Policy & Government

Editorial illustration of a framed certificate with a pentagon seal and a pause symbol, marking the Pentagon's suspension of CMMC Phase 2 requirements.

Policy & Government

Pentagon Suspends CMMC Phase 2 Requirements for Defense Contractors

A CMMC-framework pause from the Pentagon — defense-contractor compliance work re-scoped this week.

Editorial illustration of an official stamp severing a tunnel and leaving a seal, marking US Treasury sanctions on a VPN and malware cryptor seller.

Policy & Government

US Treasury Sanctions First VPN Service, Malware Cryptor Seller Over Ransomware Support

A US Treasury sanctions package targeting VPN and cryptor infrastructure that reportedly supports ransomware — regulatory coverage this week.

Editorial illustration of a globe orbited by browser cards with one pried corner, marking a global CMS exploitation warning from Australia's cyber agency.

Policy & Government

Australian Cyber Security Centre Warns of Global CMS Exploitation Campaign

An Australian government advisory on CMS exploitation — defender review across managed content platforms this week.

Editorial illustration of a network router beneath a multi-seal advisory notice, marking a joint US, UK and allied warning on Russian router targeting.

Nation-State Cyber Threats

US, UK and Allies Warn Russian State-Linked Actors Are Targeting Critical-Infrastructure Routers

A multilateral cybersecurity advisory on Russian router-targeting activity lands on critical-infrastructure defender teams' desks — the guidance reissues warnings the same agencies have made before, and asks operators to review posture this week.

Flat white line-art of an open report book beside a shield, one flat red dot at the shield — CISA credential-leak forensic report.

Data Breaches

CISA Publishes Forensic Report on May AWS GovCloud Credential Leak

A candid CISA transparency report — defender takeaways on incident-playbook readiness this week.

Flat white line-art of a speech bubble and a magnifying lens over a stack of message cards — EU Chat Control 2.0 CSAM scanning.

Policy & Government

European Parliament Advances "Chat Control 2.0," Clearing Big Tech to Scan Messages for CSAM

A pointed EU privacy-and-messaging shift — compliance implications for Big Tech and civil-society groups this week.

Flat white line-art of a government building beside a tall database drum — a DHS database breach reported in a weekly security roundup.

Data Breaches

DHS Database Hacked, SecurityWeek Roundup Reports; Adobe, Canada Also Featured

A federal-agency database breach lands in the weekly roundup — sector-advisory tracking this week.

Flat white line-art of a courthouse column beside four record cards — European Commission NIS2 referral to the CJEU.

Policy & Government

European Commission Refers Ireland, Spain, France and the Netherlands to the CJEU Over NIS2 Delays

A sharp regulatory-enforcement move from the European Commission — compliance stakes rise this week.

Flat white line-art of a large shield beside a network node grid — UK Cyber Shield agentic-AI defense plan and Cyber Resilience Pledge.

Policy & Government

UK Government Launches “Cyber Shield” Agentic-AI Defense Plan and Cyber Resilience Pledge

A national-scale agentic-AI defense plan from the UK — defender teams and industry partners align this week.

Flat white line-art of a checklist clipboard beside three stacked software boxes — CISA adds four flaws to the KEV catalog.

Vulnerabilities

CISA Adds Four Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog

Four KEV additions across three vendors — defender patch-verification work concentrates this week.

Flat white line-art of a certification stamp above a lock and a rising clock — France to stop certifying non-quantum-safe encryption.

Policy & Government

France's ANSSI to Stop Certifying Non-Quantum-Safe Encryption

A sharp French policy signal on quantum-safe encryption — international PQC migration accelerates this week.

Flat white line-art of a large government-building facade with a single tracking crosshair over its central window — an EU spyware-inquiry MEP infected with

Data Privacy

Pegasus Spyware Infected the Phone of an MEP Investigating Spyware, TechCrunch and WIRED Report

A pointed export-control-policy disclosure — the spyware-inquiry rapporteur becomes the target.

See all