News
Commentary on cloud, GDPR, and security news — and what it means for business and public sector IT.
EU picks sovereign cloud vendors under SEAL criteria
Four EU contracts, SEAL-2 minimum. Sovereignty can finally be measured when choosing cloud.
Židlochovice: town hall offline for a week, no ransom paid
Deadlock malware, email down, backups saved part of operations. The mayor refused to pay.
ChatGPT flaw enabled silent data exfiltration via DNS
One malicious prompt could send conversation content outward — Enterprise alone is not risk-free.
NIS2 in Slovakia: year two and tighter oversight
Fines up to 2% of turnover. Cloud providers are in scope — not only “the IT company”.
Amsterdam: digital autonomy strategy through 2035
“Autonomous unless” — moving away from proprietary big-tech bundles.
AI Act: stricter workplace AI rules from August 2026
Business AI in the EU yes — not via public chat with sensitive documents.
Supplier attack paralysed hundreds of Swedish municipalities
Around 200 councils, HR systems, dozens of breach reports. Ransomware through the supply chain.
EDPS closes case: Commission and Microsoft 365 under EU rules
Not “SCCs are enough”. Purpose limitation, restricted transfers, notice of data access requests.
Global Microsoft 365 outage: Teams, Outlook, Exchange
One vendor update stops your office. Diversification is not paranoia.