News & insights
The latest news, insights, and updates on information & cyber security, privacy, and AI governance from Taylor Baines.
Get the latest threats, vulnerabilities, and legal, standards, and AI updates in your inbox every Monday.
Get our weekly insights by email
SEBI issues Cybersecurity and Cyber Resilience Framework
India’s securities regulator SEBI issues CSCRF, standardising cyber security controls across regulated entities.
NIST publishes first post-quantum cryptography standards
NIST publishes FIPS 203, 204 and 205, the first finalised post-quantum cryptography standards.
South Korea unveils roadmap to relax financial network separation
Korea’s Financial Services Commission announces a phased roadmap easing network separation rules to allow cloud, SaaS and generative AI use.
Illinois amends BIPA to limit damages
Illinois has amended its biometric privacy law so that repeated collection of the same biometric data counts as a single violation.
EU AI Act enters into force
The world’s first comprehensive AI law enters into force, with obligations phasing in from February 2025.
NIST publishes a Generative AI Profile for the AI RMF
NIST AI 600-1 identifies risks unique to or exacerbated by generative AI and suggests actions to manage them.
Faulty CrowdStrike update crashes millions of Windows computers
A defective CrowdStrike Falcon update crashes around 8.5 million Windows devices, grounding flights and disrupting hospitals, banks, and broadcasters.
Vehicle cyber security rules now apply to all new vehicles in the EU
UN Regulations 155 and 156 become mandatory for all new vehicles registered in the EU, extending beyond new vehicle types.
IACS cyber resilience requirements apply to new ships
IACS Unified Requirements E26 and E27 on cyber resilience now apply to ships contracted for construction from 1 July 2024.
CIS Controls v8.1 adds governance
CIS releases Controls v8.1, adding a Govern security function and aligning with NIST CSF 2.0.
US Commerce Department bans Kaspersky software
The US has prohibited Kaspersky from selling antivirus and cybersecurity products in the US, with software updates banned from 29 September 2024.
Haulmont Technology recertified to ISO 27001
Haulmont Technology has successfully completed its first ISO 27001 recertification.