Framework
NIST Cybersecurity Framework
22 stories in the last 90 days≈ $220.3M in fines tracked (2 actions)Latest story 23 hours ago
Official text: NIST Cybersecurity Framework
General Motors will pay $220 million to settle a lawsuit by 36 state attorneys general alleging unlawful sale of driver‑behavior data to third parties.
1 source · trade press
The FTC has subpoenaed nine food‑delivery, airline and ride‑sharing companies to provide detailed information on how personal data drives consumer pricing and employee compensation.
1 source · trade press
A leak of more than 41,000 DHS employee personal and work details was traced to a compromised Okta single sign‑on system earlier this year.
1 source · trade press
The National Institute of Standards and Technology released a document outlining how agencies should focus PQC rollout for their most critical systems ahead of the 2031 federal transition deadline.
1 source · trade press
The Fourth Circuit panel ruled that West Virginia’s Daniel’s Law violates the Constitution, invalidating the statute.
1 source · trade pressThe 2026 UK budget signals a review of who should be held responsible when software products cause cyber incidents, moving beyond voluntary security codes.
1 source · trade pressNIST IR 8547 provides recommendations and a phased timeline for federal agencies to adopt post‑quantum cryptographic algorithms.
1 source · trade press
CISA added the PHP flaws to its Known Exploited Vulnerabilities list and gave agencies a short window to apply patches.
1 source · trade press
The Cybersecurity and Infrastructure Security Agency published a new strategy outlining priorities, initiatives, and coordination mechanisms to enhance the security of U.S. critical infrastructure.
1 source · officialOn 7 October 2026 the FFIEC reminded banks that Microsoft ended Windows XP support on 8 April 2014, raising security risks.
1 source · trade press
NIST issued draft SP 800‑100r1 for public comment, inviting feedback on the revised guidance for information protection and privacy.
1 source
On 20 October 2026 NIST published IR 8536, a meta‑framework that standardises secure, interoperable supply‑chain traceability without exposing trade secrets.
1 source
NIST opened public comment on a draft CSF 2.0 profile for O-RAN deployments in federal agencies; comments close on 2 November 2026.
1 source · official
NIST opened comments on draft SP 800‑38Er1, updating XTS‑AES guidance to reference IEEE 1619‑2025, with key‑scope limits and a comment deadline of 16 October 2026.
1 source
NIST opened public comment on the SP 800-185 revision adding streaming interfaces for XOF functions; comments are accepted until 7 December 2026.
1 source