News
Security in News: articles, explanations and technology developments with context and verified sources.
Although the initial sources did not substantiate a news story, INCIBE-CERT’s October advisories cover vulnerabilities in Windows, Android, Siemens and SAP. Practical priorities depend on the product, version and confirmed exploitation.
The Ministry of Defense has published the Defense Technology and Innovation Strategy (ETID 2026). We analyze its structure, priority areas such as cybersecurity and AI, and the real impact on the national industry and public investment.
Microsoft, Android, and Atlassian released urgent updates in October 2026. We analyze the technical data, operational impact, and criteria for prioritizing responses to active vulnerabilities.
On 22 September, the European agency published a report analysing incidents observed during 2025. Its communication highlights how digital dependencies can expand the attack surface and weaken resilience.
A CERT-EU advisory published on 7 October describes an arbitrary file access vulnerability affecting several versions of Atlassian Data Center products. The recommendation is to update to a fixed version and review access logs.
Spain’s National Security Framework sets principles and requirements for protecting public-sector information systems. Its scope can also extend to private suppliers when they provide services or solutions to public authorities.
On 11 September 2026, ENISA announced the start of operations for the reporting platform linked to the Cyber Resilience Act. The milestone activates one part of the information system, but does not mean that all the Act’s obligations already apply.
From 11 September 2026, manufacturers must report actively exploited vulnerabilities and certain serious incidents affecting products with digital elements covered by the Cyber Resilience Act. Here are the deadlines, the parties subject to the rules and the limits of what can be concluded.
The obligation to report actively exploited vulnerabilities and certain incidents has applied since 11 September 2026. The European Commission sets out the deadlines and intended channel; no evidence of a recent regulatory change has been provided.
The available documentation combines advisories, calls for tenders, publications and a legislative proposal. It can guide further research, but on its own it does not establish a single recent event that would justify a news story.
