regulation

ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities

CISO, Compliance, cybersecurity, ENISA, EU, Europe, News, regulation /

ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities 2026-09-14 at 15:23 By Sinisa Markovic The EU Agency for Cybersecurity switched on the Cyber Resilience Act‘s Single Reporting Platform on 11 September 2026, the same day the law’s reporting obligations started binding manufacturers. ENISA built the tool and runs its day-to-day operations, a […]

ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities Read More »

NIS2 compliance: Fixing IAM and access control before the 2026 audit

access management, Compliance, credentials, Don't miss, Europe, Expert analysis, Hot stuff, MFA, News, opinion, Passwork, regulation /

NIS2 compliance: Fixing IAM and access control before the 2026 audit 2026-09-01 at 08:00 By Help Net Security The NIS2 Directive places direct obligations on organizations across supply chain risk management, incident reporting, and board-level accountability. October brings a new wave of legally binding deadlines across the EU, as member states move from transposition into […]

NIS2 compliance: Fixing IAM and access control before the 2026 audit Read More »

17 draft Cyber Resilience Act standards are open for comment

Compliance, cyber resilience, data security, ETSI, EU, Europe, Government, guidelines, News, regulation /

17 draft Cyber Resilience Act standards are open for comment 2026-08-14 at 07:30 By Anamarija Pogorelec A company selling a connected toy in Europe must show by the end of 2027 that the product meets the Cyber Resilience Act. The law states what manufacturers have to achieve and stops there, which leaves the toymaker to […]

17 draft Cyber Resilience Act standards are open for comment Read More »

What the first year of EU AI Act transparency enforcement could look like

AI, Compliance, Data Protection, Don't miss, EU, Europe, Features, Government, Hot stuff, News, regulation, Veeam Software /

What the first year of EU AI Act transparency enforcement could look like 2026-08-07 at 08:30 By Mirko Zorz In this Help Net Security interview, Edwin Weijdema, Field CTO at Veeam, answers questions on Article 50 of the EU AI Act and what the first year of enforcement might bring. He explains why corrective orders […]

What the first year of EU AI Act transparency enforcement could look like Read More »

EU begins enforcing AI Act, putting AI models under the microscope

AI, Compliance, Data Protection, EU, European Commission, Government, News, regulation /

EU begins enforcing AI Act, putting AI models under the microscope 2026-08-04 at 09:49 By Sinisa Markovic Europe’s fight to regulate AI models moved from paper to practice on 2 August 2026, when the European Commission’s AI Office and national authorities began enforcing the AI Act. On the same date, new transparency rules took effect, […]

EU begins enforcing AI Act, putting AI models under the microscope Read More »

Shadow AI incident response begins with logs that may already be gone

AI, CISO, Compliance, cybersecurity, Don't miss, Features, Hot stuff, LevelBlue, News, opinion, regulation, Shadow Brokers, strategy, tips /

Shadow AI incident response begins with logs that may already be gone 2026-07-28 at 09:00 By Mirko Zorz In this Help Net Security interview, Brandy Wityak, VP of Complex Matters at LevelBlue, explains what happens in the hours after a shadow AI incident. She describes how quickly logs roll over, why firewall records of outbound […]

Shadow AI incident response begins with logs that may already be gone Read More »

AI can’t fix cybersecurity’s hiring problem

AI, automation, certificates, Compliance, News, regulation, report, SANS, skill development /

AI can’t fix cybersecurity’s hiring problem 2026-07-22 at 07:30 By Anamarija Pogorelec Organizations are redefining cybersecurity roles through workforce frameworks and placing greater emphasis on verified skills as AI and new regulatory requirements change hiring. The SANS 2026 Cybersecurity Workforce Survey found demand for specialists in new roles more than doubled over the past year, […]

AI can’t fix cybersecurity’s hiring problem Read More »

The Windows 10 hangover is becoming a security problem

Compliance, cyber insurance, News, regulation, report, Windows /

The Windows 10 hangover is becoming a security problem 2026-07-20 at 11:37 By Anamarija Pogorelec Windows 11 now runs on 78.8% of Windows devices after Microsoft ended support for Windows 10 on 14 October 2025, according to Lansweeper. Windows 10 still accounts for 16.9% of devices and no longer receives security updates, leaving newly discovered […]

The Windows 10 hangover is becoming a security problem Read More »

French President Urges US to Share Cutting-Edge AI and Democracies to Cooperate on Regulation

AI, Artificial Intelligence, EU, regulation, US /

French President Urges US to Share Cutting-Edge AI and Democracies to Cooperate on Regulation 2026-06-20 at 12:48 By Associated Press French President Emmanuel Macron urged the world’s wealthy democracies to work together on regulating advanced AI systems. The post French President Urges US to Share Cutting-Edge AI and Democracies to Cooperate on Regulation appeared first […]

French President Urges US to Share Cutting-Edge AI and Democracies to Cooperate on Regulation Read More »

Navigating SEC, NIS2, and DORA incident disclosure timelines under pressure

Compliance, Data Protection, News, regulation, strategy, tips, Video /

Navigating SEC, NIS2, and DORA incident disclosure timelines under pressure 2026-06-17 at 07:30 By Help Net Security In this Help Net Security video, Rick Goud, Global Field CTO at Kiteworks, discusses how to handle SEC, NIS2, and DORA disclosure timelines during a security incident. He opens with a 3.47 a.m. call: the team cannot confirm […]

Navigating SEC, NIS2, and DORA incident disclosure timelines under pressure Read More »

The checklist problem behind critical infrastructure cyber safety

asset discovery, Compliance, critical infrastructure, cyber resilience, cyber risk, cybersecurity, Don't miss, Government, ICS/SCADA, News, policy, regulation, research, USA /

The checklist problem behind critical infrastructure cyber safety 2026-06-17 at 07:00 By Anamarija Pogorelec An asset owner can meet major federal cyber compliance standards and still run equipment that lacks the engineering to withstand an attack or a failure. New research from George Mason University examines how United States cyber policy defines reasonable care for […]

The checklist problem behind critical infrastructure cyber safety Read More »

Software supply chains are heading for a transparency test

Compliance, cybersecurity, ENISA, EU, Europe, News, regulation, software development, supply chain /

Software supply chains are heading for a transparency test 2026-06-16 at 12:24 By Anamarija Pogorelec Software supply chain visibility is becoming part of product security work as the EU Cyber Resilience Act (CRA) moves toward application in December 2027. ENISA’s SBOM Adoption State of Play 2026 shows organizations preparing for CRA obligations through SBOM tooling, […]

Software supply chains are heading for a transparency test Read More »

EU Cybersecurity Act 2.0: When good regulation goes bad

BH Consulting, Brian Honan, Compliance, Data Protection, Don't miss, enterprise, EU, Europe, Expert analysis, Expert corner, Hot stuff, News, opinion, regulation, strategy, tips /

EU Cybersecurity Act 2.0: When good regulation goes bad 2026-06-16 at 08:30 By Help Net Security Over recent years we’ve witnessed the EU becoming increasingly serious about cybersecurity. After years of watching high profile breaches, many resulting from supply chain attacks targeting our critical infrastructure, that seriousness is welcome. But good intentions and good policy […]

EU Cybersecurity Act 2.0: When good regulation goes bad Read More »

Making the cloud prove it followed your privacy wishes

auditing, Cloud, cloud security, cloud storage, Compliance, data, data security, Don't miss, EU, News, Privacy, regulation, research, storage, strategy /

Making the cloud prove it followed your privacy wishes 2026-06-11 at 08:43 By Sinisa Markovic Making companies that store personal data in cloud key-value databases handle deletion requests by running the operation and confirming the job is complete. The people making those requests and the regulators overseeing them have had limited means to confirm the […]

Making the cloud prove it followed your privacy wishes Read More »

EU organizations buckle under rising compliance pressure

AI, CISO, Compliance, conferences, cybersecurity, Don't miss, EU, Features, Government, Hot stuff, News, regulation, Risk Management /

EU organizations buckle under rising compliance pressure 2026-06-01 at 08:19 By Sinisa Markovic Cybersecurity governance in the EU is shifting under expanding frameworks such as NIS2 and DORA, while AI raises new questions for security teams. What the future brings is hard to predict, and organizations must find a way to cope. Antonija Vojnović, Governance, […]

EU organizations buckle under rising compliance pressure Read More »

145 AI laws passed in 2025 and privacy teams aren’t catching a break

AI, CCPA, cybersecurity, DataGrail, GDPR, News, policy, Privacy, regulation, report, Risk Management, security auditing /

145 AI laws passed in 2025 and privacy teams aren’t catching a break 2026-06-01 at 08:19 By Anamarija Pogorelec 145 AI-related laws were enacted by state legislatures in 2025, and more than 1,000 additional bills were introduced or revised, according to DataGrail’s Privacy and AI Trends Report 2026. Average cost of manual data subject request […]

145 AI laws passed in 2025 and privacy teams aren’t catching a break Read More »

AI infrastructure is cracking under sovereignty demands

AI, Compliance, News, NTT, regulation, report /

AI infrastructure is cracking under sovereignty demands 2026-05-19 at 09:17 By Anamarija Pogorelec AI deployments are moving into environments with tighter controls around data, infrastructure, and system operations. Organizations are building AI systems across multiple providers, platforms, and computing environments while managing governance, security, and compliance obligations within defined boundaries. NTT DATA’s 2026 Global AI […]

AI infrastructure is cracking under sovereignty demands Read More »

Machine identities outnumber humans 109 to 1

AI, cybersecurity, identity management, identity protection, News, Palo Alto Networks, regulation, report /

Machine identities outnumber humans 109 to 1 2026-05-14 at 07:00 By Anamarija Pogorelec Organizations manage an average of 109 machine identities for every human identity. AI agents account for a growing share of those identities, with companies expecting AI agent growth of 85% over the next 12 months. Machine identities are projected to increase by […]

Machine identities outnumber humans 109 to 1 Read More »

A study of 1,000 Android apps finds a privacy policy logging gap

Android, CCPA, Compliance, data analysis, Data Protection, Don't miss, GDPR, News, Privacy, regulation, research, software /

A study of 1,000 Android apps finds a privacy policy logging gap 2026-04-24 at 08:22 By Anamarija Pogorelec Android developers write log statements for the same reasons they always have: debugging crashes, tracing performance issues, and understanding how features behave in production. Legal and privacy teams, working from templates and regulatory checklists, draft policies describing […]

A study of 1,000 Android apps finds a privacy policy logging gap Read More »

GDPR works, but only where someone enforces it

CCPA, Compliance, data, Don't miss, EU, Europe, Features, GDPR, News, online tracking, Privacy, regulation, research /

GDPR works, but only where someone enforces it 2026-04-23 at 07:32 By Sinisa Markovic A new measurement study of web tracking across ten countries offers a reality check for anyone working on privacy compliance. Researchers crawled the same set of globally popular websites from virtual machines located in Australia, Brazil, Canada, Germany, India, Singapore, South […]

GDPR works, but only where someone enforces it Read More »

Scroll to Top