ISO/IEC 27001:2013 certificates expire today
31 Oct 2025
The three-year transition to ISO/IEC 27001:2022 has ended; certificates against the 2013 edition are no longer valid.
Insights that apply internationally, including most vulnerabilities, threats, and international standards.
The three-year transition to ISO/IEC 27001:2022 has ended; certificates against the 2013 edition are no longer valid.
The revised ISO/IEC 27701 can now be implemented and certified independently of ISO/IEC 27001.
Security vendor F5 says a nation-state actor had long-term access to its systems and stole BIG-IP source code and vulnerability information.
ISO and IEC publish the third edition of ISO/IEC 27018, aligned to ISO/IEC 27002:2022, for protecting PII in public clouds.
OpenAI releases GPT-5 to ChatGPT users, describing it as its most capable model and bringing reasoning to its default experience.
Attackers exploit a zero-day flaw in on-premises Microsoft SharePoint servers, known as ToolShell, with hundreds of organisations reported compromised.
The Global Cross-Border Privacy Rules Forum launches its Global CBPR and PRP certifications, a new mechanism for international data transfers.
The future-dated requirements in PCI DSS v4.0 become mandatory, including targeted risk analyses, wider MFA and payment page script controls.
Hackers steal around US$1.5bn in Ethereum from Dubai-based exchange Bybit, a theft the FBI attributes to North Korea.
Chinese start-up DeepSeek’s R1 reasoning model tops app download charts and triggers a record one-day fall in Nvidia’s market value.
The Nobel prizes in physics and chemistry go to work underpinning modern AI, including neural networks and AlphaFold’s protein structure prediction.
The Wall Street Journal reports that the Salt Typhoon group had penetrated major US telecoms firms, including systems used for court-authorised wiretaps.