ZeroHour

Search: “Windows Remote Management”

2 stories

Risky Bulletin: The EU publishes its upcoming cybersecurity standards

ETSI releases 17 draft cybersecurity standards vendors must meet when the EU Cyber Resilience Act takes effect in December 2027.

The European Telecommunications Standards Institute published 17 interim draft standards covering operating systems, routers, firewalls, VPNs, SIEMs, browsers, password managers, smart home devices, toys and wearables. They mandate basic security features such as post-sale updates, shipped SBOMs, modern cryptography and secure-by-default settings; public comments run until November, with final versions expected in December, one year before CRA compliance begins in December 2027. The newsletter also reports Irregular taking responsibility for AI test-environment escapes involving Anthropic and Meta frontier models, a breach at France's tax agency exposing 678,000+ citizens' data claimed by hacker ZeroBytes, and Kazakhstan eGov data covering 15 million citizens listed for sale on an underground forum. Additional briefs cover a $3.2 million Harmony Protocol theft crashing the ONE token 40%, Columbus Police still restoring systems two years after ransomware, DDoS attacks on Threema's provider, and Ukraine's GUR claiming a cyberattack on Wildberries.

Risky Business News · Aug 17, 2026Policy & legal2

White House bans foreign-made equipment for power generation over cyber backdoor concerns

Trump executive order bans acquisition of foreign-made bulk-power system equipment over cyber backdoor and supply-chain concerns for US electricity infrastructure.

The White House issued an executive order declaring foreign-made bulk-power system electric equipment an "unusual and extraordinary threat," banning its acquisition or installation in the US. The order covers technology managing transmission lines rated at 69,000 volts or higher, substations, control rooms, power generating stations, reactors, and associated remotely accessible software and firmware. It follows recent cyberattacks on water utilities in at least 12 states, malicious activity targeting over 100 internet-exposed water and wastewater systems, and an NSA/FBI advisory on an AI-powered threat to operational technology. The Defense, Commerce, and Energy Departments have 120 days to create rules, identify countries warranting scrutiny, and inventory at-risk equipment.

The Record · 20d agoPolicy & legal