Loading story…
Heather Lowrie of Resilionix and Marco Goldberg of EQS Group emphasize that compliance, especially with regulations like GDPR, should be seen as a catalyst for organizational change and resilience. They highlight the need for data-centric security, streamlined compliance platforms, and a global perspective to manage reputational and operational risks. U.S. organizations are cautioned against relying on fragmented legacy systems and urged to adopt proactive, integrated approaches to compliance.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Regulatory frameworks worldwide are fundamentally transforming how organizations approach cybersecurity, moving from basic compliance checklists to demanding demonstrable accountability and operational resilience. New standards such as the EU’s Digital Operational Resilience Act (DORA), the U.S. SEC’s enhanced disclosure rules, and the Department of Defense’s Cybersecurity Risk Management Construct (CRMC) are driving organizations to embed security into their core operations, require real-time awareness, and enforce transparent incident reporting. Financial services and critical infrastructure sectors are particularly impacted, with regulations mandating regular crisis management exercises, red-teaming, and cross-functional collaboration to ensure readiness against evolving threats. The complexity of compliance has increased, with organizations now required to simulate sophisticated cyber incidents, document threat scenarios, and provide evidence of secure-by-design principles. While these changes aim to improve resilience and reduce risk, they also introduce operational challenges, such as increased manual effort, higher costs, and the need for automation to streamline processes. Security leaders are urged to adapt to these evolving requirements, focusing on continuous compliance, embedded security, and transparent communication from technical teams to executive leadership.
Jul 12, 2026
Financial institutions are increasingly adopting regulatory technology (RegTech) to address the growing complexity and speed of financial crime. Recent academic research highlights a shift from manual, after-the-fact compliance controls to real-time, data-driven systems that enhance oversight and risk management. These technologies, including machine learning for customer behavior analysis and blockchain for secure digital identities, are transforming customer due diligence and Know Your Customer (KYC) processes, making compliance more proactive and adaptive to evolving criminal tactics. Simultaneously, the regulatory landscape for technology, particularly artificial intelligence and open source software, is tightening. The EU’s Cyber Resilience Act (CRA) and the AI Act are prompting organizations to embed secure development practices and compliance measures throughout their product lifecycles. Companies like Red Hat are implementing comprehensive internal programs to align with new regulations, emphasizing the need for international standards that support both security and innovation. These developments underscore a broader trend: compliance and security are becoming integral to technology development and deployment, not just afterthoughts or checklists.
Jul 12, 2026
Organizations are facing increasing pressure to align their email security and data protection practices with evolving compliance requirements. Regulatory bodies are moving beyond vague mandates and now expect organizations to implement concrete controls such as phishing simulations, Security Awareness Training (SAT), and DMARC enforcement to address the growing sophistication of phishing and business email compromise (BEC) attacks. The legal landscape is shifting, with auditors and cyber insurers scrutinizing whether organizations have taken sufficient steps to protect against email-based threats, and the absence of documented controls can result in significant legal and contractual risks, especially for Managed Service Providers (MSPs). Compliance is no longer a checkbox exercise; it requires demonstrable, proactive measures to secure email systems and train employees to recognize and respond to social engineering attempts. In parallel, the attestation of compliance has become a critical tool for organizations to prove their adherence to security standards and regulatory expectations. As data volumes increase and cyber threats become more complex, businesses of all sizes must not only implement robust security controls but also provide verifiable evidence of compliance to regulators, partners, and customers. Attestation of compliance helps organizations document their security posture, address both internal and external requirements, and build trust with stakeholders. Effective data security strategies now combine technological solutions such as encryption, access controls, firewalls, and antivirus tools with comprehensive policies and user training. The integration of compliance and security is essential, as regulators and insurers are no longer satisfied with minimal or outdated controls. Organizations that fail to meet these evolving standards risk financial penalties, reputational damage, and increased legal exposure. The convergence of security and compliance is particularly relevant for MSPs, who must ensure their service offerings reflect current best practices and regulatory expectations. Ultimately, the ability to demonstrate compliance through attestation and robust security controls is becoming a baseline requirement for operating in today's threat landscape.
Jun 29, 2026