Global CBPR and PRP certifications go live
2 Jun 2025
The Global Cross-Border Privacy Rules Forum launches its Global CBPR and PRP certifications, a new mechanism for international data transfers.
Global
Insights that apply internationally, including most vulnerabilities, threats, and international standards.
PCI DSS v4.0 future-dated requirements become mandatory
31 Mar 2025
The future-dated requirements in PCI DSS v4.0 become mandatory, including targeted risk analyses, wider MFA and payment page script controls.
NIST publishes first post-quantum cryptography standards
13 Aug 2024
NIST publishes FIPS 203, 204 and 205, the first finalised post-quantum cryptography standards.
NIST publishes a Generative AI Profile for the AI RMF
26 Jul 2024
NIST AI 600-1 identifies risks unique to or exacerbated by generative AI and suggests actions to manage them.
IACS cyber resilience requirements apply to new ships
1 Jul 2024
IACS Unified Requirements E26 and E27 on cyber resilience now apply to ships contracted for construction from 1 July 2024.
CIS Controls v8.1 adds governance
25 Jun 2024
CIS releases Controls v8.1, adding a Govern security function and aligning with NIST CSF 2.0.
NIST Cybersecurity Framework 2.0 released
26 Feb 2024
NIST has released CSF 2.0, adding a new Govern function and broadening the framework to all organisations.
ISO/IEC 27001 and ISO 22301 amended to address climate change
23 Feb 2024
ISO has amended its management system standards, including ISO/IEC 27001 and ISO 22301, to require consideration of climate change.
ISO/IEC 42001:2023 published: the first AI management system standard
18 Dec 2023
ISO has published ISO/IEC 42001, the world’s first certifiable management system standard for artificial intelligence.
Countries sign Bletchley Declaration at first global AI Safety Summit
1 Nov 2023
The UK hosted the first global AI Safety Summit at Bletchley Park, where 28 countries and the EU signed a declaration on frontier AI risks.
23andMe user data stolen after credential stuffing attack
6 Oct 2023
Hackers used reused passwords to access 23andMe accounts and scraped ancestry data on about 6.9 million people.
Clop exploits MOVEit Transfer flaw in mass data theft campaign
31 May 2023
A zero-day in Progress Software’s MOVEit Transfer let the Clop gang steal data from thousands of organisations, including BBC, BA, and Boots.