EU and US regulators tighten cybersecurity measures as new vulnerabilities and sanctions emerge

The French CERT released a weekly bulletin listing critical vulnerabilities discovered between 13 July and 19 July 2026. High‑severity flaws affect Microsoft SharePoint Server, Windows, Progress Connection Manager and Mozilla Firefox, with several CVEs (e.g., CVE‑2026‑58644, CVE‑2026‑56164) already exploited for remote code execution or privilege escalation. The bulletin urges organisations to apply vendor patches promptly.

In parallel, European authorities announced sanctions against members of a Russian intelligence service and the Turla hacking group for a decade‑long campaign targeting institutions, critical infrastructure and strategic industries, including sabotage in Poland. The EU is also drafting rules that would set a minimum age of 13 for independent social‑media use, impose screen‑time limits and require parental supervision. The European Commission eased battery‑regulation requirements for certain wearables, opening the market to companies such as Meta. In the United States, New York State imposed a one‑year moratorium on new AI‑driven datacenters larger than 50 MW while environmental standards are defined. These actions illustrate a growing regulatory push to contain cyber threats and manage emerging digital technologies.