Currently free during beta - premium features coming soon. Subscribe now to lock in early access.
All Changes

EU Regulatory Changes

1715 changes tracked across 24 compliance frameworks including DORA, NIS2, GDPR, EU AI Act, Cyber Resilience Act, and more.

All DORA NIS2 GDPR CSRD MaRisk ISO27001 EU_AI_ACT CRA DSA DMA eIDAS2 SOC2 PCI_DSS HIPAA ISO42001 AMLD6 PSD3 DATA_ACT GPSR CER EUDR CVE BREACH AI_SAFETY
Ransomware: incransom claims Kewaunee Scientific (US) — Manufacturing
Ransomware: incransom claims fineconsulting (RO) — Business Services
Ransomware: bravox claims CCS GLOBAL TECH (US) — Technology
Ransomware: direwolf claims Nueva Pescanova Group (ES) — Agriculture and Food Production
Ransomware: direwolf claims Did Asia (TH) — Not Found
Ransomware: direwolf claims Clínica Vida (BR) — Healthcare
Ransomware: direwolf claims Jewelex (CY) — Consumer Services
Ransomware: anubis claims FÉTIS Group & SECOM Engineering (FR) — Business Services
CVE-2026-7852 (CVSS 9.8) — Unrestricted upload of file with dangerous type vulnerability in Limatek System Inc. LimRA...
CVE-2026-11839 (CVSS 9.9) — Unrestricted upload of file with dangerous type vulnerability in Başarsoft Information Te...
CVE-2026-49973 (CVSS 9.4) — Hermes WebUI before version 0.51.358 contains an improper access control vulnerability th...
KEV: CVE-2026-10520 — Ivanti Sentry (Ivanti Sentry OS Command Injection Vulnerability)
Sharon Donnery: Trust is the infrastructure: banking supervision in a changing risk landscape
arXiv: MARCIM-WG: A cyber wargame proposal based on math modeling applied in a naval scenario
This document is not a regulatory change but a research paper proposing a new cyber wargame framework called MARCIM-WG, published on arXiv. It uses mathematical modeling to simulate cyber attacks a...
Read analysis →
arXiv: ECYSAP EYE: From Cyber Situational Awareness to Mission-Centric Decision Support for Enhanced Cyberspace Opera...
This publication, titled ECYSAP EYE, presents a research framework for integrating cyber situational awareness with mission-centric decision support, specifically aimed at enhancing cyberspace oper...
Read analysis →
arXiv: OCELOT: Inference-Leakage Budgets for Privacy-Preserving LLM Agents
As a senior EU regulatory compliance analyst, I summarize the following regulatory-relevant publication for compliance professionals. This paper, OCELOT, introduces a new framework for measuring a...
Read analysis →
arXiv: A Five-Plane Reference Architecture for Runtime Governance of Production AI Agents
A new technical paper published on arXiv proposes a five-plane reference architecture for runtime governance of production AI agents, titled A Five-Plane Reference Architecture for Runtime Governan...
Read analysis →
arXiv: Selection Integrity for LLM Graph Memory: An Accumulability Criterion for Information-Flow-Blind Retrieval
This paper, published on arXiv under the AI Safety framework, introduces a new technical criterion called "accumulability" for evaluating the integrity of information retrieval from large language ...
Read analysis →
arXiv: Partitioned Tags, Shared Data: Reconciling Strict Cache Isolation with Write-Shared Coherence
This publication from arXiv, dated June 10, 2026, presents a novel hardware architecture approach titled "Partitioned Tags, Shared Data." It proposes a method to reconcile strict cache isolation wi...
Read analysis →
arXiv: Reinforcement Learning Disrupts Gradient-Based Adversarial Optimization
This publication presents a research paper demonstrating that reinforcement learning (RL) can effectively circumvent standard gradient-based adversarial attacks used to test AI system robustness. T...
Read analysis →