Legislation, enforcement and the politics behind Europe's digital rulebook, from the AI Act to platform regulation.
eMudhra, one of India's few root certificate authorities recognized by major browsers, is abandoning its SSL/TLS certificate operations following a security failure that exposed eight intermediate certificates with dangerously weak cryptographic keys.
EU lawmakers united on international AI cooperation but divided over whether Europe should tighten rules or prioritize industry competitiveness. The debate also reignited calls to revive a shelved liability directive.
A New Mexico court has ordered Meta to pay $25 billion for privacy violations stemming from the Cambridge Analytica scandal, after a jury found the company broke state law 43 million times.
On 21 October, public websites in the Netherlands, Finland and elsewhere shut down temporarily after two severe vulnerabilities in PHP triggered urgent patching efforts across government agencies.
The EU's Digital Services Act gave researchers a legal pathway to study social media platforms, but compliance remains patchy. As AI systems grow more powerful and opaque, a similar framework for independent research is urgently needed—yet remains absent.
EDRi and civil liberties groups are marking Global Encryption Day on 21 October 2026 with campaigns across European capitals, as surveys show strong public support for private communications—and as police and intelligence agencies push for backdoors.
A holding company that took over 23andMe's operations has agreed to settle with California over inadequate safeguards that allowed a 2023 breach affecting nearly 7 million customers' genetic information.
The Hong Kong software maker acknowledged that hackers compromised its update servers for months, but has yet to identify or contact infected customers, despite warnings from security researchers.