Policy & Regulation — Page 8
CISOs Are Now Running Business Resilience. Most Companies Haven't Noticed.
Security chiefs are quietly absorbing responsibility for keeping companies alive after a disaster, not just preventing one. Three experienced practitioners explain what that shift actually demands.
GitHub and PyPI Add Waiting Periods to Slow Down Supply-Chain Attacks
Dependabot now waits three days before pulling in new package versions, and PyPI blocks file uploads to releases older than 14 days.
Boards Do Care About Cybersecurity. They Just Don't Understand It.
Security chiefs and company directors want the same thing. A language gap between them is leaving organisations dangerously exposed.
Europol Pulls 4,340 Links Tied to 'The Com' Extortion Network
A nine-country push targets an online ecosystem that grooms minors, spreads violence manuals, and has been linked to ransomware attacks on Marks & Spencer and Las Vegas casinos.
Australian Regulator Fines TAB $2.7 Million for Spam and Telemarketing Breaches
Tabcorp's gambling brand ignored Do Not Call registrations and unsubscribe requests at scale. It has now paid more than $2.7 million in penalties, and the regulator says the failures point to deep problems inside the company's compliance systems.
FedRAMP is scrapping the annual audit. Here's what 20X actually changes.
The old federal cloud approval process runs on PDFs and once-a-year checks. The replacement wants live proof that your controls are working, all the time.
Brussels fines Google €2.95 billion... no wait, another €890 million, this time over Search and Play Store
The European Commission says Google broke the Digital Markets Act by pushing its own shopping and hotel results, and by blocking app developers from pointing users to cheaper deals outside the Play Store.
US Agencies Warn That Iranian Hackers Are Targeting Industrial Control Systems Made by Siemens, Schneider Electric, and Rockwell Automation
An updated federal advisory names the specific techniques used to break into programmable logic controllers, the computers that run factories, water plants, and power grids.
Brisbane Medical Clinic Took Three Months to Tell Patients Their Emails Were Read by Hackers
GO2 Health notified the regulator in May but did not warn affected patients until July, reviving the debate about whether Australia's 30-day disclosure rules protect the right people.
GitHub Slashes Public Bug Bounty Payouts, Reserves Top Rewards for VIPs
From July 27, 2026, GitHub is cutting what it pays public researchers for security finds, while keeping the largest rewards for an invite-only group.
Your Bank May Be Sending Your Loan Details to TikTok Without Knowing It
New research finds that tracking tools baked into banking websites are quietly forwarding customers' personal and financial data to advertising platforms, sometimes before anyone clicks 'accept cookies'.
Microsoft sets a hard stop for Exchange 2016 and 2019 security fixes
After October 2026, on-premises Exchange 2016 and 2019 servers get no more patches, even for customers paying for extended support.
Ten things every security chief needs to know before reporting directly to the CEO
More chief security officers are earning a direct line to the chief executive. The skills that got them there aren't always the ones that will keep them there.
Child safety experts warn of global surge in 'sadistic online exploitation' of teenagers
Predators are using social media platforms and online games to coerce vulnerable children into producing sexual images and videos of themselves. The phenomenon is growing fast, and parents need to know what it looks like.
Australia Plans Strict Rules on AI in Government Decision-Making
Canberra is drawing up binding requirements for how federal agencies use automated decision tools, with fairness, accuracy and transparency at the centre of the framework.