For the better part of a decade, doing business under EU digital law has been challenging, with DDPR, ePrivacy updates, the NUS2 Directive, the AI and Data Acts, and others coming in rapid succession. For organizations already investing heavily in compliance frameworks like CMMC, the prospect of layering on yet another set of requirements has been a frustrating layer of work.

The Digital Omnibus, formally proposed by the European Commission in November 2025 and now working its way through the European Parliament and Council, is a sweeping effort to align overlapping definitions, consolidate reporting obligations, and bring coherence to what the Commission itself has acknowledged is regulatory “clutter.” 

For companies that have already built compliance architectures, this Omnibus can help make cross-regulation compliance that much easier. 

Read More

We’re reaching the end of 2025, and looking ahead to 2026, most experts are discussing the latest threats that will shape the year ahead. This year, we’re seeing a new, but not unexpected, shift to autonomous threats driven by state-sponsored actors and AI. 

With that in mind, a new generation of threats, broadly known as autonomous malware, is beginning to reshape how organizations think about cyber risk, detection, and response. These threats don’t behave like the malware that defenders have spent decades learning to identify, and that’s got experts preparing for the new threat landscape. 

This article explains what autonomous malware is, why it matters now, and what experts should watch as these threats evolve.

Read More

A recent exploit involving a new AI-focused browser shone a light on a critical problem–namely, that browser security is a constant issue, and AI is just making that threat more pronounced. Attackers discovered a way to use that browser’s memory features to implant hidden instructions inside an AI assistant. Once stored, those instructions triggered unwanted actions, such as unauthorised data access or code execution.

The event itself is concerning, but the larger lesson is even more important. The line between browser and operating system continues to blur. Every added function feature brings convenience, but also increases the potential attack surface.

For organisations where security and compliance define daily operations, that expansion demands more scrutiny than ever.

Read More