EU DORA RULES MAKE CREDENTIAL MANAGEMENT LEGALLY BINDING
■ AI-SUMMARIZED FROM 1 SOURCE BELOW
Article 9 of the Digital Operational Resilience Act now requires EU financial institutions to implement mandatory authentication and access controls. Non-compliance creates direct regulatory and security exposure.
■ MORE FROM THE SECURITY DESK
Hundreds of subdomains across dozens of top universities have been compromised by scammers and are now hosting adult content. The breach stems from poor website maintenance and security practices.
U.S. and U.K. cybersecurity agencies are warning of a custom malware called Firestarter that continues to survive security updates on Cisco Firepower and Secure Firewall devices. The threat targets systems running Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software.
Microsoft will roll out passkey support for Microsoft Entra-protected resources on Windows devices starting late April. The move enables phishing-resistant passwordless authentication for enterprise users.
A new financially motivated hacking group called BlackFile has launched a wave of data theft and extortion attacks against retail and hospitality organizations since February 2026. The group employs vishing tactics to compromise victims.