January 2026 Patch Tuesday: what Security and IT teams should prioritise
January 2026 Patch Tuesday covers 63 approved patch records and 156 unique CVEs across Microsoft, Adobe and SAP.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Somalia’s Data Protection Act Now Has Operating Regulations
Somalia's 2026 regulations turn the 2023 Data Protection Act into a more operational regime for registration, supervision and breach response.
The EU Data Act Is a Cloud-Exit Law as Much as an IoT Law
The EU Data Act, effective from 12 September 2025, grants users rights to access and share data from connected products, aiming to enhance data portability and interoperability. It imposes new requirements on cloud service providers to facilitate easier switching and data extraction, fundamentally altering infrastructure and user access dynamics.
Uruguay Created a Legal Path for AI Regulatory Sandboxes
Uruguay's Decree 276/025 creates governed test environments and data spaces for innovative projects, including AI and data uses.
December 2025 Patch Tuesday: what Security and IT teams should prioritise
December 2025 Patch Tuesday covers 86 approved patch records and 211 unique CVEs across Microsoft, Adobe and SAP.
Mexico Ended Anonymous Mobile Lines Without Building a Central Registry
Mexico's mobile-line identification rules require operators to link active numbers to verified people or organisations before the June 2026 deadline.
India’s DPDP Act Is a Staged Countdown, Not One Compliance Date
India notified the Digital Personal Data Protection Rules and the Act’s commencement schedule in November 2025. The result is not a single start date but a sequence extending into 2027. India enacted the Digital Personal Data Protection Act in August…
November 2025 Patch Tuesday: what Security and IT teams should prioritise
November 2025 Patch Tuesday covers 105 approved patch records and 103 unique CVEs across Microsoft, Adobe and SAP.
Singapore Now Regulates the Cloud Behind Critical Services
Singapore’s amended Cybersecurity Act expands oversight beyond traditional critical infrastructure and recognises that essential services may depend on virtual systems, cloud providers and data centres. Key provisions of Singapore’s Cybersecurity (Amendment) Act commenced on 31 October 2025. The original Act…
Egypt’s Data Protection Law Finally Has Operating Rules. The Clock Ends in November 2026.
Egypt's long-awaited executive regulations have turned its 2020 privacy statute into an operational licensing, transfer and breach-response regime.