Currently free during beta - premium features coming soon. Subscribe now to lock in early access.
All Changes

EU Regulatory Changes

4608 changes tracked across 24 compliance frameworks including DORA, NIS2, GDPR, EU AI Act, Cyber Resilience Act, and more.

All DORA NIS2 GDPR CSRD MaRisk ISO27001 EU_AI_ACT CRA DSA DMA eIDAS2 SOC2 PCI_DSS HIPAA ISO42001 AMLD6 PSD3 DATA_ACT GPSR CER EUDR CVE BREACH AI_SAFETY
CVE-2026-12692 (CVSS 9.8) — Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allow...
CVE-2026-8297 (CVSS 9.8) — Improper neutralization of special elements used in an SQL command ('SQL injection') vulne...
CVE-2026-9198 (CVSS 9.8) — IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/au...
CVE-2026-9103 (CVSS 9.8) — IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized a...
CVE-2026-9135 (CVSS 9.9) — IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918...
CVE-2026-15091 (CVSS 9.3) — IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute a...
CVE-2026-8476 (CVSS 9.9) — IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerabili...
CVE-2026-8481 (CVSS 9.9) — IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerabili...
CVE-2026-8635 (CVSS 9.9) — IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to...
CVE-2026-8859 (CVSS 9.9) — IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary ...
CVE-2026-13446 (CVSS 9.8) — IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password...
CELEX:32024R3211R(02)
arXiv: Beyond Success Rate: Cost-Aware Evaluation of Offensive and Defensive Security Agents
This publication introduces a new evaluation framework for AI safety, moving beyond simple success rates to incorporate cost-aware metrics for both offensive and defensive security agents. The pape...
Read analysis →
arXiv: When Words Are Safe But Actions Kill: Probing Physical Danger Beyond Text Safety in Hidden-State Risk Space
This paper, published on arXiv, introduces a novel methodology for assessing AI safety that goes beyond traditional text-based content filtering. The authors propose a "hidden-state risk space" app...
Read analysis →
arXiv: Setup Complete, Now You Are Compromised: Weaponizing Setup Instructions Against AI Coding Agents
This paper, published on arXiv on July 16, 2026, details a novel cybersecurity vulnerability targeting AI coding agents. The research demonstrates that malicious actors can embed hidden instruction...
Read analysis →
arXiv: Automated Template-free Synthesis of Instruction-Centric Leakage Contracts for Black-Box CPUs
This paper, published on arXiv, introduces a novel method for automatically generating "leakage contracts" for black-box CPUs without relying on pre-defined templates. A leakage contract formally s...
Read analysis →
arXiv: DataShield: Uncovering Risky Fine-Tuning Data Across LLMs Through Consensus Subspace Alignment
This publication introduces DataShield, a novel technical framework designed to detect risky or non-compliant data used in the fine-tuning of large language models. The method works by identifying ...
Read analysis →
arXiv: NFSA: Non-Forward Secure Aggregation with One Server via Two Layer Secret Sharing
This paper, published on arXiv, proposes a new cryptographic protocol called Non-Forward Secure Aggregation (NFSA) that uses a two-layer secret sharing scheme to enable secure data aggregation with...
Read analysis →
arXiv: On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline
This publication from arXiv presents a research paper detailing a new, simplified method for generating adversarial attacks against vision-language AI models, such as those used in multimodal searc...
Read analysis →
arXiv: A Queueing-Stability Criterion for Causal IPD-QIM Network Flow Watermarking
This paper, published on arXiv, introduces a new mathematical criterion for evaluating the stability of network flow watermarking techniques, specifically a method called Causal IPD-QIM. While not ...
Read analysis →