13 articles on supply-chain-security — privacy laws, security frameworks, and regulatory compliance.
Black Kite's August 2026 mid-market report found that 73% of 13,336 disclosed ransomware incidents between January 2023 and June 2026 struck organisat...
A cyberattack on Latvia's Road Traffic Safety Directorate exposed payment records going back to 2008 covering more than 1.2 million people and 200,000...
The 60-day review launched when the Pentagon suspended CMMC Phase 2 on 13 July 2026 is due to report on or about 13 September. Phase 1 self-assessment...
GHSA-864f-rcv7-6rh4 is a type confusion vulnerability in isolated-vm's ExternalCopy transferList handling that lets code inside the sandbox corrupt ho...
The extortion group World Leaks published nearly 19,000 files (14.3 GB) tied to India's Kudankulam Nuclear Power Plant. The plant operator's systems w...
On July 13, 2026, the Department of War suspended CMMC Phase 2 — the third-party assessment mandate that was set to hit every CUI contract on November...
On July 7, 2026, a single threat actor published 17 malicious packages across npm and PyPI impersonating Paysafe, Skrill, and Neteller SDKs — fake pay...
Most post-quantum coverage focuses on a distant 'Q-Day.' The nearer, more concrete deadline is procurement: on September 21, 2026, every FIPS 140-2 ce...
The Cybersecurity Maturity Model Certification program is now live in DoD contracts via the DFARS 252.204-7021 clause, and the clock is running. Phase...
In June 2026 the Defense Intelligence Agency rated Israel a 'critical' counterintelligence threat — its highest designation for any ally — after spywa...
The GemStuffer campaign, disclosed in May 2026, weaponized the RubyGems open-source package registry as a data exfiltration channel by publishing more...
Booking.com confirmed hackers accessed customer reservation data in April 2026, raising immediate GDPR 72-hour notification questions — and echoing a ...
A threat actor known as 'Mr. Raccoon' claims to have stolen 13 million Adobe customer support tickets and 15,000 employee records — not by hacking Ado...