EU AI Act GPAI Enforcement Goes Live August 2, 2026: A Readiness Guide for AI Governance Teams
On August 2, 2026, the European Commission's AI Office gains full enforcement powers over providers of general-purpose AI models, including fines of u...
Compliance & Regulatory Articles
805 articles on privacy laws, security frameworks, and regulatory compliance.
Nintendo, TinyPulse, and the $2M Ransom: How a Third-Party HR Survey Vendor Became a 2026 Extortion-as-a-Service Case Study
An extortion group calling itself Shadowbyt3$ stole roughly 859 MB of Nintendo of America employee data — including W-9 tax forms and bank statement P...
Kudankulam Nuclear Plant Contractor Breach 2026: When a Fourth-Party Data Centre Leaks Critical-Infrastructure Blueprints
The extortion group World Leaks published nearly 19,000 files (14.3 GB) tied to India's Kudankulam Nuclear Power Plant. The plant operator's systems w...
Conduent's 62 Million-Person Breach Becomes 2026's Cautionary Tale in HIPAA Business-Associate Liability
Conduent Business Solutions told federal regulators on June 4, 2026 that 62,224,658 people had data exposed in a SafePay ransomware intrusion — the th...
Coca-Cola's Fairlife Ransomware Halts US Production: An SEC Item 1.05 Disclosure Test for OT-Sector Manufacturing (2026)
On July 16, 2026, The Coca-Cola Company disclosed a ransomware event at its dairy subsidiary fairlife, LLC, that forced a temporary suspension of US p...
622 CVEs and a Three-Day Federal Deadline: Microsoft's Record July 2026 Patch Tuesday Is a Compliance Event, Not Just a Patching One
On July 14, 2026, Microsoft shipped the largest Patch Tuesday in history — 569 to 622 CVEs depending on who is counting — including actively exploited...
The Device Nobody Audits: The FSB Center 16 Router Hygiene Advisory and the Compliance Blind Spot It Exposes
On July 13, 2026, nineteen agencies from thirteen countries issued joint advisory AA26-194A warning that Russia's FSB Center 16 is opportunistically c...
Suspended Is Not Repealed: The Pentagon Halts CMMC Phase 2 — What Defense Contractors Should Actually Do During the 60-Day Review
On July 13, 2026, the Department of War suspended CMMC Phase 2 — the third-party assessment mandate that was set to hit every CUI contract on November...
The Negotiator Was Working for the Other Side: Angelo Martino's 70-Month Sentence and the Insider-Risk Hole in the Incident-Response Supply Chain
Angelo Martino, a professional ransomware negotiator at incident response firm DigitalMint, was sentenced to 70 months in prison for secretly working ...
2,279 Victims, 91 Groups, 108 Countries: What GuidePoint's GRIT Q2 2026 Ransomware Report Demands of Your Compliance Program
GuidePoint Security's GRIT Q2 2026 report counts 2,279 ransomware victims — up 7% quarter-over-quarter and 43% year-over-year — spread across a record...
JADEPUFFER and the Machine-Speed Adversary: What the First Fully Autonomous AI Ransomware Means for Your Compliance Clocks
Sysdig says JADEPUFFER is the first documented ransomware operation run end-to-end by an LLM agent — it broke into a Langflow instance via CVE-2025-32...
12 Million Exposed, Vendor Unnamed: The KDDI Breach and the Zero-Day That Has No CVE
Attackers exploited a zero-day in unnamed third-party software to sit inside the shared email platform behind six Japanese ISP brands for a month, exp...
Showing 12 of 805 articles
Load More →