News & insights
The latest news, insights, and updates on information & cyber security, privacy, and AI governance from Taylor Baines.
Get the latest threats, vulnerabilities, and legal, standards, and AI updates in your inbox every Monday.
Get our weekly insights by email
Urgent: Atlassian Data Center vulnerability under active attack
Atlassian Data Center flaw CVE-2026-21589 (Jira, Confluence, Bitbucket, and more) is being exploited: upgrade self-hosted instances now or restrict internet access.
Threat and vulnerability round-up: week ending 4 October 2026
Citrix patches another exploited NetScaler flaw, FortiMail and Zammad zero-days are in KEV, and Star Blizzard and Warlock ransomware campaigns hit UK and European targets.
Urgent: Fortinet FortiMail vulnerability under active attack
Fortinet FortiMail flaw CVE-2026-104286 (CVSS 9.8) is being actively exploited: upgrade now, or disable IBE and restrict management access, then check for compromise.
Hackers steal data of nearly 3 million people from Pentagon HR system
The Pentagon’s Defense Manpower Data Center says attackers exploited a file-sharing flaw and stole personal data of over 3 million people between October 2025 and July 2026.
Connecticut privacy law amendments take effect
Amendments to the Connecticut Data Privacy Act, including a ban on selling precise geolocation data, take effect on 1 October 2026.
Introducing our threat and vulnerability intelligence feed
A free threat and vulnerability feed on our website, a weekly round-up every Monday, and the easiest way to get it all: our weekly insights email, with optional urgent alerts.
Urgent: Cisco Catalyst SD-WAN Manager vulnerability under active attack
Cisco Catalyst SD-WAN Manager flaw CVE-2026-76504 (CVSS 9.8) is under active attack: upgrade to a fixed release now, check logs for compromise, and restrict management access.
FTC investigates OpenAI, Anthropic, and METR over frontier AI risks
The US Federal Trade Commission opens an investigation into OpenAI, Anthropic, and the AI evaluator METR over the potential dangers of frontier AI.
AI developers sign White House accord on superintelligence
Six major AI developers sign a voluntary White House accord promising internal controls, external audits, and board oversight of frontier AI risks.
California signs new AI laws as Connecticut’s AI act begins
California’s governor signs 13 AI bills, including human review of AI-driven dismissals, as the first parts of Connecticut’s AI Responsibility and Transparency Act take effect.
Ofcom expects hash matching against intimate image abuse from 30 September
Ofcom expects online platforms serving UK users to use hash matching, or equally effective measures, to stop illegal intimate images and deepfakes being shared from 30 September 2026.
The ICO becomes the Information Commission
The Information Commissioner’s Office is replaced by a board-led Information Commission under the Data (Use and Access) Act 2025.