Watching official sources. Last checked 9 minutes ago.
Critical High Medium Low Info
CISA NIST SP 800-53
CISA and NIST released Interagency Report (IR) 8587 providing comprehensive guidelines for federal agencies and cloud service providers to defend identity tokens and assertions used in …
UK GDPR
The Victims and Prisoners Act 2024 has introduced amendments that affect how UK GDPR applies to requests for access to personal data in victim and prisoner …
UK GDPR
The Victims and Prisoners Act 2024 brings amendments to the Data Protection Act 2018. These amendments update provisions governing the processing of personal data in contexts …
Korea PIPA
The Personal Information Protection Commission (PIPC) issued new disciplinary recommendation standards for violations of personal data protection regulations, effective September 11, 2026. These standards establish criteria …
Korea PIPA
The Personal Information Protection Commission (PIPC) has published official guidelines establishing standards for reporting violations of personal information protection laws. These guidelines define the criteria and …
Korea PIPA
The Personal Information Protection Commission (PIPC) has issued revised administrative fine assessment guidelines under Notice No. 2026-14, effective September 11, 2026. These guidelines establish updated criteria …
Korea PIPA
The Personal Information Protection Commission (PIPC) of South Korea has adopted Notice No. 2026-13 establishing formal rules governing the Commission's investigation and disposition procedures. The rules, …
Korea PIPA
The Personal Information Protection Commission (PIPC) has published amended administrative rules establishing criteria for imposing administrative fines on entities that violate the Personal Information Protection Act. …
Greece data protection law
The Hellenic Data Protection Authority (DPA) has issued Decision 17/2026 regarding SMS messaging by the Ministry of Infrastructure and Transport to mobile subscribers for road safety …
PCI DSS
The PCI Security Standards Council has published the new PCI Key Management and Operations (KMO)™ Standard v1.0, establishing security and test requirements for entities managing cryptographic …
CCCS guidance
The Canadian Centre for Cyber Security (CCCS) has published ITSP.10.036, providing guidance on organizational cyber security and privacy risk management activities. This guidance establishes frameworks and …
CIS Benchmarks
CIS Security published updates to 19 CIS Benchmarks in September 2026, including significant revisions to Windows Server 2022, Windows 11, Windows Server 2025, Apache Tomcat, PostgreSQL, …
GDPR
The French Data Protection Authority (CNIL) imposed an administrative fine of EUR 300,000 on EXTIA, an IT and engineering company, for breaches of Articles 12 and …
CRA
As of 11 September 2026, Article 14 of the Cyber Resilience Act (EU Regulation 2024/2847) becomes applicable in the EU, establishing horizontal cybersecurity requirements for products …
GDPR
The French Data Protection Authority (CNIL) issued an administrative fine of €300,000 to EXTIA on 21 July 2026 for breaches of Articles 12 and 17 of …
GDPR
The French Data Protection Authority (CNIL) issued an administrative fine of EUR 300,000 against EXTIA, an IT and engineering consulting firm, for systematic failures to respect …
Korea PIPA
개인정보보호위원회가 개인정보 보호책임자 지정 및 경력 인정에 관한 고시를 시행했다. 이 고시는 보호책임자의 지정 요건과 경력 인정 기준을 명확히 규정한다. 기관의 개인정보 보호 체계 강화와 책임자의 …
Korea PIPA
PIPC가 개인정보 보호법 위반 사항에 대한 공표 및 공표명령 지침을 발효했다. 이 지침은 개인정보 보호법 위반 행위에 대한 공표 및 공표명령 절차를 규정한다. 해당 기관과 조직들은 …
ISO 27001 ISO 27002
IEC has released the Final Draft International Standard (FDIS) of ISO/IEC 24383:2026, available for purchase during its voting period (2026-09-11 to 2026-10-23), with the final publication …
CRA
Ab dem 11. September 2026 müssen Hersteller von Produkten mit digitalen Elementen im EU-Binnenmarkt aktiv ausgenutzte Schwachstellen und schwerwiegende Sicherheitsvorfälle melden. Die Meldungen erfolgen EU-weit einheitlich …
CCCS guidance
The Canadian Centre for Cyber Security (CCCS) has published guidance on the careful adoption of agentic AI systems. The guidance addresses key security considerations and risks …
GDPR
The French Data Protection Authority (CNIL) fined Hôpital Privé de la Loire EUR 500,000 following a 2025 data breach that exposed personal and health data of …
GDPR
The French Data Protection Authority (CNIL) fined Hôpital Privé de la Loire 500,000 EUR for GDPR violations following a summer 2025 data breach that exposed the …
CISA
CISA released an updated version of its Insider Threat Mitigation Guide, originally published in 2020, to address evolving threats in the modern operational landscape. The updated …
GDPR
The French Data Protection Authority (CNIL) has fined Hôpital Privé de la Loire EUR 500,000 following a data breach in summer 2025 that exposed personal and …