The CRA Single Reporting Platform is live, and manufacturers now have 24 hours to report actively exploited vulnerabilities to EU CSIRTs.

The CRA Single Reporting Platform is live, and manufacturers now have 24 hours to report actively exploited vulnerabilities to EU CSIRTs.

The CRA Single Reporting Platform is live, and manufacturers now have 24 hours to report actively exploited vulnerabilities to EU CSIRTs.

The CRA Single Reporting Platform is live, and manufacturers now have 24 hours to report actively exploited vulnerabilities to EU CSIRTs.

Ce rapport mensuel agrège les données de cinq catalogues KEV (CISA, CIRCL, ENISA/EU CSIRTs, Shadowserver, Previdian) ainsi que les sightings issus de MISP, Exploit-DB, GitHub, Nuclei, Metasploit et d'autres sources pour couvrir l'activité de vulnérabilités en août 2026.

On 11 September 2026, the first substantive deadline under the Cyber Resilience Act (Regulation (EU) 2024/2847, "the CRA") will come into effect.

CSIRTs increasingly fine tune language models on vulnerability scan records, but these records expose internal network topology and create privacy risks under regulations such as GDPR and LGPD. We present the first empirical study of how DP SGD and HMAC pseudonymization interact when fine tuning sm…

CSIRTs increasingly fine tune language models on vulnerability scan records, but these records expose internal network topology and create privacy risks under regulations such as GDPR and LGPD. We present the first empirical study of how DP SGD and HMAC pseudonymization interact when fine tuning sm…

The APNIC Foundation and APNIC have entered into a strategic Memorandum of Understanding (MoU) to harmonise support for the regional Internet community, prioritising sustainable development and local ...

Staff Writer  Namibia Cyber Security Incident Response Team (NAM-CSIRT) represented Namibia at the 38th Annual Forum of Incident Response and Security Teams Conference (FIRST Conference), held from 14 to 19 June 2026 in Denver, Colorado, United States. The conference, convened under the theme “Peak Defense: Building Adaptive Systems for Modern Threats,” brought together global cybersecurity experts, Computer Security Incident Response Teams (CSIRTs), policymakers, and industry stakeholders to strengthen international cooperation and improve resilience against evolving cyber threats. NAM-CSIRT, which was admitted as a FIRST member in December 2025 and is also participating in the Suguru Yamaguchi Fellowship Programme, used the platform to engage with global peers on incident response, threat intelligence, and digital resilience. Ahead of the main conference, the delegation participated in the NAM-CSIRT meeting held from 12 to 13 June 2026, a forum for national CSIRTs to exchange operational experiences, tools, and strategies for strengthening cybersecurity at national and regional levels. During the meeting, Cornelia Shipindo, acting executive of NAM-CSIRT, served on the 2026 programme committee, contributing to the coordination of sessions and thematic discussions. At the main conference, she also took part in the FIRST Africa Regional Liaison Africa Breakfast session, which provided a platform for African cybersecurity professionals to share best practices and strengthen regional collaboration. She outlined NAM-CSIRT’s establishment journey, highlighting key milestones, challenges, and achievements in building Namibia’s national cyber incident response capability. NAM-CSIRT also contributed to a panel discussion titled “Tips and Tricks to Run a CSIRT in Low-Income and Fragile Contexts,” presented by cybersecurity specialist, Thank-You Hauwanga. The discussion focused on practical approaches to establishing and sustaining CSIRTs in resource-constrained environments, including minimum viable structures, use of open-source tools, stakeholder trust-building, and sustainable funding models. The team said its participation reflects Namibia’s commitment to strengthening national cybersecurity readiness, deepening international cooperation, and contributing to the global cyber resilience ecosystem.

**Staff Writer** Namibia Cyber Security Incident Response Team (NAM-CSIRT) represented Namibia at the 38th Annual Forum of Incident Response and Security Teams Conference (FIRST Conference), held from 14 to 19 June 2026 in Denver, Colorado, United States. The conference, convened under the theme “Peak Defense: Building Adaptive Systems for Modern Threats,” brought together global cybersecurity experts, Computer Security Incident Response Teams (CSIRTs), policymakers, and industry stakeholders to strengthen international cooperation and improve resilience against evolving cyber threats. NAM-CSIRT, which was admitted as a FIRST member in December 2025 and is also participating in the Suguru Yamaguchi Fellowship Programme, used the platform to engage with global peers on incident response, threat intelligence, and digital resilience. Ahead of the main conference, the delegation participated in the NAM-CSIRT meeting held from 12 to 13 June 2026, a forum for national CSIRTs to exchange operational experiences, tools, and strategies for strengthening cybersecurity at national and regional levels. During the meeting, Cornelia Shipindo, acting executive of NAM-CSIRT, served on the 2026 programme committee, contributing to the coordination of sessions and thematic discussions. At the main conference, she also took part in the FIRST Africa Regional Liaison Africa Breakfast session, which provided a platform for African cybersecurity professionals to share best practices and strengthen regional collaboration. She outlined NAM-CSIRT’s establishment journey, highlighting key milestones, challenges, and achievements in building Namibia’s national cyber incident response capability. NAM-CSIRT also contributed to a panel discussion titled “Tips and Tricks to Run a CSIRT in Low-Income and Fragile Contexts,” presented by cybersecurity specialist, Thank-You Hauwanga. The discussion focused on practical approaches to establishing and sustaining CSIRTs in resource-constrained environments, including minimum viable structures, use of open-source tools, stakeholder trust-building, and sustainable funding models. The team said its participation reflects Namibia’s commitment to strengthening national cybersecurity readiness, deepening international cooperation, and contributing to the global cyber resilience ecosystem.

Hello, this is Shihono from the Global Coordination Division. In early March, we traveled to Baku, the capital of Azerbaijan, and had the opportunity to visit five organizations, including CSIRTs and facilities involved in cyber security workforce development. In this article, I would like to introduce an overview of these visits. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%...

Known Exploited Vulnerabilitie - KEV Assertion Format Version: 1.0 Status: Draft (for Public Review) Date: 2026-01-03 Authors: GCVE Working Group BCP ID: BCP-07 This guide is distributed and available under CC-BY-4.0. Copyright (C) 2025-2026 GCVE Initiative. IntroductionKnown Exploited Vulnerabilities (KEVs) have become a critical signal for vulnerability prioritization, operational risk management, and policy-driven remediation. Governments, CSIRTs, and sectoral authorities increasingly rely on KEV lists to mandate patching, trigger incident response, or inform compliance decisions. However, existing KEV publications are largely list-based and opaque, often asserting exploitation without clearly expressing who made the claim, when exploitation was observed versus declared, what type of evidence supports it, where it was seen, or with what level of confidence. As KEV data is increasingly consumed by automated systems and cross-border information-sharing mechanisms, the absence of structured, contextual metadata limits interoperability, trust calibration, and analytical reuse.