News & insights
The latest news, insights, and updates on information & cyber security, privacy, and AI governance from Taylor Baines.
Get the latest threats, vulnerabilities, and legal, standards, and AI updates in your inbox every Monday.
Get our weekly insights by email
Information Commission secures changes from AI developers and turns to AI agents
The UK regulator says ten AI developers have changed how they handle personal data, and opens a call for evidence on the data protection risks of AI agents.
Urgent: Atlassian Data Center vulnerability under active attack
Atlassian Data Center flaw CVE-2026-21589 (Jira, Confluence, Bitbucket, and more) is being exploited: upgrade self-hosted instances now or restrict internet access.
Coupang challenges Korea’s record privacy fine in court
Coupang asks a Seoul court to cancel South Korea’s record ₩624.7 billion privacy penalties over its 2025 data breach.
Singapore passes Digital Infrastructure Bill for data centres and cloud
Singapore’s new law brings licensing, resilience duties, and incident reporting for large data centres and cloud providers.
European Commission proposes overhaul of European standardisation
The European Commission proposes faster standards development and free access to the harmonised standards that support EU law.
Threat and vulnerability round-up: week ending 4 October 2026
Citrix patches another exploited NetScaler flaw, FortiMail and Zammad zero-days are in KEV, and Star Blizzard and Warlock ransomware campaigns hit UK and European targets.
Urgent: Fortinet FortiMail vulnerability under active attack
Fortinet FortiMail flaw CVE-2026-104286 (CVSS 9.8) is being actively exploited: upgrade now, or disable IBE and restrict management access, then check for compromise.
Hackers steal data of nearly 3 million people from Pentagon HR system
The Pentagon’s Defense Manpower Data Center says attackers exploited a file-sharing flaw and stole personal data of over 3 million people between October 2025 and July 2026.
Connecticut privacy law amendments take effect
Amendments to the Connecticut Data Privacy Act, including a ban on selling precise geolocation data, take effect on 1 October 2026.
Introducing our threat and vulnerability intelligence feed
A free threat and vulnerability feed on our website, a weekly round-up every Monday, and the easiest way to get it all: our weekly insights email, with optional urgent alerts.
Urgent: Cisco Catalyst SD-WAN Manager vulnerability under active attack
Cisco Catalyst SD-WAN Manager flaw CVE-2026-76504 (CVSS 9.8) is under active attack: upgrade to a fixed release now, check logs for compromise, and restrict management access.
FTC investigates OpenAI, Anthropic, and METR over frontier AI risks
The US Federal Trade Commission opens an investigation into OpenAI, Anthropic, and the AI evaluator METR over the potential dangers of frontier AI.