Security News. What Changed And Why.
Regulation, standards and official guidance, explained for security teams.
Security News DORA in 2026: what the ESAs say about year two What the ESMA and EIOPA pages say about DORA in 2026: scope, the six areas, technical standards, ESAs documents to 31 July 2026 and CTPP oversight. 
Security News Cyber compliance calendar 2026 and 2027: key dates Cyber compliance calendar for 2026 and 2027 from official pages: Cyber Resilience Act, EU AI Act, NIS2, post-quantum milestones and rules with no date yet. 
Security News Plan a 2027 security program with NIST CSF 2.0 Plan a 2027 security programme with NIST CSF 2.0: the six functions, Current and Target Profiles, Tiers and quick-start guides, as NIST words them. 
Security News Cyber incidents of 2026: lessons from official reports Cyber incidents of 2026 and lessons from official reports: CISA, the UK NCSC and CERT Polska on the npm, SD-WAN and Poland energy cases, as of… 
Security News Post-quantum migration milestones: NCSC and EU dates Post-quantum migration milestones from the UK NCSC (2028, 2031, 2035) and the European Commission (end of 2026, end of 2030), as the pages state them. 
Security News Post-quantum cryptography: NIST and CISA guidance in 2026 Post-quantum cryptography in 2026: what NIST and CISA pages say on FIPS 203, 204 and 205, the 2035 date in the IR 8547 draft, and inventory… 
Security News UK Cyber Security and Resilience Bill: status in 2026 UK Cyber Security and Resilience Bill status in 2026: what GOV.UK says on Commons stages, planned scope, 24 and 72 hour reporting, and no assent date. 
Security News Incident reporting deadlines: NIS2, CRA, SEC, CIRCIA Compare incident reporting deadlines from official pages: NIS2 and CRA 24 and 72 hours, SEC Form 8-K four business days, and where CIRCIA stands today. 
Security News CIRCIA final rule status in 2026: what CISA says CISA's CIRCIA page as of 9 Oct 2026: final rule still in progress, four June 2026 town halls, no effective date given, reporting not yet required. All 30 pages
Questions About Security News.
Last updated June 9, 2026-
Plain explanations of regulation, standards and official guidance, with the dates that matter, for security teams.
-
New items are added several times a month, newest first. Every item shows its date.
-
Security News explains rules, standards and official guidance. Threat Intelligence Researches holds Brandefense's own findings on live threats. The blog covers wider security topics.
-
The second version of the NIST Cybersecurity Framework, a public framework for organizing a security program. The NIST page is linked here.
-
The site feed at brandefense.io/feed/ lists new posts. The email sign-up box is on the All Resources and Reports pages.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
Yes. One item looks at DORA in 2026 using the ESMA and EIOPA pages. It covers the scope, the six areas, technical standards and oversight of critical third-party providers.
-
Yes. An item lists key dates for 2026 and 2027 from official pages. It covers the Cyber Resilience Act, the EU AI Act, NIS2, post-quantum milestones and rules that have no date yet.
-
The page lists 177 items. You can filter by year, from 2022 to 2026, and the newest items come first.
-
Security News has an item on cyber incidents of 2026 and the lessons in official reports. It draws on CISA, the UK NCSC and CERT Polska. It is written for security teams.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.