Currently free during beta - premium features coming soon. Subscribe now to lock in early access.
All Changes

EU Regulatory Changes

782 changes tracked across 24 compliance frameworks including DORA, NIS2, GDPR, EU AI Act, Cyber Resilience Act, and more.

All DORA NIS2 GDPR CSRD MaRisk ISO27001 EU_AI_ACT CRA DSA DMA eIDAS2 SOC2 PCI_DSS HIPAA ISO42001 AMLD6 PSD3 DATA_ACT GPSR CER EUDR CVE BREACH AI_SAFETY
Ransomware: thegentlemen claims Ponisch Abogados (MX) — Business Services
Ransomware: thegentlemen claims Grupo Alvorada (BR) — Not Found
Ransomware: thegentlemen claims Instituut voor de Nederlandse (NL) — Public Sector
Ransomware: dragonforce claims Advanced Medical Consultants (US) — Healthcare
CVE-2021-47965 (CVSS 9.8) — WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vul...
CVE-2026-46364 (CVSS 9.8) — phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinC...
KEV: CVE-2026-42897 — Microsoft Microsoft (Microsoft Exchange Server Cross-Site Scripting Vulnerability)
Ransomware: qilin claims Turner Supply (US) — Construction
Ransomware: coinbasecartel claims Zywave (US) — Business Services
Ransomware: coinbasecartel claims Grafana (US) — Technology
Ransomware: qilin claims Australian College of Business Intelligence (AU) — Education
arXiv: Model Forensics in AI-Native Wireless Networks: Taxonomy, Applications, and Case Study
This publication introduces a taxonomy and framework for model forensics specifically designed for AI-native wireless networks, which are networks where artificial intelligence is deeply integrated...
Read analysis →
arXiv: MetaBackdoor: Exploiting Positional Encoding as a Backdoor Attack Surface in LLMs
This publication from May 2026 introduces a novel vulnerability in large language models, termed MetaBackdoor. The research demonstrates that an attacker can embed a hidden backdoor into an LLM by ...
Read analysis →
arXiv: Talk is (Not) Cheap: A Taxonomy and Benchmark Coverage Audit for LLM Attacks
This publication, a pre-print from arXiv dated May 14, 2026, introduces a new taxonomy and benchmark coverage audit for attacks on large language models (LLMs). It systematically categorises the ty...
Read analysis →
arXiv: Veritas: A Semantically Grounded Agentic Framework for Memory Corruption Vulnerability Detection in Binaries
This publication introduces Veritas, a novel AI-driven framework designed to automatically detect memory corruption vulnerabilities in compiled binary software. Unlike traditional static analysis t...
Read analysis →
arXiv: PickleFuzzer: A Case Study in Fuzzing for Discrepancies Between Python Pickle Implementations
This publication, titled PickleFuzzer: A Case Study in Fuzzing for Discrepancies Between Python Pickle Implementations, presents a new automated testing tool designed to find security and reliabili...
Read analysis →
arXiv: Analyzing Codes of Conduct for Online Safety in Video Games at Scale
This publication, a research paper from arXiv, does not represent a regulatory change but rather a significant analytical study that will inform future regulatory frameworks. The paper presents a l...
Read analysis →
arXiv: WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections
A new academic paper published on arXiv, titled WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections, introduces a framework designed to protect autonomous web agents from adv...
Read analysis →
arXiv: Toward Securing AI Agents Like Operating Systems
This paper, published on arXiv, proposes a new framework for securing advanced AI agents by treating them like operating systems. It argues that current AI safety approaches are insufficient for au...
Read analysis →
arXiv: Do Coding Agents Understand Least-Privilege Authorization?
A new preprint from arXiv, titled "Do Coding Agents Understand Least-Privilege Authorization?" examines the security behavior of AI coding agents when implementing authorization controls. The study...
Read analysis →