Topic: cybersecurity standards
-
ETSI Unveils 17 Cybersecurity Standards for EU CRA Compliance
ETSI has initiated approval for 17 cybersecurity standards that will define minimum security requirements for products to achieve EU Cyber Resilience Act (CRA) compliance, which becomes fully enforceable in December 2027. The draft standards mandate modern cryptography, secure-by-default configur...
Read More » -
Robot vacuum ban won't improve safety, only make them worse
The FCC's ban on foreign-made robot vacuums, citing national security risks, judges products solely by country of origin rather than actual security merits, likely leading to fewer choices, stalled innovation, and higher prices for US consumers. The ban fails to address real cybersecurity threats...
Read More » -
Bank of England, FCA, and Treasury Warn on Frontier AI Risks
UK financial regulators (Bank of England, FCA, HM Treasury) issued a joint statement requiring financial firms to integrate AI risk management into existing governance, ensuring models are robust, explainable, and auditable to address cybersecurity and operational resilience risks. The regulators...
Read More » -
CISA unveils updated SBOM baseline standard
CISA's 2026 Minimum Elements for SBOM supersedes the 2021 NTIA framework, expanding on core data fields (supplier, component names, versions) and operational aspects while adding a sharper focus on real-world implementation. The updated standard emphasizes automated machine-readable formats, clar...
Read More » -
ISACA to Oversee DoD's CMMC Cybersecurity Credentialing
The U.S. Department of Defense has appointed ISACA as the exclusive global authority to oversee training, examination, and certification for all professionals within the CMMC program. The CMMC program mandates that all organizations working with the DoD achieve certification by 2028, impacting ov...
Read More » -
Digital Forensics, Investigation & Response: 5th Edition Review
The book provides a comprehensive, structured guide to digital forensics, progressing from core principles and legal frameworks to platform-specific analysis and specialized areas like network and mobile forensics. It emphasizes critical investigative foundations, including evidence integrity, es...
Read More » -
Neato's Cloud Shutdown Traps Robot Vacuums in Manual Mode
Neato robot vacuums have lost remote control and scheduling capabilities due to the permanent shutdown of their cloud services, forcing users to rely solely on manual operation via physical buttons. The discontinuation was attributed to evolving cybersecurity requirements and compliance regulatio...
Read More » -
Oman Data Park & Axway Boost Secure Data Exchange in Oman
Oman Data Park and Axway have formed a strategic partnership to enhance secure data exchange and digital innovation in Oman, aligning with Oman Vision 2040 by providing advanced API management and integration tools. The collaboration integrates Axway's technologies into ODP's secure cloud platfor...
Read More » -
UAE Cybersecurity Council Announces Second 'CyberQ' Conference in November
The UAE Cybersecurity Council will host the second CyberQ conference in Abu Dhabi on November 26–27, focusing on the convergence of quantum computing, AI, and cybersecurity. The event aims to address emerging threats like AI-driven cyber risks and the need for post-quantum cryptography, fostering...
Read More » -
Microsoft: Copilot Rarely Copies Books as OpenAI Model Sells
Microsoft is seeking summary judgment in its copyright lawsuit by arguing that its Copilot system rarely reproduces copyrighted content, citing an incidence rate of just 0.00029 percent across millions of conversations. The company simultaneously launched GPT-6 Astra, a high-capability model rate...
Read More » -
AI Boosts Vulnerability Awareness and Secure-by-Design Software
AI-driven vulnerability scanning is emerging as a game-changer, accelerated by the EU Cyber Resilience Act which mandates secure-by-design software. AI tools automate flaw detection and prioritization at scale, eliminating excuses for unpatched bugs and complementing new regulatory demands. The c...
Read More » -
UK Launches Cyber Unit to Strengthen National Security
The UK government has launched a new Cyber Action Plan, establishing a Government Cyber Unit and a Software Security Ambassador Scheme, backed by £210 million to strengthen public sector digital defenses and resilience against cyber-attacks. This initiative is a direct response to recent disrupti...
Read More » -
Sheikh Khaled: Microsoft's $15.2B AI Investment to Boost UAE Digital Growth
Microsoft is investing $15.2 billion in the UAE from 2023 to 2029 to boost its AI and cloud infrastructure, develop local talent, and strengthen its strategic partnership with the U.S. The investment focuses on building AI expertise tailored to regional needs, expanding data centers with advanced...
Read More » -
Neato Vacuums Lose Smart Features After Cloud Shutdown
Vorwerk Group is permanently shutting down Neato's cloud services, disabling the MyNeato app and remote functionality for its robot vacuums, forcing users to rely on manual operation. The shutdown, occurring earlier than the promised five-year support period, is attributed to evolving cybersecuri...
Read More » -
Oman Data Park Expands OCI Services with New Ibri Region
Oman Data Park has expanded its cloud services with a new Oracle Cloud Infrastructure Secondary Dedicated Region in Wilayat Ibri, enhancing Oman's digital transformation and sovereign cloud capabilities. The dual-region setup with Muscat ensures low-latency, high availability, and disaster recove...
Read More » -
Parliament Seeks Security Experts to Bolster Cyber Resilience
A UK parliamentary committee is actively seeking expert evidence to refine the proposed Cyber Security and Resilience Bill, a major legislative update for critical infrastructure protection. The bill expands regulatory scope to include new entities like managed service providers, mandates stricte...
Read More » -
Urban VPN Accused of Secretly Harvesting AI Chat Data
The Urban VPN Proxy browser extension secretly harvested users' private AI chatbot conversations from platforms like ChatGPT, sending data to external servers even when the VPN was off, contradicting its privacy claims. This covert data collection, enabled by default with no user opt-out, affecte...
Read More »