Policy, Regulation & Enforcement

White House launches Gold Eagle to accelerate AI-assisted discovery, prioritization and patching of software vulnerabilities nationwide.

Spanish police dismantled an organized cyber fraud ring that laundered ~uro140M through complex financial networks.

CISA warns of actively exploited SharePoint vulnerabilities and flags a stealthy ransomware family and law-enforcement takedowns.

CISA issued an emergency order forcing federal agencies to patch an actively exploited Oracle E-Business Suite vulnerability immediately.

CISA issues alert urging immediate SharePoint hardening after new exploitations affecting enterprise SharePoint environments were observed.

Finnish authorities issue wanted notice for suspect in massive psychotherapy provider Vastaamo breach that exposed sensitive patient records.

CISA publishes after-action lessons following contractor exposure of AWS GovCloud credentials and IaC repos on public GitHub.

Japanese teen arrested for exploiting a streaming platform flaw to fraudulently cancel over 46,000 subscriptions.

Law enforcement and industry partners disrupted a vast proxy network, cutting off millions of compromised devices and reducing attack surface.

Major healthcare data breach exposed millions of patients’ personal and medical information, raising regulatory and patient-care risks.

CISA reports active exploitation of a patched SharePoint RCE; prioritize remediation across SharePoint servers.

Executive order imposes hard 2030/2031 deadlines for post-quantum crypto migration across federal systems; impacts procurement and risk posture.

CISA warns federal agencies to patch CVE-2026-20253 quickly due to unauthenticated RCE risk.

Binding Directive 26-04 compels remediation of critical flaws within three calendar days for federal agencies.

New directive requires prioritization of patching based on KEV risk; federal agencies must focus on the most dangerous, known exploited vulnerabilities.

Coordinated disruption of Glassworm infrastructure; assess supply-chain risk and harden package sources.

Law enforcement disrupted infrastructure enabling cyberattacks and disinformation; assess your hosting providers and monitor for abuse.

VPN seizure and supply-chain risk underscore need for stronger third-party controls.