Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 133 stories in 24 hours
Regulatory Updates
Privacy, regulation and the courts.
10stories this week
0today
the last seven days
Most fromEFF, Malwarebytes, CSO Online UK, CyberScoop
In the news hereMeta1Microsoft1
MyCyberWay trainingRegulation lands on the security team. We teach how it works day to day.See how it's taught
-
The Brazilian National Data Protection Agency (ANPD) plays a pivotal role in the regulation of digital platforms according to new legislation approved in Brazil. Throughout this year, EFF has presented comments, filed submissions, and met with the agency to emphasize crucial guardrails that the enforcement of new regulations should ensure. ANPD is responsible for detailing…
EFF
-
Hidden instructions told WhatsApp’s chatbot not to suggest privacy regulators to users struggling to delete their accounts.
Malwarebytes+2 sources
-
When UK Financial Conduct Authority (FCA) Chief Data Officer Jessica Rusu gave a speech on Monday advocating that UK companies be required to report “significant AI failures and near-misses,” she added to the drumbeat of demands for some kind of regulatory control over enterprise AI deployments. But her speech also highlighted regulator frustration over futile…
CSO Online UK
-
It’s the work of the infamous group behind the attacks on Democrats during the 2016 presidential election, Symantec said.
CyberScoop
-
WhatsApp’s help pages carried hidden instructions for its support chatbot that told it not to recommend a data protection authority or regulator to users who could no longer delete their accounts, even though WhatsApp’s own privacy policy for Europe tells users they can complain to one. The text sat in the pages’ code, never shown…
The Hacker News+2 sources
-
CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing compliance. Specops outlines five practical priorities covering MFA, account management, passwords, logging, and audit readiness.
BleepingComputer
-
Single sign-on to help address imminent threats to life, critical infrastructure, or kids…
The Register
-
First harmonised standard supporting the AI Act published in the Official Journal Anonymous (not verified) Mon, 10/19/2026 – 09:37 The European Commission has published the reference to the first harmonised standard supporting the implementation of the AI Act in the Official Journal of the European Union. The standard, EN 18286:2026 – Artificial intelligence – Quality…
European Commission
-
Can traditional firewalls keep up with today’s distributed enterprise? Discover how hybrid mesh firewalls close security gaps without slowing networks.
Cybersecurity Dive
-
In part one of this NIS2 series, we examined why vendor questionnaires fall short and how third-party breaches impact downstream organizations across Europe. But what happens after a supplier containment phase ends? The long-term danger lies in how attackers leverage exfiltrated supplier data to launch hyper-targeted social engineering attacks against an organization’s employees.
KnowBe4
-
Background information Date of final decision: 2 October 2026 National case Controller: Xandr Inc. Legal References: Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data) Decision: Administrative fine Key words: Fines, Basic principles, Marketing, Online platforms Summary of the Decision Origin of the case The case started in 2020 when…
European Data Protection Board
-
Tens of thousands of European organizations are legally accountable for the security of companies they do not control but on whose services they rely. Under Article 21(2)(d) of the NIS2 Directive, any in-scope entity is required to manage supply chain security, including the security aspects of its relationships with its direct suppliers and service providers.…
KnowBe4
