Intelligence desk

Regulatory

A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.

2026-09-04C-Track breach exposes the limits of court-vendor assuranceThird-Party Risk

2026-09-04CNIL fine makes healthcare access and monitoring evidence mandatoryRegulatory

2026-09-03UK bill puts vendor removal and procurement restrictions on the tableRegulatory

2026-09-02Aesto breach count exposes healthcare vendor concentrationThird-Party Risk

2026-08-28ATF major incident exposes assurance gap around standalone systemsIncident Response

2026-08-28US grid order forces inventory of foreign equipment and remote accessRegulatory

2026-08-27ATF major-incident disclosure tests assurance for standalone sensitive systemsIncident Response

2026-08-25TikTok settlement turns children’s-data controls into a board assurance testRegulatory

2026-08-24U.S. Bank claim exposes the assurance gap beyond direct providersThird-Party Risk

2026-08-21Canvas findings reset the evidence standard for SaaS assuranceRegulatory

2026-08-18France escalates tax-data breach response after containment missed extractionSecurity Leadership

2026-08-17Dutch cyber and critical-entity laws enter into forceRegulatory

2026-08-14US sets framework for supervised private-sector cyber operationsRegulatory

2026-08-13White House creates a federally controlled private cyber operations programmeRegulatory

2026-08-04Liechtenstein ownership-register theft creates downstream identity riskData Protection

2026-08-03EU AI Act transparency enforcement begins, shifting AI inventory from programme work to evidence obligationRegulatory

2026-07-31KT penalty exposes telecom control and evidence failuresRegulatory

2026-07-23US post-quantum programme moves from policy to named ownershipPolicy, Architecture and Cryptography

2026-07-17LegacyHive reopens the coordinated-disclosure argumentVulnerability research

2026-07-16Fraud disruption reveals the infrastructure behind the scamLaw enforcement

2026-07-15An AI-backed vulnerability clearinghouse will not solve enterprise prioritisationPublic policy

2026-07-14Sanctions turn anonymous infrastructure into a supplier-risk questionCybercrime policy

2026-07-14The CMMC pause does not pause defence-contractor riskPolicy & regulation