Latest Articles

Three dates frame everything here. The RED’s cybersecurity rules went live last summer, on 1 August 2025. The Commission then published the act repealing them on 29 April 2026. That repeal takes effect on 11 December 2027, when the Cyber Resilience Act (CRA) takes over. That sounds like the problem is going away. It isn’t. […]

A CERT-In empanelled VAPT vendor is a security auditing firm officially vetted and listed by the Indian Computer Emergency Response Team under Section 70B of the IT Act. For regulated entities in India—such as banks, fintechs, and brokers governed by RBI, SEBI, or IRDAI—an audit report signed by an empanelled vendor is a mandatory legal […]

RGPD compliance is one of the core responsibilities of French enterprises that handle personal data. Being compliant with RGPD requires much more than simply adopting proper policies. You must safeguard personal data and have proper security controls. Gaps in these areas can expose sensitive data and lead to regulatory penalties. In January 2026, France’s data […]

In 2025, Singapore took part in a global operation that found attackers had infected more than 2,700 local devices, including residential routers, folding them into a botnet used to launch distributed denial-of-service attacks elsewhere. These weren’t exotic systems but just a toll on the smart building cybersecurity Singapore. They were the same class of connected […]

The Cyber Security Act malaysia turned cyber compliance from a business decision into a legal requirement for many Malaysian organisations. If you run systems that the country depends on, this law now applies directly to you. These organisations are called National Critical Information Infrastructure entities. The law covers eleven sectors: Government Banking and finance Transportation […]

Your customer data is sitting somewhere right now. Names, phone numbers, emails, maybe payment details. If someone gets in, the Personal Data Protection Department will ask hard questions. Customers will get angry. The average cost of a data breach in Malaysia is already around RM3.2 million. The legal fine is only part of it. Most […]

Every Singapore business researching cybersecurity certification eventually reaches the same fork in the road: Cyber Essentials or Cyber Trust, or CSA Cyber Essentials vs Cyber Trust Mark. Picking the wrong one wastes months. Either you over-prepare for a baseline you didn’t need, or you discover mid-application that your risk profile demanded the more rigorous framework all along. CSA […]

On July 22, 2026, CSA announced an updated Cybersecurity Code of Practice for CII. This marks something Singapore’s critical infrastructure sector has anticipated since 2022. For the first time, it includes a separate CCoP built specifically for cloud services. Minister Josephine Teo announced this update at the Operational Technology Cybersecurity Expert Panel Forum. The underlying […]

Medical devices are getting more connected every day. This makes them easier to use and manage. It also brings new risks. A cyberattack could change test results, make a device stop working, or put safety in danger. In Europe, the MDCG cybersecurity guidance helps medical device manufacturers understand how to address cybersecurity rules under the […]