AI Act, DORA and CRA: What Changed in 2026, What Comes in 2027
New AI deadlines, live product reporting and operational guidance reshape the work organisations need to finish before 2027.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Magento Loader Changes Expose Retained Access
Investigate retained access.
Exploited ESX Flaw Can Hide Privileged Activity
Some privileged actions can escape the audit trail.
UpdraftCentral Revocation Still Needs a Local Check
Verify keys and earlier intrusion.
Arista VCO Attacks Call for Investigation
Upgrade and investigate.
Brotli Attacks Raise the Stakes for Node.js
Check untrusted input and the runtime processing it. Available upstream fixes do not settle every product’s package status.
October Node.js Fixes Reach Beyond Brotli
Ten flaws, three security releases and the checks that show whether an application is running a corrected build.
Palo Alto Confirms PHP2Shell Attacks as Patch Routes Expand
Palo Alto Networks has corroborated PHP2Shell attacks on PAN-OS. Match the right appliance fix, preserve evidence and keep WordPress observations in scope.
Commvault CVFS Needs Its Own Update Receipt
A completed task is not an accepted result. Give the receiving owner something concrete to verify.
Juniper’s Critical Patch
A runbook that separates the planned image from the service that is actually running.