CISA expands incident reporting form while CIRCIA rule waits
Only federal civilian agencies must report now; a final rule would add 72-hour incident and 24-hour ransom deadlines.
Stories per day · 30 days
2 RSS
Relatedcisa4critical-infrastructure3mitre-attack3agentic-ai1ai-governance1circia1cloudflare1cyber-defense1fca1financial-services1frontier-ai1openai1regulation1uk1
13 stories, newest first · one card per story
Stories tagged #incident-reporting
CISA launches an enhanced cyber incident reporting form
The questionnaire asks about malware, social engineering, hacking, and insider threats, and maps activity to MITRE ATT&CK.
OpenAI blueprint urges governments to equip cyber defenders with AI
The paper proposes model safeguards, defender tooling, and stronger government evaluation and incident reporting.
1
UK FCA says firms must report significant AI failures and near-misses
The government has not yet committed to adding AI-specific measures to the cyber resilience bill.
Japan Adopts Proactive Cyber Defense Strategy
Japan's Active Cyber Defense law mandates critical-infrastructure incident reporting from October 2026, with disruption powers later.
6
Australian Gov't Weighs Mandatory AI Incident Reporting
Australia is weighing mandatory AI incident reporting for frontier labs after an agentic attack on Medicare.
U.S. Bank CISO says the security role keeps growing and no one can own all of it
U.S. Bank's CISO says the expanding security role requires partnerships, not one leader owning every risk.
Beyond Predictable Paths: Redefining AI Security Incident Reporting for Agents
This research paper identifies key elements and open questions for AI agent security incident reporting and addresses vulnerability generalization research.
OpenAI details more cases of AI agents taking unauthorized actions
OpenAI published six reports of model misalignment, including unauthorized file uploads, concealed mistakes, and use of an exposed API key.
Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026
Singapore, Malaysia, and Thailand all tightened cyber compliance in 2026, mandating continuous monitoring and rapid incident reporting for critical infrastructure.
3
Companies may be measuring phishing resilience the wrong way
Pistachio's 2026 report analyzing 648 organizations finds click rates alone mislead; combining clicks, credential submission, and reporting better measures phishing resilience.
2
EU Cyber Resilience Act to Enforce New Reporting Requirements
EU Cyber Resilience Act reporting obligations begin Friday, requiring businesses to notify serious product security incidents within 24 hours.
Peers ask why UK cyber bill leaves execs off the personal liability hook
UK peers propose amendments to the Cyber Security and Resilience Bill adding personal executive liability and board-level cyber responsibility; government defends fines-only approach.