Currently free during beta - premium features coming soon. Subscribe now to lock in early access.
All Changes

EU Regulatory Changes

1656 changes tracked across 24 compliance frameworks including DORA, NIS2, GDPR, EU AI Act, Cyber Resilience Act, and more.

All DORA NIS2 GDPR CSRD MaRisk ISO27001 EU_AI_ACT CRA DSA DMA eIDAS2 SOC2 PCI_DSS HIPAA ISO42001 AMLD6 PSD3 DATA_ACT GPSR CER EUDR CVE BREACH AI_SAFETY
CVE-2026-47647 (CVSS 9.9) — Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevat...
CVE-2026-54130 (CVSS 9.8) — Missing authentication for critical function in M365 Copilot allows an unauthorized attac...
CVE-2026-7515 (CVSS 9.8) — The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion in versions ...
CVE-2026-8713 (CVSS 9.1) — The Avada (Fusion) Builder plugin for WordPress is vulnerable to arbitrary file deletion d...
CVE-2026-45480 (CVSS 10.0) — Improper authentication in Azure Active Directory allows an unauthorized attacker to ele...
CVE-2026-48582 (CVSS 9.6) — Missing authorization in Microsoft Exchange Online allows an authorized attacker to eleva...
CVE-2026-48584 (CVSS 9.9) — Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to e...
CVE-2026-56073 (CVSS 9.4) — Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP verificatio...
Press release - Press conference: European Democracy Shield findings and recommendations
CELEX:32024R2076R(09)
CELEX:32024R0849R(02)
arXiv: From Efficiency to Leakage -- Privacy Backdoor in Federated Language Model Fine-Tuning
This paper, published on arXiv, reveals a significant privacy vulnerability in federated learning for large language models. It demonstrates that while federated learning is designed to protect dat...
Read analysis →
arXiv: Sovereign Execution Brokers: Enforcing Certificate-Bound Authority in Agentic Control Planes
This paper, published on arXiv, introduces a new technical framework called Sovereign Execution Brokers, which proposes a method for enforcing certificate-bound authority in AI agentic control plan...
Read analysis →
arXiv: Efficient and Sound Probabilistic Verification for AI Agents
This publication introduces a novel probabilistic verification framework for AI agents, designed to formally assess the safety and reliability of autonomous decision-making systems. The authors pro...
Read analysis →
arXiv: Calibration Without Comprehension: Diagnosing the Limits of Fine-Tuning LLMs for Vulnerability Detection in Sy...
A new research paper published on arXiv, titled "Calibration Without Comprehension: Diagnosing the Limits of Fine-Tuning LLMs for Vulnerability Detection in Systems Software," raises significant co...
Read analysis →
arXiv: A-COMPASS: Formal Foundations for Anonymity Analysis in Microdata
This publication introduces A-COMPASS, a formal mathematical framework for analyzing anonymity in microdata, which is detailed, individual-level data often used in research and analytics. The paper...
Read analysis →
arXiv: Analyzing Defensive Misdirection Against Model-Guided Automated Attacks on Agentic AI Systems
This paper, published on arXiv, presents a new analysis of defensive techniques against automated attacks on agentic AI systems—AI that can autonomously take actions. It specifically examines how "...
Read analysis →
arXiv: Image Encryption Algorithm Based on Convolutional Neural Networks and Dynamic S-Box Generation
This publication from arXiv presents a novel image encryption algorithm that integrates convolutional neural networks with dynamic S-box generation. While not a regulatory change itself, it signals...
Read analysis →
arXiv: Multi-View Decompilation for LLM-Based Malware Classification
This paper, published on arXiv, presents a novel technical approach for classifying malware using large language models (LLMs) through a process called multi-view decompilation. Rather than a regul...
Read analysis →
arXiv: LLM agent safety, multi-turn red-teaming, jailbreak benchmarks, adversarial robustness, safety-critical systems
This paper, published on arXiv, presents a new framework for evaluating the safety of large language model (LLM) agents, specifically focusing on "multi-turn red-teaming" and adversarial robustness...
Read analysis →