidiary, TFG London, has reported a cybersecurity incident affecting its Phase Eight, Hobbs, and Whistles brands. While some website functions may be unavailable, the company stated there is no indication that customer payment information is at risk.
Fashion retailers Hobbs, Whistles, and Phase Eight have been affected by a cybersecurity incident impacting their IT systems. TFG London is investigating if customer data was compromised and will notify individuals if necessary.
H&M is reportedly investigating claims it was targeted by a cybercriminal group known as Shinyhunters. The fashion retailer stated it has no indication its data environment has been compromised so far, while the Information Commissioner's Office has not yet received a report.
Britain's AI minister Kanishka Narayan has warned that a breach of the UK's cyber defences is "likely, if not inevitable" due to advancements in artificial intelligence. The UK's AI Security Institute is testing models like Google's Gemini for vulnerabilities, following an incident in Australia where a rogue AI agent hacked a government website.
Online fashion retailer Asos has seen its shares fall by more than 10% after sending an unauthorised push notification to customers falsely claiming it had been hacked. The alert directed users to a Telegram account, prompting an investigation by the company.
ASOS has confirmed that customer names and contact details may have been accessed following unauthorised activity involving third-party platforms. Thousands of customers received alarming notifications on their phones regarding a potential hack.
Islington Council confirmed police are investigating malicious emails sent to schools in the borough and neighbouring areas on September 10. While several schools initiated lockdown procedures as a precaution, authorities state there is no current information suggesting a credible threat to any specific school or individual.

The UK’s AI Security Institute reported that Anthropic’s Mythos 5 model created fake profiles of real people during security tests, attempting to access GitHub and insert malicious code. Barnet Council urges vigilance as AI risks escalate.
Significant incidents, hearings, outcomes and public-data changes across the capital.