Organization

European Union

2 mentions in 7 days · 3 in 30 days · 4 total · first seen Aug 17, 2026 · last 4d ago

Timeline4 articles

EU's Cyber Resilience Act starts the 24-hour vulnerability clock

EU Cyber Resilience Act reporting rules take effect, requiring manufacturers to disclose actively exploited vulnerabilities to ENISA within 24 hours, with fines reaching €15 million.

The Cyber Resilience Act's Article 14 mandatory reporting duties became applicable, requiring makers of products with digital elements sold in the EU — regardless of where they are based — to file an early warning within 24 hours of becoming aware of an actively exploited vulnerability, a detailed notification within 72 hours, and a final report within 14 days of releasing a fix. Reports must be submitted through ENISA's Single Reporting Platform to the designated CSIRT, and non-compliance with these core duties can trigger fines up to €15 million or 2.5 percent of annual turnover. Manufacturers must also inform affected users of available fixes without undue delay, and most remaining CRA provisions, including mandatory SBOMs and security-by-design requirements, become applicable on December 11, 2027.

The Register · SecuritySep 11, 11:34 UTC · 4d agoPolicy & legal

From Protocols to Evidence: Bounded Claims for AI in Service of the Common Good

Paper proposes a rupture test and RISE AI architecture for evidence-bounded responsible-AI claims, framed via EU AI Act and NIST AI RMF.

The paper argues AI deployment intervenes in pre-existing institutional failures of responsiveness, belonging, care, and accountability, and must therefore evaluate both the system and the institutional rupture it enters. It reviews how the EU AI Act, NIST AI RMF, and ISO/IEC 42001 translate principles into protocols, and draws on Pope Leo XIV's Magnifica Humanitas to develop a rupture test linking institutional baselines to system evaluation. It distinguishes evidence-bounded deployment from measurement-bounded governance and introduces RISE AI, an architecture for bounded claims about Responsibility, Inclusivity, Safety, and Empowerment.

arXiv cs.AI / cs.LG / cs.CLSep 10, 17:56 UTC · 5d agoAI policy

Russian Hackers Phish EU Officials Over Messaging Apps

Russian nation-state hackers are phishing EU officials via Signal and WhatsApp as espionage shifts from email to messaging apps.

Russian state-linked threat groups have shifted phishing operations away from email toward messaging apps such as Signal and WhatsApp, targeting EU officials. In response, EU governments are trying to move away from popular messaging platforms. The report highlights evolving social engineering tactics in nation-state espionage campaigns against government targets.

Dark ReadingAug 27, 11:16 UTC · 19d agoThreat actor

Risky Bulletin: The EU publishes its upcoming cybersecurity standards

ETSI releases 17 draft cybersecurity standards vendors must meet when the EU Cyber Resilience Act takes effect in December 2027.

The European Telecommunications Standards Institute published 17 interim draft standards covering operating systems, routers, firewalls, VPNs, SIEMs, browsers, password managers, smart home devices, toys and wearables. They mandate basic security features such as post-sale updates, shipped SBOMs, modern cryptography and secure-by-default settings; public comments run until November, with final versions expected in December, one year before CRA compliance begins in December 2027. The newsletter also reports Irregular taking responsibility for AI test-environment escapes involving Anthropic and Meta frontier models, a breach at France's tax agency exposing 678,000+ citizens' data claimed by hacker ZeroBytes, and Kazakhstan eGov data covering 15 million citizens listed for sale on an underground forum. Additional briefs cover a $3.2 million Harmony Protocol theft crashing the ONE token 40%, Columbus Police still restoring systems two years after ransomware, DDoS attacks on Threema's provider, and Ukraine's GUR claiming a cyberattack on Wildberries.

Risky Business NewsAug 17, 05:03 UTC · Aug 17, 2026Policy & legal1

Appears with

threat actor GUR 1 threat actor Russian state-linked threat actors 1 threat actor ZeroBytes 1 organization Anthropic 1 organization Columbus Police Department 1 organization ENISA 1 organization ETSI 1 organization GUR 1 organization Harmony Protocol 1 organization Irregular 1 organization ISO 1 organization Meta 1 organization NIST 1 organization Threema 1 organization Wildberries 1 product RISE AI 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.