Alston & Bird Privacy, Cyber & Data Strategy Blog

European Vulnerability Database Published by the European Union Agency for Cybersecurity

By and

The European Union Agency for Cybersecurity (ENISA) has launched the European Vulnerability Database (EUVD), a tool designed to enhance digital security across the EU. The EUVD is available here. ENISA created the EUVD under the Network and Information Securities 2 Directive (NIS2). It is a centralised database containing information on cybersecurity vulnerabilities affecting information technology (ICT) products and services. This publicly accessible platform offers insights into … [Read more] about European Vulnerability Database Published by the European Union Agency for Cybersecurity

DOJ Settles Another False Claims Act Case for Alleged Failures in Implementing NIST SP 800-171 and Basic Cybersecurity Controls

By , , , and

On May 1, 2025, the U.S. Department of Justice (DOJ) announced a settlement under the False Claims Act (FCA) involving defense contractors Raytheon Company (Raytheon), RTX Corporation (RTX), and Nightwing Group—the successor owner to one of … [Read more] about DOJ Settles Another False Claims Act Case for Alleged Failures in Implementing NIST SP 800-171 and Basic Cybersecurity Controls

UK Publishes Software Security Code

By and

Artificial Intelligence

Cyber security supply chain risks are growing, and attacks on vendors and other third parties cause severe disruption to businesses. For example, in recent years we have seen many incidents that have involved threat actors compromising third-party … [Read more] about UK Publishes Software Security Code

Texas AG Secures $1.375 Billion from Google: Key Takeaways for Companies Collecting Consumer Data

By and

On May 9, 2025, the Texas Attorney General Ken Paxton announced a $1.375 billion settlement with Google—by far the largest state-level privacy settlement reached against Google to date. The settlement resolves lawsuits filed in 2022 alleging that … [Read more] about Texas AG Secures $1.375 Billion from Google: Key Takeaways for Companies Collecting Consumer Data

CISA Issues Enhanced Guidance to Mitigate Cyber Threats to Operational Technology Systems

By and

Overview On May 6, 2025, the Cybersecurity and Infrastructure Security Agency (CISA), in coordination with the FBI, Environmental Protection Agency (EPA), and Department of Energy (DOE), issued a joint fact sheet titled “Primary Mitigations to … [Read more] about CISA Issues Enhanced Guidance to Mitigate Cyber Threats to Operational Technology Systems