These news items are automatically aggregated from industry sources and are not individually reviewed. Any inaccuracies are unintentional —
let us know and we'll correct or remove it.
The European Data Protection Board has launched its 2026 Coordinated Enforcement Framework action, with 25 national data protection authorities simultaneously auditing organisations across Europe for compliance with GDPR transparency and information obligations. Investigations are underway now, and any organisation processing personal data in Europe should treat this as an immediate review priority.
Microsoft Threat Intelligence disclosed a prompt injection flaw in the Claude Code GitHub Action that allows an attacker to steal CI/CD workflow secrets using a single crafted GitHub issue. Fixed in version 2.1.128, the case illustrates that AI agents processing untrusted content inside pipelines require a fundamentally different security model from traditional pipeline tooling.
At today’s WWDC 2026 keynote, Apple confirmed iOS 27, macOS 27, and a rebuilt Siri powered by Google Gemini routed through Private Cloud Compute. For European organisations, the announcements bring immediate MDM policy questions and longer-term implications under the EU AI Act.
Cisco has disclosed that CVE-2026-20245, a command injection flaw in Catalyst SD-WAN Manager, is being actively exploited in the wild. No patch or workaround is available, making this the seventh Cisco SD-WAN zero-day confirmed exploited this year. Organisations relying on Cisco SD-WAN for branch connectivity or hybrid cloud networking should act immediately.
The Netherlands’ national cyber agency reviewed multiple recent incidents and found that misconfigured cloud environments, not sophisticated intrusions, are increasingly the root cause of data breaches across European organisations.
NIS2 and DORA frameworks now treat email authentication as a mandatory security control for in-scope organisations. With only 10.7% of domains holding a strict DMARC reject policy, most European businesses are simultaneously non-compliant and exposed to spoofing attacks.
On 8 June the European Data Protection Supervisor, the German Federal Commissioner for Data Protection, and the Bavarian Data Protection Commissioner are bringing together lawmakers, regulators, and business representatives in Brussels to debate how the EU Digital Omnibus package reshapes the GDPR. For businesses, the debate signals that regulatory change is moving from proposal to politics.
Fortinet FortiGuard Labs has issued a formal Outbreak Alert for CVE-2026-3055, a critical memory overread in Citrix NetScaler ADC and NetScaler Gateway that targets SAML Identity Provider configurations. Patches have been available since March but thousands of appliances remain unpatched and are actively targeted.
GitLab 19.0, released May 21 2026, introduces a native Secrets Manager in public beta that scopes credentials per CI/CD job using the same RBAC controls already applied to code. The release also extends AI-powered Developer Flow across the full merge request lifecycle, automating reviewer feedback resolution, conflict handling, and oversized MR splitting without removing humans from the review process.
Security researcher Ammar Askar disclosed a zero-day in github.dev on June 2, 2026 showing how a single malicious link can steal a developer’s full GitHub OAuth token, granting read and write access to every repository they can reach. Microsoft applied a server-side mitigation the same day, but the vulnerability exposes a structural risk in browser-based development environments that every team using GitHub should understand.
This site uses cookies. By continuing to use this website, you agree to their use.
We’ll help you resolve your infrastructure challenges
Our team of experts is ready to help you with your infrastructure challenges. We’ll give you honest and personal treatment. Get in touch to learn more.
