27 briefs · 1 new
Financial institutions in Japan should implement the FSA's nine short-term cyber measures against the frontier-AI threat, with direct senior-management involvement and a roughly one-month guideline
Federal civilian agency security teams must migrate from the prior KEV remediation regime to BOD 26-04's risk-based timelines, with policy updates due immediately and remediation timelines enforceable within 180 days
Member State police authorities and Europol must build and configure EPRIS to the Decision's technical, security and logging specifications to exchange police records
IFSC regulated entities must adopt binding cyber controls against frontier-AI attack risks — including treating critical vulnerabilities as exploitable within hours, adding frontier AI as a defined risk-assessment scenario reviewed by the Board, maintaining an SBOM and API inventory, and imposing preparedness requirements on critical service providers — with immediate effect.
Vehicle manufacturers must implement the Appendix X procedures for secure, standardised OBD and RMI access (authentication, pseudonymised traceability, API provision, server availability and cybersecurity checks) so independent operators obtain non‑discriminatory, machine‑readable diagnostic and repair data
Facilities-based providers and public-safety network operators must update DIRS reporting workflows
EchoStar spectrum transfers carry buildout, D2D performance and escrow conditions
EU sanctions data teams must update cyber-list rationale records
Member States should file age-verification rollout plans by 30 June and deploy trusted solutions by year-end
Covered drone and router vendors can issue security updates only within the FCC waiver scope
Regulated entities must fold AI vulnerability risks into cyber controls
Nudification-app operators must block Minnesota access or face state AG fines and victim civil actions once enforcement begins
