Watching official sources. Last checked 56 minutes ago.
Critical High Medium Low Info
CRA
The German Bundestag has adopted the implementation law for the Cyber Resilience Act (CRA), establishing the national legal framework for mandatory cybersecurity requirements for products with …
NIST CSF
The NIST Cybersecurity Framework landing page has been updated, removing the prominent banner soliciting public comments (deadline: October 15, 2026) on Special Publication (SP) 1353 ipd, …
GDPR
The Norwegian DPA has fined Xandr Inc. EUR 8.6 million for unlawfully processing personal data of Grindr users, including advertising IDs, IP addresses, and sexual orientation …
Malaysia PDPA
The Personal Data Protection Act 2010 has been republished in the form of a 2026 reprint. This version consolidates all amendments that have been made to …
Malaysia PDPA
The Personal Data Protection Act 2010 (Act 709) has been republished as the latest reprint in 2026. This republication consolidates data protection legislation in Malaysia in …
IEC 62443
IEC 63116:2026 is a paid FDIS (pre-release available 2026-10-16 to 2026-11-27) that elevates IEC TS 63116:2021 and its Amendment 1:2023 to a full International Standard covering …
LGPD
The ANPD (National Data Protection Agency) opened a public consultation and hearing for updating the Regulation of Dosimetry and Application of Sanctions. The agency will receive …
NCSC
The NCSC has published updated recommendations for configuring post-quantum cryptography in TLS protocols. Organizations should begin migrating their TLS implementations to incorporate post-quantum-safe cryptographic algorithms. This …
NCSC
NCSC has published recommended profiles for securely configuring TLS across the most common versions and deployment scenarios. The guidance includes best practices for implementing TLS effectively …
FedRAMP
FedRAMP has published RFC-0036 defining pilot requirements for Class D cloud-hosted systems under the FedRAMP 20x framework. This establishes new baseline requirements for cloud service providers …
NBU Regulation 95
The National Bank of Ukraine has approved amendments to the Instruction on the procedure for regulating the activities of banks in Ukraine. This update to the …
ISO 42001
ISO/IEC 42001 has been published to address security threats and compromises specific to artificial intelligence (AI) systems. The standard provides guidance to help organizations understand the …
FedRAMP
FedRAMP has published RFC-0035 addressing updates to cryptographic module use requirements. This guidance clarifies expectations for cloud service providers implementing cryptographic controls in FedRAMP authorizations. Organizations …
UA Cybersecurity Law
The National Bank of Ukraine approved amendments to the Rules for Bank Operations related to the introduction of martial law in the country. The document defines …
GDPR
The European Data Protection Board has published a statement and report examining the data protection risks posed by smart glasses, which contain cameras and microphones connected …
IEC 62443
The BSI has published a cybersecurity recommendation describing technical measures to secure control systems accessible from the Internet. The recommendation is particularly aimed at operators of …
UA Payment Services Law
The National Bank of Ukraine has approved amendments to the Regulations on remote supervision of the payment market by the National Bank of Ukraine for non-bank …
UK GDPR
The Employment Rights Act 2025 has amended provisions relevant to the Data Protection Act 2018, particularly regarding employment-related data processing. This affects how organisations must handle …
GDPR
The Italian Data Protection Authority has issued a final decision imposing an administrative fine of EUR 16.7 million on Wind Tre S.p.A. for multiple GDPR violations. …
GDPR
The Italian Data Protection Authority issued a definitive administrative fine of EUR 16.7 million against Wind Tre S.p.A. following an investigation into unlawful telemarketing practices and …
MITRE ATT&CK
The Cloud Security Alliance has published the Frontier Ready Assessment Framework as a new resource on its publications page. The framework addresses threats from AI-enabled adversaries …
GDPR
The Italian DPA fined Emirates EUR 180,000 for infringements of GDPR Articles 5, 12, and 13 in processing passengers' health data through MEDIF forms for fitness-to-fly …
GDPR
The Italian Data Protection Authority fined BBVA EUR 5,508,000 for failing to give effect to a customer's objection to direct marketing through the bank's mobile app, …
GDPR
The Italian DPA (Garante) fined La Patria S.p.A. EUR 39,000 for breaching Articles 12, 13, and 15 of the GDPR after the company failed to respond …
GDPR
The Italian Data Protection Authority fined IQVIA Solutions Italy EUR 7,000,000 for unlawfully processing health data of approximately one million patients from 800 general practitioners' practices …