Cybersecurity Roundup: CNIL Prioritizes Data Security as CISA Issues Critical-Infrastructure Guidance
Summary
A roundup of recent developments: CNIL plans to focus half its 2026 enforcement work on data security, Poland’s ABW reports rising cyber and sabotage risks, and CISA urges critical infrastructure operators to prepare for OT isolation and recovery.
Key points
- CNIL reported 6,167 data-breach notifications in 2025, with hacking accounting for half, and plans to devote 50% of its 2026 controls and enforcement actions to data security.
- Poland’s ABW described cyberattacks, phishing, supply-chain compromise, and attacks on water-sector industrial control systems as elements of broader hybrid threats.
- CISA’s CI Fortify guidance urges critical-infrastructure operators to plan how to isolate operational technology networks and recover essential services during a crisis.
- The G7 Cybersecurity Working Group proposed minimum information elements for AI software bills of materials, including models, datasets, infrastructure, security properties, and data flows.
- The European Commission published draft guidance on high-risk AI classification and studies of technical methods for marking and detecting AI-generated content.
- Louisiana’s proposed privacy law, sent to the governor, would establish consumer privacy rights and require security measures, data protection assessments, and protections for sensitive data.
- The FTC proposed settlements with three companies over allegedly false claims that an advertising service used connected-device audio to target consumers.
Article Details
- Event Type
- Cybersecurity threat reporting, data-security enforcement priorities, and critical-infrastructure resilience guidance.
- Impact
- ABW reported more than 40,000 potential ICT incident reports handled by CSIRT GOV and an 18% year-on-year increase in ARAKIS GOV events in 2025. It described incidents affecting water treatment stations in Jabłonna Lacka, Szczytno, Małdyty, Tolkmicko, and Sierakowo; in some cases, attackers accessed industrial control systems and could change device parameters. ABW also reported that sensitive medical and anti-doping data stolen from the Polish Anti-Doping Agency in an August 2024 attack was published online. CNIL said hacking accounted for one in two reported data breaches and plans to devote 50% of its 2026 controls and enforcement actions to data security. CISA's guidance urges U.S. critical-infrastructure operators to prepare to isolate operational technology systems and recover essential functions during disruptive cyberattacks.
Threat Actors
APT28ABW names APT28 as an example of a group involved in cyber espionage, influence operations, data exfiltration, and disinformation campaigns.APT29ABW names APT29 as an example of a group involved in cyber espionage, influence operations, data exfiltration, and disinformation campaigns.UNC1151ABW names UNC1151 as an example of a group involved in cyber espionage, influence operations, data exfiltration, and disinformation campaigns.
Vendors
1010 Digital Works LLCFederal Trade Commission announced proposed settlements with Cox Media Group, MindSift LLC, and 1010 Digital Works LLC over an “Active Listening” marketing service promoted to small businesses. The FTC alleged thatCox Media GroupOn 21 May 2026, the U.S. Federal Trade Commission announced proposed settlements with Cox Media Group, MindSift LLC, and 1010 Digital Works LLC over an “Active Listening” marketing service promoted to small businesses.MindSift LLCOn 21 May 2026, the U.S. Federal Trade Commission announced proposed settlements with Cox Media Group, MindSift LLC, and 1010 Digital Works LLC over an “Active Listening” marketing service promoted to small businesses.