All Changes
EU Regulatory Changes
782 changes tracked across 24 compliance frameworks including DORA, NIS2, GDPR, EU AI Act, Cyber Resilience Act, and more.
All
DORA NIS2 GDPR CSRD MaRisk ISO27001 EU_AI_ACT CRA DSA DMA eIDAS2 SOC2 PCI_DSS HIPAA ISO42001 AMLD6 PSD3 DATA_ACT GPSR CER EUDR CVE BREACH AI_SAFETY
A critical vulnerability has been published under CVE-2026-24444, affecting SDMC NE6037 cable modem routers running firmware versions 7.1.6.0.25 and 7.1.6.1.9_B9. The issue involves a hardcoded pas...
Read analysis →
A critical vulnerability has been published under CVE-2026-34311, affecting Oracle Hospitality OPERA 5 Property Services, specifically versions 5.6.19.24, 5.6.22, and 5.6.25.19. The vulnerability c...
Read analysis →
A critical vulnerability has been published under CVE-2026-46775, affecting Oracle REST Data Services in versions 24.2.0 through 26.1.0. The flaw, rated 9.9 on the CVSS scale, is easily exploitable...
Read analysis →
A critical vulnerability has been published under CVE-2026-46817, affecting the Oracle Payments component of Oracle E-Business Suite, specifically versions 12.2.3 through 12.2.15. The flaw, rated 9...
Read analysis →
A critical vulnerability, CVE-2026-46819, has been published with a CVSS score of 9.1, affecting the Oracle Internet Procurement Connector within Oracle E-Business Suite. The flaw resides in the In...
Read analysis →
A critical vulnerability has been published under CVE-2026-46822, affecting the Oracle iAssets product within Oracle E-Business Suite, specifically versions 12.2.3 through 12.2.15. The vulnerabilit...
Read analysis →
A critical vulnerability has been published under CVE-2026-46824, affecting the Oracle Universal Work Queue product within Oracle E-Business Suite, specifically the Work Provider Site Level Adminis...
Read analysis →
On 27 May 2026, a ransomware incident involving the Akira group was published on the ransomware tracking site ransomware.live, targeting Gone Fishin' Marine, an entity within the hospitality and to...
Read analysis →
This paper, published on arXiv, introduces a new benchmark called "Code as a Weapon," which is a curated set of prompts designed to test whether large language models (LLMs) that generate code will...
Read analysis →
This publication from May 2026 introduces a new technical framework for Internet Key Exchange (IKE) protocols designed to be resistant to quantum computing attacks, specifically tailored for satell...
Read analysis →
This paper, published on arXiv, introduces MaskClaw, a technical framework designed to enhance privacy for graphical user interface (GUI) agents—AI systems that interact with software interfaces on...
Read analysis →
A new research paper, GraphSteal, published on arXiv, demonstrates a novel method for extracting the structural knowledge embedded within Graph-based Retrieval-Augmented Generation (RAG) systems. T...
Read analysis →
A new academic paper published on arXiv, titled "Blind PRNG Hijacking: An Undetectable Integrity-Preserving Attack Against LLM Watermarking," presents a novel method to remove or bypass watermarkin...
Read analysis →
A new position paper published on arXiv, titled "Retire the 'Positive Backdoor' Label -- Secret Alignment Requires Strict and Systematic Evaluation," argues that the AI safety community should aban...
Read analysis →
This technical report, published on arXiv on May 27, 2026, identifies emerging security and safety risks within the rapidly growing ecosystem of AI agent skills—modular capabilities that can be dow...
Read analysis →