Sequoia Capital is ending its scout programme, the model it pioneered 17 years ago in which selected founders and operators write early stage cheques on the firm’s behalf, as part of a broader overhaul announced in a memo this week that also closes its London office. Sequoia framed the changes as a need for focus, putting more energy behind fewer people and things. Former scouts said the programme had been a stepping stone into venture careers and had helped mature early stage investing in Europe, while sceptics argued the model had reached its limits now that the largest firms attract deal flow without it.
CISA has added one vulnerability to its Known Exploited Vulnerabilities Catalog on evidence of active exploitation: CVE-2026-19868, a SonicWall SonicOS SSLVPN flaw involving use of single factor authentication. Federal civilian agencies are required to prioritise remediation under Binding Operational Directive 26-04, and CISA urges all organisations to treat catalog entries as priority patching items.
A review of a Royal Cornwall Hospitals NHS Trust data breach has found that staff drafted to run a helpline for affected colleagues carried a significant emotional burden, taking distressed and sometimes abusive calls with a day’s notice and little training. The breach itself came from a spreadsheet published in February 2023 in response to a Freedom of Information request whose pivot tables retained sickness absence records for 8,003 people; the file stayed online for 33 months, and the helpline, planned for two weeks, ran for 11. The Information Commissioner’s Office has closed its case after the trust implemented its recommendations.
DigiCert has admitted that a botched server migration in February 2025 left an internal system exposed to the public internet for more than 16 months, allowing an unauthorised user to access archived customer records including, in some cases, passports, driver licences and other identity documents. The certificate authority found unauthorised accounts in June 2026 and confirmed access to a subset of records in October; it has not disclosed how many people are affected. Certificate operations were unaffected and there is no evidence certificates were issued, revoked or validated through the access, the company said.
The Federal Aviation Administration has begun retiring four 1980s era information display systems still in use at more than 400 facilities, some requiring floppy disks, replacing them with a single Enterprise Information Display System. Five sites are first in line, with installation planned at 435 sites by the end of 2028. The wider air traffic control overhaul remains underfunded: the Government Accountability Office put the second phase shortfall at 10.2 billion dollars in September, on top of the 12.5 billion dollars already allocated.