These news items are automatically aggregated from industry sources and are not individually reviewed. Any inaccuracies are unintentional — let us know and we'll correct or remove it.
ENISA’s NIS360 report, published 28 May 2026, shows measurable cybersecurity maturity gains across EU critical sectors under NIS2. Banking, electricity, and telecoms lead the rankings. Healthcare, maritime transport, railways, public administration, and space infrastructure remain in the risk zone, where cybersecurity maturity falls below the level their criticality demands.
From 11 September 2026, manufacturers of any product with digital elements sold in the EU must report actively exploited vulnerabilities within 24 hours and serious cybersecurity incidents to a central European platform. With just over three months to go, many software and hardware vendors are unprepared for the new obligation and its significant penalties.
The European Commission has launched Digital Markets Act market investigations into Amazon Web Services and Microsoft Azure, aiming to conclude by November 2026. In the same period, the Commission awarded a €180 million six-year cloud contract to four European providers as part of its digital sovereignty strategy. Both moves signal a decisive shift in how Brussels intends to govern the European cloud market.
Black Duck’s 2026 Open Source Security and Risk Analysis, covering 947 codebases across 17 industries, found that average vulnerabilities per codebase jumped 107% year-over-year. AI-assisted development is the primary driver: tools that help teams write more code faster are also pulling in substantially more open source components – up 30% – and with them, far more inherited risk. Eighty-seven percent of audited codebases contained at least one vulnerability, and only 24% of organisations perform comprehensive evaluations of AI-generated code.
On 29 May 2026, a severe thunderstorm caused simultaneous utility power loss across multiple Azure West US 2 datacentre buildings. Backup generators activated but failed to fully synchronise under the sudden load surge, and thermal protection mechanisms shut down others as cooling systems lost power. Services including AKS, Azure SQL, Redis, Virtual Machines, and Storage were affected for approximately fifteen hours. The incident is a textbook case for why single-region cloud deployments carry operational risk no amount of internal redundancy can fully eliminate.
AWS launched Kiro Web into public preview this week, making its spec-driven AI development environment available through any browser without a desktop install. The browser interface is the only place where Kiro’s autonomous mode is currently available, and credits run at half the standard rate during the preview period ending today.
A logic flaw in Gitea’s container registry API (CVE-2026-27771, CVSS 8.2) let unauthenticated users pull private container images from more than 30,000 deployments across 30 countries. The vulnerability went undetected for nearly four years and also affects Forgejo forks. Upgrade to Gitea 1.26.2 immediately.
Verizon’s 2026 Data Breach Investigations Report, based on more than 22,000 confirmed breaches, finds that exploiting unpatched software flaws (31%) has overtaken stolen credentials as the top way attackers get in – the first time in the report’s 19-year history. Third-party supply chain breaches jumped 60%, and AI is compressing attack timelines from months to hours.
The FBI issued a FLASH alert on May 26 warning that the Silent Ransom Group has escalated its extortion campaign against U.S. law firms by physically sending operatives into office buildings under the guise of IT support. More than 38 firms have already had data published on the gang’s leak site, with total confirmed attacks exceeding 100.
Vercel released deepsec in early May 2026 as an open-source, CLI-first security harness that uses AI coding agents to surface hard-to-find vulnerabilities across large codebases. It runs on your own infrastructure, scales to thousands of concurrent sandboxes, and integrates directly into existing DevOps workflows.
Our team of experts is ready to help you with your infrastructure challenges. We’ll give you honest and personal treatment. Get in touch to learn more.
Get in touch!