March 2025 Patch Tuesday: what Security and IT teams should prioritise
March 2025 Patch Tuesday covers 88 approved patch records and 123 unique CVEs across Microsoft, Adobe and SAP.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
DORA and Privileged Access: Why Admin Credentials Are a Resilience Issue
DORA is usually discussed in terms of risk frameworks, incident reporting and resilience testing. Those subjects matter, but many real attacks still succeed through something much simpler: an identity with more access than it should have. An administrator account is…
February 2025 Patch Tuesday: what Security and IT teams should prioritise
February 2025 Patch Tuesday covers 71 approved patch records and 123 unique CVEs across Microsoft, Adobe and SAP.
What the EU Cyber Solidarity Act Actually Builds
The Cyber Solidarity Act is not another enterprise compliance checklist. It builds shared European capacity to detect, prepare for and respond to large-scale cyber incidents. The EU Cyber Solidarity Act entered into force on 4 February 2025. It responds to…
January 2025 Patch Tuesday: what Security and IT teams should prioritise
January 2025 Patch Tuesday covers 92 approved patch records and 188 unique CVEs across Microsoft, Adobe and SAP.
Botswana Rewrote Its Privacy Law Before the First Version Settled In
Botswana replaced its earlier privacy regime with a more operational 2024 Act covering overseas services, breach reporting, high-risk processing and regulator powers.
Romania Transposed NIS2 by Emergency Ordinance
Romania’s NIS2 framework arrived on the final day of 2024 through an emergency ordinance, turning a delayed transposition into an immediate scope, registration and governance exercise. Emergency Ordinance No. 155 of 30 December 2024 was published and entered into force…
Chile’s Privacy Overhaul Has a 1 December 2026 Start Date
Chile is transforming an older database law into a modern accountability regime, created a dedicated regulator and given organisations until 1 December 2026 to make the change operational. Chile published Law No. 21.719 on 13 December 2024. The legislation substantially…
The Cyber Resilience Act Is Here: Security Becomes a Product Requirement
The Cyber Resilience Act, effective from 10 December 2024, mandates cybersecurity requirements for connected hardware and software in Europe. It shifts product security from optional to essential, emphasising risk management throughout a product's lifecycle. Manufacturers must ensure secure design, document vulnerabilities, and maintain transparency about support periods, fundamentally altering product quality expectations.
Software Is Now a Product: Europe’s New Liability Rules Reach AI, Updates and Data
The revised EU Product Liability Directive (EU 2024/2853), effective from 9 December 2026, includes software and AI as products subject to liability. It outlines that defects can arise post-release, linking cybersecurity to product safety, and introduces mechanisms for evidence disclosure. Manufacturers must prepare by assessing software, security, and ongoing safety responsibilities.