ADVISORIES & THREAT INTEL

The European Parliament reinstated a rule that gives major online platforms legal cover to scan user communications for CSAM through 2028. The change creates a privacy‑compliance dilemma that SOC 2‑ready organizations must address with robust consent and data‑subject rights processes.

Researchers uncovered an espionage campaign that abuses Anthropic’s Claude LLM agents to pull proprietary code from victim networks. The incident underscores the need for SOC 2‑aligned access‑control policies and continuous monitoring of AI‑driven data flows.

The Future of Life Institute’s AI Safety Index gave every major AI developer a grade below C+, exposing weak safety pledges and missing audit evidence. This matters for SOC 2 readiness because auditors will look for measurable controls and continuous evidence of responsible AI practices.

A coding error in Telstra's network‑management software knocked out mobile, rail, payment and emergency call services across Australia. The outage highlights gaps in change‑management and configuration controls that SOC 2 auditors scrutinize for availability compliance.

Google's Chrome 150 update adds an Android back button and patches several high‑severity vulnerabilities. For SOC 2‑ready organizations, the release underscores the need for documented, continuous patch‑management evidence.

Cybercriminal activity targeting hospitals grew modestly in early 2026, but attacks on healthcare service providers more than doubled, raising supply‑chain risk for the sector. For organizations pursuing SOC 2 readiness, the surge underscores the need for robust vendor‑risk management and continuous monitoring to demonstrate due diligence.

The U.S. Supreme Court held that geofence searches of cell‑phone location history need a warrant, a reasoning that could apply to ALPR systems that capture billions of license‑plate images each month. Organizations must now treat ALPR data as a privacy‑sensitive asset and be audit‑ready under SOC 2 and global privacy laws.

Progress Software warned customers that a credible external threat targets on‑premises ShareFile Storage Zone Controllers, prompting an immediate shutdown directive. The advisory underscores the need for continuous control mapping and audit evidence in hybrid deployments.

Microsoft detailed July 2026 updates to its Secure Future Initiative, including automated control‑mapping dashboards and continuous compliance telemetry for Azure services. The move illustrates how cloud providers can supply ready‑to‑use audit evidence, a key consideration for SOC 2 readiness.

New York will prohibit smart‑glass devices in its 1,240 state courts due to privacy and recording worries, prompting organizations to reassess consent and data‑subject controls under SOC 2. This highlights the need for documented privacy policies and audit‑ready evidence.

Researchers showed a laser pulse can force a Tangem hardware‑wallet card to reset its PIN, giving attackers full control of stored crypto. The incident highlights the need for SOC 2‑aligned physical‑access controls and continuous evidence of hardware‑integrity monitoring.

AI‑driven agents and forgotten service accounts are being used to steal OAuth tokens and pivot into cloud environments, exposing a systemic access‑control gap that SOC 2 programs must address with continuous monitoring and audit‑ready evidence.

Researchers uncovered vulnerabilities in Microsoft BitLocker’s wrapper used by ATM crypto modules, potentially allowing encryption bypass and transaction manipulation. For compliance teams, the finding stresses the need for continuous third‑party risk monitoring and auditable evidence of encryption control effectiveness.

Several governments have announced bans or strict age‑verification requirements for major social‑media services, citing privacy and youth‑protection concerns. The regulatory wave highlights gaps in consent and DSAR processes that SOC 2 privacy controls must address, making continuous‑compliance tooling essential.

Silver Fox’s Rust‑based MODBEACON RAT encrypts its command‑and‑control traffic via gRPC streams, complicating detection. Organizations must ensure SOC 2 monitoring controls can capture such stealthy traffic to stay audit‑ready.

Ransomnews verified 9,291 ransomware incidents from 2018‑2026, with annual counts stabilizing around 1,400‑1,550 attacks. The data highlights the ongoing risk to enterprises and the compliance imperative to maintain SOC 2‑ready security controls.

Incode’s new on‑device age‑estimation runs facial analysis locally, sending only the age estimate and tamper metadata to the service. The approach satisfies emerging age‑verification statutes and gives organizations concrete, privacy‑by‑design evidence for SOC 2 audits.

CISA placed two unrestricted file‑upload vulnerabilities affecting iCagenda and Balbooa Forms plugins into its KEV catalog, citing active exploitation. Organizations must treat these as high‑risk controls, map them to SOC 2 requirements, and retain remediation evidence for audit readiness.

Lumen Technologies grew its internal asset inventory to over 1.1 million assets after a 2026 Axonius survey showed most firms lack a unified view. The expansion underscores how incomplete inventories jeopardize SOC 2 control coverage and audit readiness.

A cyber‑crime crew left a command‑and‑control server open for three weeks, exposing tooling and a target list of 1.4 million WordPress sites. The leak confirms a mass‑scale backdoor operation, highlighting the compliance need for continuous configuration monitoring and control mapping.

Criminals are luring ordinary individuals—often students or job‑seekers—into opening gambling accounts that are later used to launder illicit money. The scheme bypasses traditional AML controls and can expose victims to criminal prosecution, highlighting the need for robust security awareness and KYC processes in compliance programs.