News & insights
The latest news, insights, and updates on information & cyber security, privacy, and AI governance from Taylor Baines.
Get the latest threats, vulnerabilities, and legal, standards, and AI updates in your inbox every Monday.
Get our weekly insights by email
Welcome to our new website
Our new website is live, with clearer service information, a dedicated AI governance page, and a much bigger news and insights section.
PCI SSC publishes new key management standard and Secure SLC v2.0
The PCI Security Standards Council has published a new Key Management and Operations Standard, Secure Software Lifecycle Standard v2.0, and guidance on AI systems.
Threat and vulnerability round-up: week ending 27 September 2026
Citrix NetScaler and Check Point VPN flaws under active attack, a WordPress core fix, a SharePoint exploit, and an Apple zero-day.
NIST releases draft update to its OT security guide (SP 800-82 Rev. 4)
NIST has published the initial public draft of SP 800-82 Rev. 4, its guide to operational technology security, for comment until 30 November 2026.
EDPB adopts new guidelines on calculating GDPR fines
The EDPB has adopted Guidelines 04/2026 on administrative fines, replacing the 2017 guidelines, and finalised its DSA–GDPR guidelines.
Parliamentary committee calls for a UK AI Bill and regulator
The Joint Committee on Human Rights has called for dedicated AI legislation, a new AI regulator, and transparency when AI affects significant decisions.
Cyber Resilience Act: vulnerability and incident reporting begins
Manufacturers must now report actively exploited vulnerabilities and severe incidents under the EU Cyber Resilience Act.
Australian police arrest two over TeamPCP supply-chain hacks
Australian Federal Police arrest two men in Perth over the TeamPCP hacking spree that compromised open source tools to steal credentials from over 1,000 organisations.
CISA says hackers targeted more than 100 US water systems
CISA confirms attacks on over 100 internet-exposed US water and wastewater systems in July 2026, which US officials believe were likely Iranian.
EU e-Evidence Regulation now applies
EU authorities can now issue European Production and Preservation Orders directly to service providers.
California data brokers must begin processing DROP deletion requests
Registered California data brokers must now retrieve and act on consumer deletion requests submitted through the state’s DROP platform.
ISO/IEC 27017:2026 cloud security standard published
ISO and IEC publish the second edition of ISO/IEC 27017, updating cloud security controls to align with ISO/IEC 27002:2022.