Watching official sources. Last checked 33 minutes ago.
Critical High Medium Low Info
APRA CPS 230
APRA has published CPS 230 Operational Risk Management, a revised prudential standard coming into force on 1 July 2026 that replaces the previous 2023 version. The …
ISMAP
A consolidation notification was submitted by IIJ (Internet Initiative Japan) regarding multiple cloud services, resulting in updates to the ISMAP Cloud Service List registration. Three registrations—C24-0076-2 …
ISMAP
Due to consolidation of Zscaler service registration units, "Zscaler Private Access for Japanese Government" (C23-0063-2) has been removed from the ISMAP Cloud Service List. Simultaneously, "Zscaler …
EBA GL/2019/04
The EBA has published its position on supervisory reporting simplification and extended implementation timelines based on feedback from the consultation on ITS Final Q&As 2026_7830 (geographical …
UK GDPR
The Data (Use and Access) Act 2025 (ukpga/2025/18) has taken effect on the UK GDPR, modifying Regulation (EU) 2016/679 as it applies in the United Kingdom. …
UK GDPR
The Data (Use and Access) Act 2025 has amended the Data Protection Act 2018. Organizations subject to UK GDPR must review updates to data protection obligations …
ENISA
ENISA has published a new Technical Advisory on Secure Update Mechanisms. The advisory provides practical technical guidance for manufacturers of products with digital elements, specifically teams …
ENISA
ENISA published a technical advisory providing practical guidance on secure update mechanisms for manufacturers of products with digital elements. The advisory helps micro-, small and medium-sized …
CIS Benchmarks
CIS released and updated Benchmarks in November 2026 covering multiple platforms including Microsoft, AWS, Kubernetes, Docker, and NGINX. Organizations should review the updated guidance to ensure …
Malaysia PDPA
The Personal Data Protection Commission (PDP) Malaysia has released an updated list of compounds under the Personal Data Protection Act 2010 (Act 709). The list shows …
SOC 2
The AICPA has expanded its SOC suite resources page with several new materials, including Proposed 2027 SOC 2 Trust Services Criteria exposure drafts, ethics staff insights …
Malaysia PDPA
The Personal Data Protection Act 2010 (Act 709) has been republished in the 2026 reprint format in English language. This is the current version of the …
Malaysia PDPA
The Personal Data Protection Act 2010 (Akta 709) has undergone a reprint (cetakan semula) in 2026. This reprint is the latest official version of the act …
UK GDPR
The Victims and Prisoners Act 2024 brings amendments that impact how the UK GDPR applies, particularly in relation to data subject rights and exemptions. Organizations processing …
UK GDPR
The Victims and Prisoners Act 2024 has been recorded as effecting a legislative change to the Data Protection Act 2018, with the modification registered on 30 …
IEC 62443
IEC has released the Final Draft International Standard IEC 63452:2026 for railway cybersecurity, available for purchase during its voting period (2026-10-30 to 2026-12-11), with the final …
Hong Kong PDO
The Privacy Commissioner's Office has published its investigation findings regarding a data breach at United Christian Hospital. The findings detail how the breach occurred, the impact …
LGPD
ANPD holds a public hearing to discuss the update of its Dosimetry Regulation, with emphasis on issues of classification and cumulativity of violations. The virtual meeting …
Malaysia PDPA
The Personal Data Protection Commissioner (PDP) has issued the first public consultation paper for 2026 discussing the framework for artificial intelligence and its implications for personal …
Malaysia PDPA
The Personal Data Protection Commission (PDP) of Malaysia opens public consultation regarding a framework governing personal data protection in the context of artificial intelligence systems. This …
Malaysia PDPA
Malaysia's Personal Data Protection Authority (PDP) has opened a public consultation on reimagining the personal data protection framework to address challenges and opportunities posed by artificial …
EU Data Act
The Commission adopted Recommendation (EU) 2026/2394, which introduces non-binding model contractual terms for data access and use agreements, and non-binding standard contractual clauses for cloud computing …
CCCS guidance
CCCS has published new guidance titled Managing security risks in vibe coding (ITSM.60.043). This guidance is intended for anyone in an organization who uses or oversees …
CCCS guidance
CCCS has published ITSP.10.035, an overview document outlining a lifecycle approach to cyber security and privacy risk management. This guidance integrates security and privacy considerations into …
MPA Content Security
The TPN+ Service Provider How-To Guide has been updated to version 5.3.2. Service providers should refer to this updated guide for current best practices and requirements …