Ceva Logistics: One Processor, Ten Controllers, and a Notification Chain That Took Five Days
A cyberattack on eight European warehouses run by Ceva Logistics has produced breach reports to the Dutch data protection authority from at least ten ...
nis2
13 articles on nis2 — privacy laws, security frameworks, and regulatory compliance.
Stadler Rail Refused $12.3 Million and Everest Leaked 271,000 Files: The Compliance Case for Saying No
Attackers used compromised credentials to reach a data-exchange platform shared between Stadler Rail and one of its suppliers. Everest demanded $12.3 ...
Romania's Land Registry Was Wiped With Stolen Credentials and a Known CVE: A NIS2 Essential-Entity Post-Mortem
On 14 July 2026 Romania's e-Terra cadastre platform went dark. The national cyber directorate later confirmed the attack was not sophisticated: leaked...
Kudankulam Nuclear Plant Contractor Breach 2026: When a Fourth-Party Data Centre Leaks Critical-Infrastructure Blueprints
The extortion group World Leaks published nearly 19,000 files (14.3 GB) tied to India's Kudankulam Nuclear Power Plant. The plant operator's systems w...
The Device Nobody Audits: The FSB Center 16 Router Hygiene Advisory and the Compliance Blind Spot It Exposes
On July 13, 2026, nineteen agencies from thirteen countries issued joint advisory AA26-194A warning that Russia's FSB Center 16 is opportunistically c...
Twenty Months Late: The EU Takes Ireland, Spain, France, and the Netherlands to Court Over NIS2 — and What That Means for the Companies Caught in Between
On July 9, 2026, the European Commission referred Ireland, Spain, France, and the Netherlands to the Court of Justice of the EU for failing to transpo...
Personally on the Hook: The NIS2 October 2026 Deadline, DORA Enforcement, and Management-Body Liability
With the NIS2 compliance deadline culminating in October 2026 and DORA in its first real supervisory enforcement cycle, both regimes now place persona...
One Day, Three Continents of Obligation: The June 26, 2026 Breach Cluster and the Fragmented Map of Data-Breach Law
On June 26, 2026, breach disclosures surfaced for MagMutual Insurance, 911 Driving School, and Germany's Atlas Elektronik on the same day. The three i...
DORA Enforcement Arrives and NIS2 Hits Its October Deadline: The EU Cyber-Resilience Reckoning of 2026
2026 is the year the EU's two flagship cyber-resilience regimes stop being aspirational. DORA enters its first real supervisory enforcement cycle for ...
Brussels Is Rolling Back Its Own Rules: What the EU Digital Omnibus Means for GDPR, AI Act, and Data Act Compliance
The European Commission's Digital Omnibus package, proposed in November 2025, would simplify GDPR obligations, extend the EU AI Act's high-risk deadli...
EU Data Regulators Back Streamlining NIS2 Cybersecurity Compliance — But Warn Cooperation With ENISA Must Improve
Europe's key data privacy regulators have voiced support for simplifying compliance and reporting requirements under NIS2, signaling a potential shift...
EU's Cybersecurity Landscape in 2025: What Organizations Need to Know Now
The EU's cybersecurity landscape in 2025 features transformative regulations including NIS2, DORA, the Cyber Resilience Act, and AI Act enforcement. T...
Navigating NIS2: A Comprehensive Guide to the EU's Cybersecurity Directive
The NIS2 Directive [(EU) 2022/2555] is a legislative framework designed to enhance cybersecurity across the European Union by establishing a high comm...