The Bankruptcy Notice Outage Shows Federal Cyber Risk Now Sits in the Contractor Supply Chain
A cyberattack on BAE Systems froze bankruptcy noticing nationwide. The lesson is contractor resilience, not new mandates written after the fact.
2026-10-20Latest Analysis
US
cybersecurity
The Stripchat Ruling Gives Brussels Latitude on User Counts, but the DSA's Threshold Still Lacks a Measurement Standard
The General Court upheld Stripchat's VLOP designation, ruling the Commission may reject a provider's own user counts. No...
A 'Voluntary' State Anti-Fraud App Is Only Voluntary Until Someone Else Makes It a Condition of Entry
China's new anti-fraud AI app is optional on paper. The older National Anti-Fraud Center app shows how optional state ap...
Germany's Under-13 Social Media Plan Is Defensible as a Stopgap, but Only if Age Checks Don't Become Identity Checks
Berlin's cabinet outline would bar under-13s from social networks until EU rules arrive, but enforcement rests on a wall...
IBM's 'Digital Swaraj' Pitch Shows Sovereignty Is Moving From Data Location to Operational Control, and India Should Keep That Choice Open
IBM's MoU with MeitY Startup Hub and its 'Bharat Core' stack treat sovereignty as operational control. India's light-tou...
Serbia's Spyware Cases Show the EU's Safeguards Stop at Its Borders, and Candidate States Need Enforceable Conditions
Pegasus infections days before Serbia's 25 October vote expose a gap: EU spyware safeguards bind members, not candidates...
WhatsApp's Contempt Loss Against NSO Exposes the Evidence Gap in Private Spyware Enforcement
A judge refused to hold NSO in contempt because Meta withheld how it detected 23 suspect accounts. Courts alone cannot p...
India's Supreme Court Is Right to Fine Platforms Over CSAM and Right to Refuse Age-Gating, but a Two-Hour Clock Needs Safeguards
The Court's CSAM framework swaps all-or-nothing safe harbour for fines and a shared hash database, while rejecting a chi...
Kenya's Digital Trade Hub Ambition Will Be Decided by Whether Its Payments Bill Enables Cross-Border Commerce or Polices It
Kenya's trade chief wants an African digital trade hub, but the draft National Payment System Bill could decide whether ...
Egypt's SIM Crackdown Is Right to Punish Insiders, but Mass Re-Verification and Biometrics Shift the Risk onto Citizens
After 18 arrests and a prosecution referral of all four operators, Egypt's NTRA is re-verifying millions of lines; the f...
Russia's Draft Budget Doubles TSPU Funding, Locking In a Censorship Cost That Falls on Ordinary Users
Russia's 2027–2029 draft budget nearly doubles annual funding for the TSPU filtering network, paying to enforce a VPN cr...
NIXI's chalosansad.in Suspension Shows Why a Domain Registry Needs a Notice-and-Hearing Rule Before It Can Silence a Site
Delhi High Court has issued notice over NIXI's no-notice suspension of a NEET protest site; four shifting reasons show ....
AdFection Shows Spyware Now Rides the Ad Exchange, So Regulate the Bid Stream, Not Just the Vendors
Citizen Lab's AdFection report shows Candiru-linked ads targeted Al Jazeera devices via mainstream exchanges. Fix the ad...
Quebec's Bill 109 and Ottawa's Streaming Retreat Show Canada Has No Coherent Streaming Policy
As Washington targets Quebec's French-content law, Ottawa is dropping its own CRTC levy. Canada risks a policy that cult...
DOT's AV Strategy Pushes Data Sharing Between States While Leaving Passenger Privacy to the FTC
DOT's non-binding AV strategy promotes cross-state data sharing and keeps crash reporting, but is silent on in-cabin cam...
Saudi Arabia's AI Framework Should Codify Its Soft-Law Ethics Principles With Proportionate, Risk-Based Duties
Riyadh hosted UNESCO's AI ethics forum without an AI statute; a proportionate, risk-based law could turn its voluntary e...
South Africa Should Close RICA's Bulk-Registration Gap Before Mandating Biometric SIM Checks
A former Vodacom risk chief wants facial SIM verification. The narrower fix, accountable distributors and tighter sectio...
Nigeria's IMEI Type Approval Check Is Defensible Only If It Stays Confined to Device Identification
The NCC's device verification framework enforces an existing law and says it will not monitor communications. Its credib...
Bangladesh's Direct-to-Cell Approval Shows Light-Touch Licensing Works, but Interception Rules Need Statutory Limits
BTRC's approval of Banglalink's Starlink Direct-to-Cell service extends coverage to seas and hills without new towers. S...
Diia's Digital Europrotocol Shows Narrow, Rules-Based Automation Is the Right Way to Digitise Minor Accident Claims
Ukraine's Diia app now lets drivers settle minor two-car crashes without police or paper. A tightly bounded design is wh...
Pakistan's Khyber Pakhtunkhwa Emergency Does Not Excuse an Unexplained Internet Cut
A presidential emergency may satisfy Section 54(3), but the PTA and Interior Ministry still owe the public a stated lega...
The AI Task Force's Reporting Duty Rests on the FTC's Existing Powers, So It Needs Definitions First
The Super Intelligence Force wants labs to report rogue model behaviour but has not said what counts as an incident, how...
Vietnam's Cybersecurity Decrees Penalise Breached Providers Harder Than They Equip Them to Resist Ransomware
The unverified Rhysida claim against Mat Bao tests a regime heavy on log retention and localisation but thin on incident...
Italy's Garante Is Right That Platform-Work Rules Must Not Punish the Same Algorithm Twice
The Garante's opinion n. 624 on Italy's platform-work decree asks for a clause so GDPR and labour duties don't produce d...
Australia's Gaming Safety Report Shows Transparency Powers Work Best When Regulators Target Specific Design Gaps
eSafety's first look at Roblox, Minecraft, Fortnite and Steam finds uneven protections, and makes the case for targeted ...