Meta business terms allow use of linked content; EU and UK users can object
After backlash, Meta moved the effective date from October 30 to November 20 and removed the word train.
After backlash, Meta moved the effective date from October 30 to November 20 and removed the word train.
China drafted export controls on 23 AI technologies, including frontier models above set compute and size thresholds.
DORA requires selected EU financial firms to run threat-led penetration tests at least every three years.
UK officials have not committed to adding AI safeguards to the Cyber Security and Resilience Bill.
AI News roundup: OpenAI fired three safety researchers amid an agent-escape dispute, plus GPT-6.1 and Claude updates.
A CSO essay argues enterprises should replace separate BOM programs with one federated evidence graph.
OpenAI will watermark ChatGPT text by default in the EU under the AI Act, and leave it off elsewhere.
A practitioner case study maps AI-augmented SIEM SEUXDR to EU Cyber Resilience Act lifecycle and reporting duties.
OpenAI will add invisible textGrain watermarks to ChatGPT and Codex output in the European Union.
OpenAI is rolling out textGrain watermarking for ChatGPT and Codex in the EU to meet AI Act rules.
OpenAI will watermark EU ChatGPT text with textGrain but let API customers worldwide turn it off.
OpenAI will watermark eligible ChatGPT and Codex text in the EU to meet AI Act provenance rules.
Researchers propose auditable text-watermark checks that operationalize EU AI Act Article 50 without claiming universal robustness.
Experts say the EU Cyber Resilience Act’s 24-hour reporting clock makes manual vulnerability triage impractical.
Open-source ARCCS turns regulations into atomic requirements and detects EU procurement violations with 98.8 percent accuracy.
The EU Cyber Resilience Act imposes SBOM, patching, and 24-hour exploit reporting duties on container and Kubernetes products.
Enterprise comparison finds Copilot and Kiro indemnify generated code, while Cognition's Devin terms exclude outputs.
EU auditors found the bloc's €1.4 billion cyberattack early-warning system is not fully operational and its effectiveness is unverified.
F5 patches actively exploited critical zero-day (CVE-2026-94127) in BIG-IP APM OAuth servers, enabling unauthenticated remote code execution.
Sweden's IMY fined IT provider Miljödata $183,000 under GDPR for security failures behind an August 2025 breach affecting 2.2 million people.
DORA year two pushes EU financial firms to prove SOC visibility and timely incident detection.
The European Commission proposed the EU KIDS Act, barring under-13s from social media, mandating safe-by-design rules, and fining violators up to 6% of global revenue.
Empirical study of three SBOM generators across 3,000+ JavaScript and Rust projects finds systematic divergences caused by specification ambiguities, risking CRA non-compliance.
ACM Technology Policy Council authors warn AI-generated code is overwhelming thinly funded open-source maintainers, raising software supply chain security risks.
Australia signals it may deepen EU ties as Canada pursues a 'unique alliance' with the bloc amid escalating US trade disputes.
EU Commission President von der Leyen warned AI will enable unprecedented hacking and announced Kids Act and Digital Fairness Act proposals regulating social media.
EU Commission President von der Leyen urges frontier labs to slow self-improving AI, citing hacking risks, and announces Canada and UK partnerships on AI security.
EU Cyber Resilience Act reporting obligations begin Friday, requiring businesses to notify serious product security incidents within 24 hours.
ANY.RUN researchers uncovered the N0va phishkit targeting government, technology, consulting, and healthcare organizations across North America and the EU via device code phishing.
Akamai argues NIS2 compliance is harder in the AI age, outlining four key challenges and urging network segmentation as essential.
ActiveState argues the EU CRA's 24-hour ENISA exploit-notification duty, effective September 11, 2026, makes current SBOMs and provenance visibility a legal necessity.
Sponsored Barco piece, citing IDC data, says security is now the top videoconferencing purchase criterion as NIS2 and Cyber Resilience Act compliance pressures mount.
29 MEPs urge delaying Serbia's EU accession after researchers found Pegasus and NoviSpy spyware on student activists' phones.
ESET outlines steps for deepfake victims: preserving evidence, using platform reporting tools, and legal remedies like the US TAKE IT DOWN Act and StopNCII.org.
Huntress survey: CIRCIA reporting mandates now live, BEC claims exceed ransomware, exfiltration-heavy attacks cost twice as much, premiums rising.
ANY.RUN's August 2026 roundup shows US and EU firms hit via Microsoft 365 session hijacking, remote-tool abuse, and hiring lures.
ChatGPT and Reddit now fall under the EU's toughest online safety rules, adding new regulatory burdens after rapid growth.
Hikvision EMEA security director argues camera estates need governance, recovery controls, and secure-by-default settings rather than AI fixes.
Anthropic will watermark Claude outputs by biasing low-stakes word choices, a method it says complies with EU AI regulations.
ETSI has launched an approval process for 17 cybersecurity standards that vendors must meet under the EU Cyber Resilience Act.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.8K readers · 4.1K views · 3.1K reads · all time 162K views