Currently free during beta - premium features coming soon. Subscribe now to lock in early access.
All Changes

EU Regulatory Changes

4742 changes tracked across 24 compliance frameworks including DORA, NIS2, GDPR, EU AI Act, Cyber Resilience Act, and more.

All DORA NIS2 GDPR CSRD MaRisk ISO27001 EU_AI_ACT CRA DSA DMA eIDAS2 SOC2 PCI_DSS HIPAA ISO42001 AMLD6 PSD3 DATA_ACT GPSR CER EUDR CVE BREACH AI_SAFETY
Ransomware: moneymessage claims Envision Unlimited — Not Found
Ransomware: BrainCipher claims robroy.com (US) — Manufacturing
Ransomware: BrainCipher claims iac-intl.com (US) — Business Services
Ransomware: qilin claims Inter Power Engineering (AE) — Energy
Ransomware: payload claims The commune of Castries (FR) — Public Sector
Ransomware: qilin claims Sintax (BE) — Technology
Ransomware: qilin claims Sun Dolphin Boats (US) — Manufacturing
Ransomware: qilin claims Bronken's Dist — Transportation/Logistics
Ransomware: qilin claims Alan F Burke (US) — Not Found
Ransomware: qilin claims Hum & Jacoby (US) — Business Services
Ransomware: CRPxO claims Creative Smiles Pediatric Dentistry (US) — Healthcare
Ransomware: CRPxO claims AMHWA Biopharm Co., Ltd. (CN) — Healthcare
CVE-2026-8801 (CVSS 3.5) — Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This i...
CVE-2026-58122 (CVSS 9.1) — Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows ...
CVE-2026-58123 (CVSS 9.8) — Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerabil...
CVE-2026-14894 (CVSS 9.8) — The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrar...
arXiv: Reason Less, Verify More: Deterministic Gates Recover a Silent Policy-Violation Failure Mode in Tool-Using LLM...
This publication from July 2026 presents a research paper identifying a critical failure mode in large language model (LLM) agents that use external tools, such as code interpreters or APIs. The au...
Read analysis →
arXiv: zk-ScalHard: Scalable and Hardware-Rooted Privacy-Preserving Authentication for Secure OTA Updates in Zonal SDVs
This publication from July 2026 introduces a new cryptographic framework called zk-ScalHard, designed to enable privacy-preserving authentication for over-the-air (OTA) software updates in zonal so...
Read analysis →
arXiv: The AI Resilience Gap: Bringing Artificial Intelligence Inside the Operational Resilience Perimeter
This paper, published on arXiv in July 2026, argues that current regulatory frameworks, including the EU’s Digital Operational Resilience Act (DORA), do not adequately address the unique risks pose...
Read analysis →
arXiv: FedCVESA: Taking Away Training Data in Federated Learning via Correlation Value Encoding and Segmented Aggrega...
This paper, published on arXiv, proposes a new technique called FedCVESA that allows attackers to reconstruct training data from federated learning models with high accuracy. Federated learning is ...
Read analysis →