Search: “ACT”

5 stories in the last 24h

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll AI safety & security 8 AI industry 5 AI policy 5 Policy & legal 5 Malware 5 Advisory 4 Industry 3 Threat actor 2 Tools 2 Data breach 2 Vulnerability 1 AI research 1 AI tools & infra 1 Phishing & fraud 1

SeverityAll critical 0 high 5 medium 12 low 0 info 28

Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026

Singapore, Malaysia, and Thailand all tightened cyber compliance in 2026, mandating continuous monitoring and rapid incident reporting for critical infrastructure.

Singapore's CSA issued the Cybersecurity Code of Practice 2026 for Critical Information Infrastructure on 29 July 2026, adding board cyber-resilience duties, annual training, and controls on Interconnected Systems, with most obligations effective by 29 July 2027. Malaysia's Cyber Security Act 2024 requires NACSA-licensed providers, audits, and fast incident notification, with fines up to RM500,000 and up to ten years' imprisonment. Thailand's NCSA cloud security standard has been enforced since 10 September 2026, with a Website Security Standard effective 16 September 2026. The vendor article argues detection speed has become a compliance metric driving demand for real-time threat intelligence.

Cyble09:57 UTC · 4h agoPolicy & legal

Ofcom discovers issuing Online Safety Act fines is easier than collecting them

Ofcom says most Online Safety Act fines totaling over £7 million remain unpaid as platforms structure businesses to evade collection.

Ofcom director of enforcement Suzanne Cater told the House of Lords that the majority of fines issued under the UK Online Safety Act remain uncollected despite over £7 million in penalties on 11 providers. The regulator's largest fine was £1.4 million against 8579 LLC in February. Ofcom is running six enforcement programs and 40 formal investigations covering more than 100 services, including Telegram, TikTok and X, and is working with the UK government to strengthen its enforcement powers.

The Register · Security10:08 UTC · 3h agoPolicy & legal

House passes bill to equip local law enforcement with scam-fighting tools

The U.S. House passed the GUARD Act, letting local law enforcement use federal grants to investigate financial scams and trace stolen cryptocurrency.

The bipartisan GUARD Act (Reps. Zachary Nunn, Scott Fitzgerald, Josh Gottheimer) passed the House, allowing existing DOJ grant funds to be used for fraud analysts, victim-support training, blockchain tracing software, and financial-information sharing with law enforcement. It addresses scams like pig butchering, often run by transnational criminal groups overseas; Americans lost a record $11.4 billion to crypto-related fraud in 2025, including $8.6 billion in investment fraud. Senators Katie Britt and Kirsten Gillibrand introduced a Senate companion in July 2025, and the House also passed a bill retroactively eliminating the 'scam tax' on stolen funds for 2021-2025 victims.

The RecordSep 16, 18:28 UTC · 19h agoPolicy & legal

U.S. Seizes NightmareStresser Domains Linked to Hundreds of Thousands of DDoS Attacksnew

The U.S. DoJ seized NightmareStresser DDoS-for-hire domains, disrupting a booter service linked to hundreds of thousands of attacks since 2022.

The U.S. Department of Justice announced a court-authorized seizure of nightmare-stresser[.]com and nightmarestresser[.]org, conducted with the FBI Anchorage Field Office and the Royal Canadian Mounted Police as part of Operation PowerOFF. Searchlight Cyber reported in 2023 that NightmareStresser had over 566,000 registered users and 52 servers, offering Layer 4 amplification and Layer 7 floods against education, government, and gaming victims. The seizure follows earlier actions, including 48 domains seized in December 2022 and 53 domains plus four arrests this April, bringing totals to twelve charged defendants and more than 100 seized domains.

The Hacker Newsupdated 13:37 UTC · 28m agofirst 05:13 UTC · 8h agoPolicy & legal 5 sources

LinkedIn fights for the right to tell customers when the feds want their data

Microsoft's chief legal officer argues federal subpoenas for LinkedIn user data should carry narrower scope and that secrecy orders must become the exception.

Microsoft chief legal officer Jon Palmer said federal courts and Congress must curb overly broad US government subpoenas for LinkedIn user data that arrive with secrecy orders preventing customer notification. The company is asking courts to enforce meaningful limits on demand scope and secrecy, invoking Fourth and First Amendment arguments. Palmer cited House legislation passed August 31 to rein in secret surveillance, while LinkedIn simultaneously faces user privacy lawsuits, one dismissed with leave to amend by Judge Vince Chhabria.

CSO OnlineSep 16, 19:50 UTC · 18h agoPolicy & legal