SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Cyber Resilience Act (CRA) Stories

Global Stories

Cyber Resilience Act (CRA) stories

Anthropic limits Claude Mythos over AI hacking fears
DevOps

Anthropic limits Claude Mythos over AI hacking fears

Financial regulators are alarmed after Anthropic said Claude Mythos can uncover software flaws at machine speed, raising bank security risks.

By Kaleah Salmon • 5 min read • Last month
Cyber rules shift as geopolitics & AI reshape policy
Data Protection

Cyber rules shift as geopolitics & AI reshape policy

Companies face tougher, more fragmented compliance as governments tie cyber rules to national security, AI use and digital sovereignty.

By Catherine Knowles • 4 min read • Last month
Cloudsmith survey finds SBOM gaps before cyber law
DevOps

Cloudsmith survey finds SBOM gaps before cyber law

Most engineering teams could struggle to meet EU Cyber Resilience Act reporting deadlines, with many still handling SBOMs manually or only after incidents.

By Catherine Knowles • 4 min read • Last month
2N urges tougher cyber rules for access control devices
EduTech

2N urges tougher cyber rules for access control devices

New EU rules could force access control makers to prove stronger patching, sourcing and disclosure processes as cyberattacks rise.

By Shannon Williams • 5 min read • Last month
Red Hat survey finds cloud security incidents rife
Data Protection

Red Hat survey finds cloud security incidents rife

Red Hat survey finds 97% of organisations hit by cloud-native security incidents, forcing delays, higher costs and loss of customer trust.

By Shannon Williams • 4 min read • Wed, 25th Mar 2026
Red Hat finds cloud security incidents hit 97% of firms
Data Protection

Red Hat finds cloud security incidents hit 97% of firms

Red Hat reports 97% of organisations suffered cloud-native security incidents last year, exposing basic failings in configuration and governance.

By Kaleah Salmon • 5 min read • Tue, 24th Mar 2026
Cloudsmith adds controls to block risky dependencies
DevOps

Cloudsmith adds controls to block risky dependencies

Cloudsmith adds automated controls to quarantine and block risky dependencies, tightening enforcement on software supply chain security.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 24th Mar 2026
OpenSSF adds members, boosts AI & supply chain security
Virtualisation

OpenSSF adds members, boosts AI & supply chain security

OpenSSF adds new members and launches AI security, supply chain and training initiatives after securing USD $12.5 million in funding.

By Sofiah Nichole Salivio • 4 min read • Tue, 24th Mar 2026
Keysight unveils SBOM Manager to meet new cyber rules
Application Security

Keysight unveils SBOM Manager to meet new cyber rules

Keysight debuts SBOM Manager to automate software bills of materials as EU and US cyber rules tighten transparency and compliance demands.

By Shannon Williams • 4 min read • Fri, 20th Mar 2026
Open source dependencies leave apps dangerously exposed
Unified Communications

Open source dependencies leave apps dangerously exposed

Secure.com warns most apps hide critical flaws in open source components, as unpatched dependencies and licence risks leave firms exposed.

By Shannon Williams • 4 min read • Thu, 12th Mar 2026
Ransomware dominates UK cyber incidents, data loss surges
Data Protection

Ransomware dominates UK cyber incidents, data loss surges

Ransomware drives over half of UK cyber incidents as data loss surges, with healthcare, retail and complex supply chains hardest hit.

By Shannon Williams • 4 min read • Tue, 10th Mar 2026
NCC warns of rising cyber risks to connected farming
Agricultural Technology

NCC warns of rising cyber risks to connected farming

NCC warns that insecure connected farm machinery could let cyber attacks disrupt harvests, cut yields and threaten food supply chains.

By Shannon Williams • 4 min read • Thu, 5th Mar 2026
Xiid & Cytex link AI governance with zero trust access
Firewalls

Xiid & Cytex link AI governance with zero trust access

Xiid and Cytex join forces to fuse AI governance with zero trust access, targeting shrinking attack paths and stricter cyber regulation.

By Catherine Knowles • 4 min read • Sun, 15th Feb 2026
Industrial AI drives new approach to OT cyber security
Firewalls

Industrial AI drives new approach to OT cyber security

Industrial AI and IT/OT convergence are forcing factories to abandon closed networks and adopt hybrid, zero trust cyber security architectures.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 22nd Jan 2026
Codific sets 2026 priorities for boards on cyber risk
Data Protection

Codific sets 2026 priorities for boards on cyber risk

Codific urges boards to prioritise preemptive cyber defence, identity and supply-chain control as 2026 scrutiny and rules tighten.

By Shannon Williams • 5 min read • Tue, 13th Jan 2026

Stories from Other Regions

Cyber Resilience Act (CRA) stories

Umbraco secures ISO 27001 certification for CMS arm
Data Protection

Umbraco secures ISO 27001 certification for CMS arm

Umbraco's product arm wins ISO 27001/IEC:2022 certification, boosting security credentials for its open-source .NET CMS and partners.

By Mark Tarre • 3 min read • Wed, 28th Jan 2026
EU Cybersecurity Act revamp targets high risk vendors
Virtualisation

EU Cybersecurity Act revamp targets high risk vendors

Brussels moves to tighten EU cyber rules, targeting high risk foreign vendors while streamlining certification and boosting sovereignty.

By Shannon Williams • 4 min read • Fri, 23rd Jan 2026
Vincent Lomba joins ENISA group on EU cyber policy
Firewalls

Vincent Lomba joins ENISA group on EU cyber policy

Vincent Lomba joins ENISA's Advisory Group, bringing industry insight to EU efforts on NIS2, the Cyber Resilience Act and digital sovereignty.

By Sofiah Nichole Salivio • 3 min read • Wed, 21st Jan 2026