Austria is preparing its NIS2 implementation; a CSIRT representative recommends two regulatory measures: first, national security teams should be allowed to support entities outside the NIS2 perimeter—as the Netherlands learned painfully; second, task definitions should clearly establish that CSIRTs promote independent
In May 2026, the VS Code extension Nx Console 18.95.0 was compromised and stole developer credentials en masse via auto-update; this KEDB entry draws four lessons for CISO teams: uncontrolled extension trust chains, auto-update as a double-edged sword, token hygiene, and build pipeline isolation — with concrete action
A CISA contractor stored highly sensitive credentials for AWS GovCloud accounts and internal systems in a public GitHub repository, containing cloud keys, plaintext passwords, and administrative data—rated by security firm GitGuardian as the most severe government data leak of their career.
