Estonia’s cyber authority saw no state-sector PHP crisis as three state institutions shut or restricted services
Estonia's cyber authority said important state websites were protected from the PHP flaws. Over three days of announcements, the National Archives, the education ministry and the Institute of the Estonian…
5th Circuit reassigns Mississippi DEI case after judge’s orders cite fabricated parties, quotations and a nonexistent case
The 5th Circuit sent a challenge to Mississippi's DEI law to a new judge after finding fabricated parties, quotations and a nonexistent case in the district court's orders, alongside legal…
An AI agent can write the story, but EU law asks whether a human reviewed it
Italy's Redazione Zero publishes agent-written news under a banner saying no human reviewed it. Under Article 50(4) of the EU AI Act, a publisher's editorial responsibility alone does not lift…
After the ConnectWise breach, a firm’s GDPR clock may start before its Microsoft 365 logs can answer
Microsoft says some of Storm-0940's AI-driven attacks reached privileged cloud access within three hours. For firms reviewing their Microsoft 365 tenants after the ConnectWise compromise, the duty to act on…
AI changes the economics of hybrid threats but not their logic, Helsinki paper argues
A paper published Oct. 15 by Helsinki's European Centre of Excellence for Countering Hybrid Threats argues that artificial intelligence structurally alters existing hybrid threats while leaving their underlying logic intact.
AI recording spreads in Estonian health care as the regulator says the audio needs its own legal basis
Estonian providers are bringing AI into the consultation room. The country's data protection regulator says that, at least under its own practice, recording the conversation is not automatically covered by…
Latitude59’s four-country push puts startup deals in front of four data-protection laws
Latitude59's events in Singapore, Lusaka, Kampala and Nairobi run from Oct. 28 to Dec. 4, and each country has its own data-protection law. Kenya's small-firm registration exemption skips health, education…
Texas-Temu judgment limits China-based access to Texans’ data, enforced by audits Temu pays for
Texas wrote U.S. server ownership into its agreed judgment with Temu, but the posted text ties its $8 million penalties to failed annual audits by a firm Temu retains, and…
A warned Vilnius Starlink site puts CISA’s 3-day patch clock in context
Lithuanian officials say a Vilnius Starlink site was warned a day or two before an arson attempt, while in three of the five three-day rows in CISA's remediation table, the…
NIST, NSA and CISA guidance asks AI developers to preserve agent evidence for investigation but sets no retention clock
New voluntary practices from NIST, the NSA and CISA advise developers of highly capable AI agents to preserve weights, checkpoints and rejected tool calls when an agent takes "significant uninstructed…
