Currently free during beta - premium features coming soon. Subscribe now to lock in early access.
All Changes

EU Regulatory Changes

782 changes tracked across 24 compliance frameworks including DORA, NIS2, GDPR, EU AI Act, Cyber Resilience Act, and more.

All DORA NIS2 GDPR CSRD MaRisk ISO27001 EU_AI_ACT CRA DSA DMA eIDAS2 SOC2 PCI_DSS HIPAA ISO42001 AMLD6 PSD3 DATA_ACT GPSR CER EUDR CVE BREACH AI_SAFETY
CVE-2026-8631 (CVSS 9.8) — A potential security vulnerability has been identified in the HP Linux Imaging and Printin...
CVE-2026-6279 (CVSS 9.8) — The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated R...
CVE-2026-4858 (CVSS 8.0) — Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11...
CVE-2026-5118 (CVSS 9.8) — The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versio...
CVE-2026-6960 (CVSS 9.8) — The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to m...
KEV: CVE-2025-34291 — Langflow Langflow (Langflow Origin Validation Error Vulnerability)
KEV: CVE-2026-34926 — Trend Micro Apex One (Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability)
CVE-2026-3593 (CVSS 7.4) — A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue...
CELEX:32024R1401R(01)
arXiv: VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers
This publication, titled VIPER-MCP, presents a new methodology for detecting and exploiting taint-style vulnerabilities within Model Context Protocol (MCP) servers. MCP is an emerging standard that...
Read analysis →
arXiv: Auditing Apple's DifferentialPrivacy.framework: Implementation Bugs, Misconfigurations, and Practical Risks
A new academic paper published on arXiv on May 20, 2026, presents an audit of Apple’s DifferentialPrivacy.framework, revealing implementation bugs, misconfigurations, and practical risks that under...
Read analysis →
arXiv: Onion-Routed Multi-Circuit Key Establishment for Quantum-Resilient Sessions
This publication from arXiv, dated May 2026, presents a technical proposal for a new cryptographic protocol called "Onion-Routed Multi-Circuit Key Establishment." The paper outlines a method for es...
Read analysis →
arXiv: Profiling User Vulnerability to Phishing Through Psychological and Behavioral Factors
This publication from arXiv, dated May 20, 2026, presents a research paper that profiles user vulnerability to phishing by analyzing psychological and behavioral factors. While not a regulatory cha...
Read analysis →
arXiv: Information Leakage Envelopes
A new preprint from arXiv, titled "Information Leakage Envelopes," introduces a formal method for quantifying and bounding the unintended disclosure of sensitive information by AI systems during in...
Read analysis →
arXiv: Detecting Trojaned DNNs via Spectral Regression Analysis
This publication introduces a novel technical method for detecting Trojan attacks in deep neural networks (DNNs) using spectral regression analysis. While not a regulatory change itself, it represe...
Read analysis →
arXiv: Image Encryption via Data-Identified Discrete Chaotic Maps
A new research paper published on arXiv proposes an image encryption method using data-identified discrete chaotic maps, which could have implications for data protection and AI safety compliance. ...
Read analysis →
arXiv: Backchaining Loss of Control Mitigations from Mission-Specific Benchmarks in National Security
This paper, published on arXiv under the AI Safety framework, introduces a novel methodology for managing loss of control risks in advanced AI systems, specifically tailored to national security co...
Read analysis →
arXiv: An Evidence-driven Protocol for Trustworthy CI Pipelines
This publication introduces a new evidence-driven protocol for building trustworthy continuous integration (CI) pipelines, specifically designed to align with the AI Safety framework. The protocol ...
Read analysis →
arXiv: Verifiable Provenance and Watermarking for Generative AI: An Evidentiary Framework for International Operation...
This paper, published on arXiv, proposes a new evidentiary framework for using verifiable provenance and watermarking technologies in generative AI. It specifically addresses how these technical me...
Read analysis →
arXiv: Domijn: The Security of Domain Registrars and the Risk of a Domain Name Takeover