Policy & Regulation — Page 10

Five Government Agencies Tell Software Makers: Open a Front Door for Bug Reporters
CISA and four allied agencies have published a joint guide urging tech companies to set up formal programmes so security researchers can safely report flaws before criminals find them first.

China's Military Is Quietly Banning Its Own Cybersecurity Companies
Chinese armed forces are shutting some of the country's biggest cybersecurity firms out of military contracts, and the reason has nothing to do with bad software.

Australia Logged 2,000 Sextortion Complaints in Six Months. Big Tech Still Isn't Scanning for the Scripts.
Australia's online safety watchdog says the same blackmail messages keep appearing across platforms, and most major tech companies still aren't using the detection tools that already exist.

Europe's Cyber Threat Picture Looks Nothing Like America's. The Numbers Prove It.
Business email scams hit 81% of reported incidents in Germany and the Benelux region. Europe absorbs nearly half of all global denial-of-service attacks. A new wave of ransomware gangs is arriving. The regulatory rulebook is entirely different, too.

The US Blocked Britain's AI Access. Now the UK Wants Its Own.
A temporary American export ban on two Anthropic AI models has pushed the UK government to announce a homegrown 'Cyber Shield' and question how much it can rely on US technology.

CISA and NSA Publish Playbook for Working With Outside Bug Hunters
New joint guidance urges software makers and online services to set up formal channels for security researchers, with clear rules, CVE assignments, and the option to lean on national response teams.

White House Launches 'Gold Eagle' to Speed Up Vulnerability Fixes Across Critical Infrastructure
A new government programme pairs open-source software maintainers with power grids, hospitals, and other critical operators to find and patch security flaws faster, with AI doing much of the sorting work.

Nigeria's Fraud Losses Keep Climbing Even as Reported Incidents Fall
Fewer fraud cases are being recorded in Nigeria, but each one costs more. A new cybersecurity framework is coming; whether enforcement will follow is the real question.

Tech Giants Failing to Stop Online Sexual Extortion of Young Men, Australian Regulator Warns
Australia's online safety watchdog reviewed Apple, Meta, Google and others and found serious gaps in how they handle child exploitation and sextortion complaints, even as reports keep climbing.

Three States Write the Rules on Powerful AI Before Washington Does
Illinois, New York and California have passed disclosure laws covering the most advanced AI systems. The patchwork will cost companies money and leave ordinary users with questions nobody has answered yet.

Microsoft trials an ad-free Windows Search for Insiders
The refreshed search bar prioritises your files and apps over Store promos and web suggestions, and adds a toggle to switch them off entirely.

US Treasury Sanctions VPN Provider Accused of Selling Cover to Ransomware Gangs
OFAC hits 1VPNS, its Ukrainian operator, and a malware cryptor seller, accusing them of helping ransomware crews attack American victims.

Pentagon Hits Pause on Contractor Cybersecurity Checks, Citing Too Few Auditors and Too Much Red Tape
The Defense Department is suspending the second phase of its main cybersecurity certification programme for a 60-day review, leaving smaller defence suppliers in a holding pattern.

The Two-Speed SOC: Why Autonomous AI and Analyst Copilots Need Different Guardrails
A design question inside a Fortune 50 security team points to a bigger governance gap for AI in the security operations centre.

EU and UK Hit Russian Spy Hackers With Joint Sanctions
Brussels and London name GRU and FSB officers behind years of cyberattacks on European power grids, government networks and elections.