Data Privacy & Cybersecurity

CERT-Bund Security Advisory WID-SEC-2026-0733

CERT-Bund has issued security advisory WID-SEC-2026-0733, detailing a new vulnerability. This advisory provides technical details and recommendations for affected parties to mitigate potential security risks.

CISA Adds Wing FTP Server Vulnerability to KEV Catalog

CISA has added CVE-2025-47813, a Wing FTP Server information disclosure vulnerability, to its Known Exploited Vulnerabilities (KEV) Catalog. This addition is based on evidence of active exploitation and poses significant risks to federal agencies.

Colorado AG Joins Lawsuit Challenging HUD Funding Cuts for Fair Housing Enforcement

Colorado Attorney General Phil Weiser joined a coalition of state attorneys general in filing a lawsuit against the U.S. Department of Housing and Urban Development (HUD). The lawsuit challenges HUD's actions threatening to withhold funding from state and local fair housing enforcement agencies for adhering to state laws and imposing illegal conditions on HUD funding.

Colorado AG Sues OneMain Financial for Deceptive Lending

Colorado has joined a multistate lawsuit against OneMain Financial, alleging deceptive lending practices and hidden fees that inflated borrowers' costs. The lawsuit seeks restitution for consumers, civil penalties, and injunctive relief to stop the alleged unlawful practices.

Dutch DPA Urges Accelerated AI Regulation and Supervision

The Dutch Data Protection Authority (AP) is urging the government to accelerate AI regulation and supervision, citing increasing risks and a deteriorating AI Impact Barometer. The AP warns that current enforcement capabilities are insufficient to address unsafe and discriminatory algorithms.

CNIL Consultation on Session Replay Draft Recommendation

The CNIL has launched a public consultation on its draft recommendation for session replay tools. The recommendation aims to guide tool developers and website operators on compliance with data protection rules, particularly concerning user behavior monitoring. The consultation period closes on April 22, 2026.

EDPB EDPS Joint Opinion on Digital Framework Simplification

The EDPB and EDPS have issued a joint opinion supporting simplification and competitiveness within the digital framework. The opinion addresses EU legislative proposals related to data privacy, artificial intelligence, and e-Privacy.

EDPB, EDPS Joint Opinion on European Biotech Act

The European Data Protection Board (EDPB) and European Data Protection Supervisor (EDPS) have issued a joint opinion on the proposed European Biotech Act. They support harmonizing clinical trials but call for specific safeguards for sensitive health data.

Microsoft Edge Multiple Vulnerabilities Disclosed

CERT-FR has issued an advisory regarding multiple vulnerabilities discovered in Microsoft Edge. One vulnerability, CVE-2026-3910, is reported to be actively exploited. Users are advised to update their software to the latest versions.

Multiple vulnerabilities found in Microsoft products

CERT-FR has issued a notice regarding multiple vulnerabilities discovered in various Microsoft products. The advisory lists affected systems and directs users to Microsoft's security bulletins for patches.