BEGIN:VCALENDAR VERSION:2.0 PRODID:-//disclose.io//Upcoming Dates//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:disclose.io — Upcoming Dates X-WR-CALDESC:Policy comment deadlines, regulations, CFPs, international developments, right to repair, and legislation for the vulnerability disclosure & security research community. REFRESH-INTERVAL;VALUE=DURATION:P1D X-PUBLISHED-TTL:P1D BEGIN:VEVENT UID:7a353692df081fc1b786d31a@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260630 SUMMARY:BSides Canberra 2026 CFP closes DESCRIPTION:Event Sep 24-26 at the National Convention Centre\, Canberra\ ; anchor Australian hacker conference with strong coordinated-disclosure track.\n\nhttps://cfp.bsidescbr.com.au/bsides-canberra-2026/cfp URL:https://cfp.bsidescbr.com.au/bsides-canberra-2026/cfp CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:ea68f870198616d1e186c2fd@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260630 SUMMARY:AISA CyberCon Melbourne 2026 early-bird registration closes DESCRIPTION:Early-bird cutoff for Australia's largest cybersecurity confe rence (event Oct 14-16\, Melbourne Convention & Exhibition Centre) — p rincipal policy + practitioner stage for ANZ.\n\nhttps://melbourne2026.c yberconference.com.au/ URL:https://melbourne2026.cyberconference.com.au/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:4bce2a68ecbc0bbb4f33d467@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260701 SUMMARY:Connecticut Data Privacy Act amendments (SB 1295 / Public Act 25- 113) DESCRIPTION:Threshold drops from 100K to 35K consumers\, "sensitive data" expands to include neural data\, and LLM-training disclosure is require d in privacy notices — sweeps in a much broader mid-market controller population that's net-new to documented disclosure paths.\n\nhttps://www .wiley.law/alert-Major-Changes-to-Connecticut-Consumer-Privacy-Law-Will- Take-Effect-July-1-2026 URL:https://www.wiley.law/alert-Major-Changes-to-Connecticut-Consumer-Pri vacy-Law-Will-Take-Effect-July-1-2026 CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:36ee1df011df9df25fabd9b2@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260701 SUMMARY:Australia APRA CPS 230: Second Wave Amendments DESCRIPTION:Targeted amendments to Australia's prudential operational ris k standard take effect — updated exemption framework for qualifying no n-traditional service providers and new Material Service Provider Regist er classifications\; directly affects how major Australian financial ins titutions manage third-party cyber risk and vendor security assessments. \n\nhttps://www.apra.gov.au/final-targeted-amendments-to-cps-230-operati onal-risk-management URL:https://www.apra.gov.au/final-targeted-amendments-to-cps-230-operatio nal-risk-management CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:3757a9c99f38dc29498445df@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260702 SUMMARY:NIST SP 800-228A: Secure Deployment of RESTful Web APIs DESCRIPTION:Codifies API security baseline researchers test against and r eport against in VDPs covering web/API surfaces.\n\nhttps://csrc.nist.go v/pubs/sp/800/228/a/ipd URL:https://csrc.nist.gov/pubs/sp/800/228/a/ipd CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:6dfe0de0bebdac5adac51749@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260702 SUMMARY:EO 14409: CISA Binding Operational Directives + Treasury AI cyber security clearinghouse due DESCRIPTION:Roughly 30 days after Executive Order 14409 ("Promoting Advan ced Artificial Intelligence Innovation and Security")\, Section 2(c) dir ects CISA to issue Binding Operational Directives and Section 2(d) stand s up a Treasury-led AI cybersecurity clearinghouse — a new federal AI- security directive surface relevant to coordinated disclosure.\n\nhttps: //www.whitehouse.gov/presidential-actions/2026/06/promoting-advanced-art ificial-intelligence-innovation-and-security/ URL:https://www.whitehouse.gov/presidential-actions/2026/06/promoting-adv anced-artificial-intelligence-innovation-and-security/ CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:3e89222c3c4a6ea221234a84@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260705 SUMMARY:BSides Orlando 2026 CFP closes DESCRIPTION:Event Sep 25-26 at Full Sail University\, Orlando\, FL\; topi cs span offensive/defensive research and disclosure\; main CFP deadline July 5.\n\nhttps://sessionize.com/bsides-orlando-2026/ URL:https://sessionize.com/bsides-orlando-2026/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2238d8c8b12fcd767a49a25c@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260706 SUMMARY:NIST IR 8323 Rev. 2 IPD: Foundational PNT Profile DESCRIPTION:GPS/PNT cybersecurity profile — affects GPS spoofing/jammin g disclosure framing for critical infrastructure researchers.\n\nhttps:/ /csrc.nist.gov/pubs/ir/8323/r2/ipd URL:https://csrc.nist.gov/pubs/ir/8323/r2/ipd CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:02c3aa42c44511455e57dde1@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260706 SUMMARY:DFARS Case 2021-D011: Mitigating Risks Related to Foreign Ownersh ip\, Control\, or Influence (FOCI) DESCRIPTION:Proposed defense-acquisition rule on supply-chain / FOCI risk in the defense industrial base — relevant to third-party and supply-c hain security research.\n\nhttps://www.federalregister.gov/documents/202 6/05/07/2026-09067/defense-federal-acquisition-regulation-supplement-mit igating-risks-related-to-foreign-ownership URL:https://www.federalregister.gov/documents/2026/05/07/2026-09067/defen se-federal-acquisition-regulation-supplement-mitigating-risks-related-to -foreign-ownership CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:e75853513e7c355eeef30682@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260706 SUMMARY:BSides Montréal 2026 CFP closes (Round 2) DESCRIPTION:Event Sep 19 at Grande Bibliothèque de Montréal\; talks in French or English\, 30-min format\, covering exploitation\, cryptography \, and cybersecurity law/ethics.\n\nhttps://pretalx.com/bsides-montr-al- 2026/cfp URL:https://pretalx.com/bsides-montr-al-2026/cfp CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2dd0b16d1250ae39f30c5b90@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260708 SUMMARY:NIST SP 1800-41: Responding to and Recovering from a Cyber Attack (Manufacturing) DESCRIPTION:ICS/OT incident-response guidance relevant to manufacturer VD P intake\, triage\, and CSIRT coordination.\n\nhttps://csrc.nist.gov/pub s/sp/1800/41/ipd URL:https://csrc.nist.gov/pubs/sp/1800/41/ipd CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:77f2ff56226ab92b7a4ec61c@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260709 SUMMARY:USENIX Security '26 Cycle 2 embargo deadline DESCRIPTION:Academic disclosure embargo gate for top-tier security venue\ ; event in Baltimore Aug 12-14.\n\nhttps://www.usenix.org/conference/use nixsecurity26/call-for-papers URL:https://www.usenix.org/conference/usenixsecurity26/call-for-papers CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:9e78bf1c30ad75d41218be43@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260710 SUMMARY:NIST SP 800-52 Rev. 2 Crypto Publication Review: TLS Implementati ons DESCRIPTION:TLS implementation guidance review — direct touchpoint for TLS protocol vuln researchers.\n\nhttps://csrc.nist.gov/pubs/sp/800/52/r 2/final URL:https://csrc.nist.gov/pubs/sp/800/52/r2/final CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:330c90287b852940c749a3b7@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260710 SUMMARY:NIST SP 800-38F Rev. 1: Methods for Key Wrapping (pre-draft call) DESCRIPTION:Pre-draft revision of the AES key-wrapping standard (removes deprecated TKW/TDEA) — crypto-implementation guidance underpinning sec ure disclosure and data-protection tooling.\n\nhttps://csrc.nist.gov/pub s/sp/800/38/f/r1/iprd URL:https://csrc.nist.gov/pubs/sp/800/38/f/r1/iprd CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:24e601da10872d65fe78d9ff@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260710 SUMMARY:ENISA Technical Advisory: Secure Update Mechanisms (CRA Implement ation) DESCRIPTION:Draft CRA guidance (v0.6) breaking the EU Cyber Resilience Ac t's secure-update obligation into seven concrete steps — directly rele vant to software-supply-chain and vulnerability-management practitioners .\n\nhttps://ec.europa.eu/eusurvey/runner/technical_advisory_update_mech anisms URL:https://ec.europa.eu/eusurvey/runner/technical_advisory_update_mechan isms CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cc23479ce2bc83fde73e6505@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260710 SUMMARY:Luxembourg NIS2 Transposition: Self-Registration Deadline DESCRIPTION:Following Luxembourg's NIS2 transposition law (in force May 1 0\, 2026 — one of the last EU states to transpose)\, covered entities must self-register with the national authority by July 10\; France and I reland remain the final EU states without an enacted transposition law.\ n\nhttps://digital-strategy.ec.europa.eu/en/policies/nis-transposition URL:https://digital-strategy.ec.europa.eu/en/policies/nis-transposition CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:5f982fef526d79717a19555e@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260713 SUMMARY:NIST IR 8320E IPD: Hardware-Enabled Security for Confidential Com puting in Cloud Workloads DESCRIPTION:Cloud TEE/SGX/SEV guidance — relevant to confidential-compu ting vulnerability disclosure researchers.\n\nhttps://csrc.nist.gov/pubs /ir/8320/e/ipd URL:https://csrc.nist.gov/pubs/ir/8320/e/ipd CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:48bf66fd6cccbf00c791ffb2@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260716 SUMMARY:New Jersey Data Privacy Act: cure-period sunset DESCRIPTION:30-day right-to-cure provision sunsets 18 months after Jan 15 \, 2025 effective date\; after this\, cure is entirely at AG discretion — enforcement risk for inadequate security/disclosure handling rises s harply.\n\nhttps://www.njconsumeraffairs.gov/ocp/Pages/NJ-Data-Privacy-L aw-FAQ.aspx URL:https://www.njconsumeraffairs.gov/ocp/Pages/NJ-Data-Privacy-Law-FAQ.a spx CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:d20a068bf4209e157cf46410@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260717 SUMMARY:EU Critical Entities Resilience Directive: critical-entity design ation deadline DESCRIPTION:Member States must formally designate critical entities acros s 11 sectors\; designated entities then have 10 months → compliance by May 2027 — creates a new population needing formal CVD pathways adjac ent to NIS2.\n\nhttps://home-affairs.ec.europa.eu/policies/internal-secu rity/counter-terrorism-and-radicalisation/protection/critical-infrastruc ture-resilience-eu-level_en URL:https://home-affairs.ec.europa.eu/policies/internal-security/counter- terrorism-and-radicalisation/protection/critical-infrastructure-resilien ce-eu-level_en CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:9f34281e9c8c40eaae5700f5@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260719 SUMMARY:BSides NYC 0x05 CFP closes DESCRIPTION:New York City community security conference\; CFP open throug h 8AM Jul 19\, welcoming security-research and disclosure talks.\n\nhttp s://bsidesnyc.org/cfp/ URL:https://bsidesnyc.org/cfp/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:1300ed9447ddddc5396b746a@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260720 SUMMARY:Hardwear.io Netherlands 2026 CFP closes DESCRIPTION:Hardware security conference Nov 16-20 at Amsterdam Marriott Hotel\; seeks offensive/defensive hardware research covering IoT\, embed ded\, automotive\, ICS/SCADA\, and medical devices.\n\nhttps://hardwear. io/nl-2026/cfp/ URL:https://hardwear.io/nl-2026/cfp/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:5032aae7d539c3b4a9c55516@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260720 SUMMARY:UN Global Mechanism on ICT Security: First Substantive Plenary DESCRIPTION:New York\; new single-track permanent mechanism's first subst antive plenary (successor to the OEWG\, which concluded July 2025) — t he venue for state-level negotiations on cyber norms\, application of in ternational law\, vulnerability-equities\, and capacity building.\n\nhtt ps://dig.watch/processes/un-gge URL:https://dig.watch/processes/un-gge CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:aeb8e2932bad5c521c264b05@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260722 SUMMARY:Black Hat Europe 2026 Briefings CFP closes DESCRIPTION:Main Briefings call (closes 23:59 GMT\; notifications by Sep 25) for the Dec 9-10 conference at ExCeL London\, across themes includin g AI & autonomous threats\, cyber conflict\, and identity/trust/control. \n\nhttps://www.blackhat.com/eu-26/ URL:https://www.blackhat.com/eu-26/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:b6022aa1858bd342cea3d275@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260724 SUMMARY:BSides Munich 2026 CFP closes DESCRIPTION:10th edition\, Nov 7 workshops at Hochschule München and Nov 9 main conference at The Westin Grand Munich\; theme "X Marks the Spot! "\n\nhttps://2026.bsidesmunich.org/ URL:https://2026.bsidesmunich.org/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:11bd4974718502af911b4886@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260725 SUMMARY:NIST NVD: action plan due in response to Commerce OIG report DESCRIPTION:NIST must submit a formal action plan responding to the Comme rce Office of Inspector General report on its management of the National Vulnerability Database — an accountability milestone for the CVE/NVD enrichment infrastructure the entire disclosure ecosystem depends on.\n\ nhttps://www.helpnetsecurity.com/2026/06/01/nist-nvd-management-problems / URL:https://www.helpnetsecurity.com/2026/06/01/nist-nvd-management-proble ms/ CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:1bba753cb78cecb89e85174c@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260731 SUMMARY:CISA .gov Registrar Information Collection (Docket CISA-2026-0001 ) DESCRIPTION:.gov TLD registry program collection — directly relevant to researchers reporting issues against federal .gov domains.\n\nhttps://w ww.federalregister.gov/documents/2026/06/01/2026-10886/agency-informatio n-collection-activities-gov-registrar URL:https://www.federalregister.gov/documents/2026/06/01/2026-10886/agenc y-information-collection-activities-gov-registrar CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:6b6ff4fa80573993131cd9c4@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260731 SUMMARY:CISA State and Local Cybersecurity Grant Program Evaluation DESCRIPTION:Sets metrics influencing how state/local critical-infrastruct ure VDPs are funded and assessed.\n\nhttps://www.federalregister.gov/doc uments/2026/06/01/2026-10893/agency-information-collection-activities-st ate-and-local-cybersecurity-grant-program-slcgp URL:https://www.federalregister.gov/documents/2026/06/01/2026-10893/agenc y-information-collection-activities-state-and-local-cybersecurity-grant- program-slcgp CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:4e98c18638ad02919ca5eabe@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260731 SUMMARY:NIST SP 800-38D Rev. 1: GCM and GMAC (second pre-draft call) DESCRIPTION:Second pre-draft revision of the GCM/GMAC block-cipher mode ( adds wGCM\, drops short authentication tags) — foundational crypto gui dance for the product-security community.\n\nhttps://www.nist.gov/news-e vents/news/2026/06/second-pre-draft-call-comments-sp-800-38d-gcm-and-gma c-block-cipher-modes URL:https://www.nist.gov/news-events/news/2026/06/second-pre-draft-call-c omments-sp-800-38d-gcm-and-gmac-block-cipher-modes CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:b2103ca02743c3516a3f5020@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260731 SUMMARY:EUCC Agreed Cryptographic Mechanisms (ACM) Version 3.0 — Public Review DESCRIPTION:ENISA public review of the updated Agreed Cryptographic Mecha nisms document (v3.0) under the EU Cybersecurity Certification Scheme on Common Criteria (EUCC) — relevant to cryptographic standards and prod uct security certification in the EU.\n\nhttps://certification.enisa.eur opa.eu/news/participate-public-review-new-draft-agreed-cryptographic-mec hanisms-2026-06-02_en URL:https://certification.enisa.europa.eu/news/participate-public-review- new-draft-agreed-cryptographic-mechanisms-2026-06-02_en CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2fa8ab0d8eece8e1800a7796@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260731 SUMMARY:CODE BLUE 2026 Call for Presentations closes DESCRIPTION:Tokyo international security conference (main days Nov 17-18) \; ~45-min talks across Technical\, General\, Law & Policy\, and CyberCr ime tracks\, submitted via Sessionize\; may close early if filled.\n\nht tps://codeblue.jp/en/cfp/presentations/ URL:https://codeblue.jp/en/cfp/presentations/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:b2e301476a69fac248cffb5d@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260801 SUMMARY:California DELETE Act / DROP platform: broker compliance enforcem ent DESCRIPTION:Registered data brokers must access California's DROP every 4 5 days to process consumer deletion requests\; failure = $200/request/da y — DROP itself becomes a high-impact disclosure target.\n\nhttps://pr ivacy.ca.gov/drop/ URL:https://privacy.ca.gov/drop/ CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:191a9aa75b2594bd79621cd2@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260801 SUMMARY:BSides Frankfurt 2026 CFP closes DESCRIPTION:Frankfurt\, Germany (event Sep 10-11)\; CFP deadline for the EU security-research community.\n\nhttps://cfp.bsidesfrankfurt.org/call- for-paper-presentations-2026/ URL:https://cfp.bsidesfrankfurt.org/call-for-paper-presentations-2026/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:6af04780df696a7b88bc5551@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260801 SUMMARY:Black Hat USA 2026 DESCRIPTION:Mandalay Bay\, Las Vegas\; Trainings Aug 1-4\, Briefings and Business Hall Aug 5-6 — premier technical security venue with active v ulnerability research presentations and policy briefings.\n\nhttps://bla ckhat.com/us-26/ URL:https://blackhat.com/us-26/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:1293eaa8d4933003ef4cd97c@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260802 SUMMARY:EU AI Act: Article 50 transparency obligations enter into applica tion DESCRIPTION:AI-content labelling and interaction-notice rules go live\; e nforcement powers under Articles 88-101 activate for GPAI providers (fin es up to 3% global turnover). The Digital Omnibus (EP plenary adopted Ju n 16\, 2026\; Council adoption expected Jun 29) did NOT defer Article 50 — only Annex III standalone high-risk systems moved to Dec 2\, 2027\; Article 50(2) watermarking for pre-market systems has a grace period to Dec 2\, 2026.\n\nhttps://www.consilium.europa.eu/en/press/press-release s/2026/05/07/artificial-intelligence-council-and-parliament-agree-to-sim plify-and-streamline-rules/ URL:https://www.consilium.europa.eu/en/press/press-releases/2026/05/07/ar tificial-intelligence-council-and-parliament-agree-to-simplify-and-strea mline-rules/ CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:7e84e1bcca447d17ebd9361c@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260802 SUMMARY:California AI Transparency Act (SB 942\, as amended by AB 853): c ore operative date DESCRIPTION:Large generative-AI providers (>1M monthly CA users) must off er a free public AI-detection tool and embed provenance disclosures in A I-generated content — a new pathway for AI-content authenticity bug re ports.\n\nhttps://leginfo.legislature.ca.gov/faces/billTextClient.xhtml? bill_id=202520260AB853 URL:https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id =202520260AB853 CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:975078c02c547049dfc97675@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260803 SUMMARY:BSides Las Vegas 2026 DESCRIPTION:Tuscany Suites\, Las Vegas\, NV\; flagship community security con during hacker-summer-camp week\, including the Proving Ground first -time-speaker track.\n\nhttps://bsideslv.org/ URL:https://bsideslv.org/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:6bf868299045c5ed96db3eb7@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260805 SUMMARY:BSides Zadar 2026 CFP closes DESCRIPTION:Zadar\, Croatia (event Sep 11)\; EU community con.\n\nhttps:/ /sessionize.com/bsideszadar-2026/ URL:https://sessionize.com/bsideszadar-2026/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:03175f2cbec70cdf0002bda4@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260806 SUMMARY:DEF CON 34 DESCRIPTION:Las Vegas Convention Center\; theme "Agency" — Policy Villa ge and AI Village confirmed.\n\nhttps://defcon.org/html/defcon-34/dc-34- policy.html URL:https://defcon.org/html/defcon-34/dc-34-policy.html CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:ff193e086d503c7ccd1bbd4b@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260809 SUMMARY:CISA BOD 26-04: Prioritizing Security Updates Based on Risk (Phas e II) DESCRIPTION:New directive issued Jun 10\, 2026 that revokes BOD 22-01 (th e KEV directive) and BOD 19-02\, replacing them with an SSVC risk-tiered remediation model\; by this date FCEB agencies must update vulnerabilit y-management policies (Phase III remediation follows ~Dec 7\, 2026).\n\n https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-secur ity-updates-based-risk URL:https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-se curity-updates-based-risk CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:85c1ec18bfc4bbc1163db480@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260810 SUMMARY:BSides Oslo 2026 CFP closes DESCRIPTION:Event Oct 29 at Vulkan Arena\, Oslo\; deadline 23:59 CET.\n\n https://bsidesoslo.no/ URL:https://bsidesoslo.no/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2fd5adc2807a8a2f4cde6d41@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260812 SUMMARY:USENIX Security '26 DESCRIPTION:Baltimore\, MD\; premier academic venue with active disclosur e-policy track.\n\nhttps://www.usenix.org/conference/usenixsecurity26 URL:https://www.usenix.org/conference/usenixsecurity26 CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:0aa72b0e9d3d450745f785ff@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260814 SUMMARY:NIST SP 800-219 Rev. 2: Automated Secure Configuration Guidance ( macOS Security Compliance Project) DESCRIPTION:Initial public draft covering automated security assessment a nd secure baseline configuration for macOS\, iOS\, and visionOS — open ed June 22\, 2026\; relevant to enterprise and government device securit y baselines.\n\nhttps://csrc.nist.gov/pubs/sp/800/219/r2/ipd URL:https://csrc.nist.gov/pubs/sp/800/219/r2/ipd CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:c2e4d31361c493f0b604cd8f@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260819 SUMMARY:NDSS 2027 Fall Cycle CFP closes DESCRIPTION:Event March 22-26 2027\, Seoul\; top-tier network and system security venue for VDP-adjacent research.\n\nhttps://www.ndss-symposium. org/ndss2027/submissions/call-for-papers/ URL:https://www.ndss-symposium.org/ndss2027/submissions/call-for-papers/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:57af0166a0d8cd9f1996305e@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260824 SUMMARY:DMCA §1201 Tenth Triennial Rulemaking: exemption petition deadli ne DESCRIPTION:Deadline to petition the Copyright Office for new or renewed circumvention exemptions — covers BOTH the diagnosis/maintenance/repai r classes and the good-faith security-research exemption (same proceedin g)\, for the 2027–2030 term.\n\nhttps://www.federalregister.gov/docume nts/2026/06/09/2026-11545/exemptions-to-permit-circumvention-of-access-c ontrols-on-copyrighted-works URL:https://www.federalregister.gov/documents/2026/06/09/2026-11545/exemp tions-to-permit-circumvention-of-access-controls-on-copyrighted-works CATEGORIES:Right to Repair TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:fe3e4ae2a683a571383724e5@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260825 SUMMARY:USENIX Security '27 Cycle 1 paper submission deadline DESCRIPTION:Event Aug 11-13 2027\, Denver (abstract registration Aug 18) — primary academic venue for vulnerability research and disclosure cas e studies.\n\nhttps://www.usenix.org/conference/usenixsecurity27 URL:https://www.usenix.org/conference/usenixsecurity27 CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:01328917ac0ba47714cb0fc2@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260830 SUMMARY:DefCamp 2026 CFP Wave 2 closes DESCRIPTION:16th edition of CEE's largest security conference\, Nov 19-20 in Bucharest\; Wave 3 (final) closes Oct 15\; topics include AI threats \, supply chain\, and threat modeling.\n\nhttps://sessionize.com/defcamp -2026 URL:https://sessionize.com/defcamp-2026 CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:50ab93dfebf88357e6b3248c@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260831 SUMMARY:Council of Europe Octopus Conference 2026 registration closes DESCRIPTION:Registration deadline for the Octopus Conference on cybercrim e cooperation (event Oct 14-16\, Strasbourg) — key Budapest Convention community venue.\n\nhttps://www.coe.int/en/web/cybercrime/octopus-confe rence-2026 URL:https://www.coe.int/en/web/cybercrime/octopus-conference-2026 CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:9f512230e952fbf5f4390538@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260901 SUMMARY:Texas HB 2963 consumer-electronics Right to Repair takes effect DESCRIPTION:Texas's law requiring manufacturers to provide parts\, tools\ , and documentation for electronics over $50 goes live — expanding the patchwork that legitimizes independent repair of firmware-bearing devic es.\n\nhttps://h2compliance.com/texas-right-to-repair/ URL:https://h2compliance.com/texas-right-to-repair/ CATEGORIES:Right to Repair TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:5efcf82fccd1c076b1f537f2@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260911 SUMMARY:EU CRA Article 14: Vulnerability reporting obligations enter into application DESCRIPTION:Manufacturers of products with digital elements must report a ctively-exploited vulnerabilities (24h early warning\, 72h notification\ , 14-day final report) via the ENISA Single Reporting Platform — the f irst global mandatory exploited-vuln reporting clock.\n\nhttps://digital -strategy.ec.europa.eu/en/policies/cra-reporting URL:https://digital-strategy.ec.europa.eu/en/policies/cra-reporting CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:8987dd00295cd7b90d9befef@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260928 SUMMARY:DMCA §1201 Tenth Triennial: comments on renewal petitions due DESCRIPTION:Written comments responding to renewal petitions (including t he repair and security-research exemption classes) are due in the Copyri ght Office's tenth anti-circumvention rulemaking.\n\nhttps://www.copyrig ht.gov/newsnet/2026/1088.html URL:https://www.copyright.gov/newsnet/2026/1088.html CATEGORIES:Right to Repair TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:03f0765d8312502deb7ce2c7@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260928 SUMMARY:CIRMP Annual Reports due under Australia's SOCI Act DESCRIPTION:Responsible Entities must submit a board-approved Critical In frastructure Risk Management Program annual report via the CISC online f orm within 90 days of FY end (30 June) — locked-in annual cadence for critical-infrastructure cyber risk management programs.\n\nhttps://www.c isc.gov.au/resources/online-forms/responsible-entity-risk-management-pro gram-annual-report URL:https://www.cisc.gov.au/resources/online-forms/responsible-entity-ris k-management-program-annual-report CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:00e4c84d9bcca99869cc3f02@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260930 SUMMARY:Cybersecurity Information Sharing Act of 2015 (CISA 2015) sunset DESCRIPTION:Current reauthorization (extended through Sep 30\, 2026 in th e Feb 2026 appropriations act) expires — liability protections and ant itrust safe harbor for cyber threat-indicator sharing terminate absent f urther congressional action.\n\nhttps://www.wileyconnect.com/CISA-2015-C ongress-Faces-Sept-30-Deadline-to-Reauthorize-Vital-Cybersecurity-Law URL:https://www.wileyconnect.com/CISA-2015-Congress-Faces-Sept-30-Deadlin e-to-Reauthorize-Vital-Cybersecurity-Law CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:bb42d824516f7ff018ac86f0@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260930 SUMMARY:BSides London 2026 CFP closes DESCRIPTION:All calls (presentations\, rookie talks\, workshops) close 23 :59\; conference Dec 12\, 2026 at Novotel London West.\n\nhttps://bsides .london/ URL:https://bsides.london/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:e86f45c371e32ad368b60705@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20260930 SUMMARY:WIMWIG Act (H.R. 5079): CISA 2015 reauthorization vehicle DESCRIPTION:Garbarino's Widespread Information Management for the Welfare of Infrastructure and Government Act would renew the lapsing Cybersecur ity Information Sharing Act of 2015\; cleared House Homeland Security (2 5-0) but awaits a House floor vote\, with the Senate companion stalled\, before the Sep 30 deadline — the core federal liability/info-sharing framework underpinning coordinated disclosure.\n\nhttps://www.congress.g ov/bill/119th-congress/house-bill/5079 URL:https://www.congress.gov/bill/119th-congress/house-bill/5079 CATEGORIES:Pending / TBD (2026) TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:4f543d875aefb6a5e6be52e6@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261001 SUMMARY:Connecticut SB 5 (AI Transparency\, Safety\, and Consumer Protect ion Act) DESCRIPTION:Bans on AI-enabled discrimination\, deepfakes\, biometric scr aping\; mandatory provenance metadata on GPAI outputs >1M MAU — anothe r formal pathway for AI-generated-content authenticity and discriminator y-AI bug reports.\n\nhttps://www.cga.ct.gov/asp/cgabillstatus/cgabillsta tus.asp?selBillType=Bill&bill_num=SB5 URL:https://www.cga.ct.gov/asp/cgabillstatus/cgabillstatus.asp?selBillTyp e=Bill&bill_num=SB5 CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:73c368b2592ef5b36742eadb@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261003 SUMMARY:Australia telecommunications cyber-maturity Level 1 (TSRMP Rules) DESCRIPTION:Carriers and relevant carriage service providers must reach c yber-maturity indicator Level 1 (Essential Eight\, C2M2\, or AESCSF Core ) under the Telecommunications Security and Risk Management Program (Lev el 2 for carriers follows Oct 3\, 2027).\n\nhttps://www.allens.com.au/in sights-news/insights/2025/03/key-regulatory-changes-for-the-telecommunic ations-sector/ URL:https://www.allens.com.au/insights-news/insights/2025/03/key-regulato ry-changes-for-the-telecommunications-sector/ CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:dd3d90ec9e31e28aeec27615@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261007 SUMMARY:Wild West Hackin' Fest Deadwood 2026 DESCRIPTION:Deadwood\, South Dakota\, 15th edition\; pre-con training Oct 6-7 — community security conference with strong offensive and defensi ve research content.\n\nhttps://wildwesthackinfest.com/ URL:https://wildwesthackinfest.com/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:e8d1ed4dc6f4c754c817e88d@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261009 SUMMARY:c0c0n 2026 DESCRIPTION:Grand Hyatt Kochi\, Kerala\, India\; 19th year — strong APA C voice in vulnerability research and disclosure practice\; registration open through Sep 30 (talk CFP closed May 10).\n\nhttps://c0c0n.org/regi ster URL:https://c0c0n.org/register CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2a93c8b419178708f1a93a8e@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261012 SUMMARY:Singapore International Cyber Week (SICW) 2026 DESCRIPTION:Singapore\; APAC's premier cybersecurity policy event — min isterial roundtables\, GFCE Southeast Asia regional meeting\, and GovWar e 2026\; historically the window for Counter Ransomware Initiative summi t announcements.\n\nhttps://www.sicw.gov.sg/ URL:https://www.sicw.gov.sg/ CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:97c04e711b5b4f473d480a4c@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261014 SUMMARY:AISA CyberCon Melbourne DESCRIPTION:Melbourne Convention & Exhibition Centre\; Australia's larges t cybersecurity conference — principal policy + practitioner stage for ANZ.\n\nhttps://melbourne2026.cyberconference.com.au/ URL:https://melbourne2026.cyberconference.com.au/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:ddf0121456b9048cdc7c1ee2@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261014 SUMMARY:Council of Europe Octopus Conference 2026 DESCRIPTION:Council of Europe headquarters\, Strasbourg\; global cybercri me-cooperation conference anchoring the Budapest Convention community — directly relevant to international computer crime law and security r esearch protections.\n\nhttps://www.coe.int/en/web/cybercrime/octopus-co nference-2026 URL:https://www.coe.int/en/web/cybercrime/octopus-conference-2026 CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:96245fe052bc091499c1ccce@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261015 SUMMARY:DefCamp 2026 CFP Wave 3 closes (final) DESCRIPTION:Final submission wave for DefCamp 2026\, Nov 19-20 Bucharest. \n\nhttps://sessionize.com/defcamp-2026 URL:https://sessionize.com/defcamp-2026 CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:8af2f26a4f3ac282a0f8908f@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261029 SUMMARY:BSides Oslo 2026 DESCRIPTION:Vulkan Arena\, Oslo\, Norway\; Nordic community security conf erence.\n\nhttps://bsidesoslo.no/ URL:https://bsidesoslo.no/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2e43708b4eb0264969f71c6d@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261104 SUMMARY:ENISA European Cybersecurity Skills Conference DESCRIPTION:Larnaca\, Cyprus\; EU policy on cyber workforce\, certificati on\, and disclosure ecosystem — touches NIS2 / CRA implementation.\n\n https://www.enisa.europa.eu/events/european-cybersecurity-skills-confere nce-2026 URL:https://www.enisa.europa.eu/events/european-cybersecurity-skills-conf erence-2026 CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:86fc9076d69afbb6a24bd141@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261107 SUMMARY:BSides Munich 2026 DESCRIPTION:Hochschule München (workshops Nov 7) and The Westin Grand Mu nich (main conference Nov 9)\; 10th edition.\n\nhttps://2026.bsidesmunic h.org/ URL:https://2026.bsidesmunich.org/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:139ef84c5c3b3ea7aff5600e@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261109 SUMMARY:ITU Plenipotentiary Conference 2026 (PP-26) DESCRIPTION:Doha\, Qatar\; ITU's quadrennial top governance conference at tended by all 194 member states — sets the Union's strategic plan\, el ects leadership\, and will address AI security\, cybersecurity mandates\ , and emerging technology governance.\n\nhttps://www.itu.int/en/events/p ages/Event-Details.aspx?eventid=23111 URL:https://www.itu.int/en/events/pages/Event-Details.aspx?eventid=23111 CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:59d3df2e8f9d00f8388dd5df@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261110 SUMMARY:CMMC 2.0 Phase 2: Mandatory Third-Party Certification DESCRIPTION:DoD contractors handling Controlled Unclassified Information must hold Level 2 CMMC certification from an accredited C3PAO as a condi tion of contract award — self-attestation is no longer sufficient\; ap proximately 80\,000 contractors affected\, reshaping how the DIB approac hes VDP and vulnerability management.\n\nhttps://www.acq.osd.mil/cmmc/ URL:https://www.acq.osd.mil/cmmc/ CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:6f7f9ea8d3ccd82e8f80b4d5@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261113 SUMMARY:India DPDP Rules: Consent Manager Framework Becomes Operational DESCRIPTION:Phase 2 of India's Digital Personal Data Protection Rules 202 5 (notified November 13\, 2025) activates — consent-manager registrati on and operation under the DPDPA becomes functional\; core data fiduciar y compliance (Phase 3) follows May 13\, 2027\; relevant for security res earchers handling Indian personal data.\n\nhttps://iapp.org/news/a/with- rules-finalized-india-s-dpdpa-takes-force URL:https://iapp.org/news/a/with-rules-finalized-india-s-dpdpa-takes-forc e CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:fca911536265fe28f84f002e@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261115 SUMMARY:33rd ACM CCS 2026 DESCRIPTION:World Forum\, The Hague\, NL\; top-tier academic security con ference co-located with European cyber-policy infrastructure.\n\nhttps:/ /www.sigsac.org/ccs/CCS2026/ URL:https://www.sigsac.org/ccs/CCS2026/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:1c65d4a6090e22dd4cf3e714@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261116 SUMMARY:Hardwear.io Netherlands 2026 DESCRIPTION:Amsterdam Marriott Hotel\; three days training plus two days conference plus HardPwn CTF — hardware and embedded security community hub for Europe.\n\nhttps://hardwear.io/nl-2026/ URL:https://hardwear.io/nl-2026/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:08fda012b4a3a1cd2fa09b7a@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261117 SUMMARY:IEEE S&P 2027 Cycle 2 paper deadline DESCRIPTION:48th IEEE Symposium on Security & Privacy (Montreal\, May 202 7)\; abstracts due Nov 10\, papers Nov 17 — top-tier venue for VDP/exp loitation/policy research.\n\nhttps://sp2027.ieee-security.org/cfpapers. html URL:https://sp2027.ieee-security.org/cfpapers.html CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:dc33d33eae410f39a38f5fc8@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261117 SUMMARY:CODE BLUE 2026 DESCRIPTION:Bellesalle Takadanobaba\, Tokyo\; Japan's flagship internatio nal security conference — APAC voice in vulnerability research / discl osure norms.\n\nhttps://codeblue.jp/en/ URL:https://codeblue.jp/en/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:f130549c238543e97efa4d11@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261118 SUMMARY:Aspen Cyber Summit DESCRIPTION:Capital Turnaround\, Washington DC\; US public-private cyber- policy convening with senior CISA / DOJ / Hill engagement.\n\nhttps://ww w.aspencybersummit.org/ URL:https://www.aspencybersummit.org/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:974c08402633cc098bbc0f48@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261119 SUMMARY:DefCamp 2026 DESCRIPTION:Bucharest\, Romania\; 16th edition of CEE's largest security conference — 2\,000+ experts from 50+ countries.\n\nhttps://def.camp/ URL:https://def.camp/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:ac11e2accc22e8c2b086c7de@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261202 SUMMARY:EU AI Act: Article 50(2) Watermarking Grace Period Closes DESCRIPTION:Systems placed on the market before August 2\, 2026 that gene rate synthetic audio\, image\, video\, or text content must comply with Article 50(2) watermarking/provenance-marking requirements by this date — the final grace provision from the Digital Omnibus.\n\nhttps://artif icialintelligenceact.eu/implementation-timeline/ URL:https://artificialintelligenceact.eu/implementation-timeline/ CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:5cf7143a381857b2a3d5be58@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261202 SUMMARY:Australia: PJCIS Statutory Review of SOCI Act Must Commence DESCRIPTION:The Parliamentary Joint Committee on Intelligence and Securit y must begin its statutory review of the Security of Critical Infrastruc ture Act no later than this date — will assess the effectiveness of Au stralia's critical infrastructure regime including cyber incident obliga tions.\n\nhttps://www.ashurst.com/en/insights/redefining-cyber-readiness -australia-passes-its-first-cyber-security-act/ URL:https://www.ashurst.com/en/insights/redefining-cyber-readiness-austra lia-passes-its-first-cyber-security-act/ CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:d3f276dbcef6edac5ffb0861@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261207 SUMMARY:CISA BOD 26-04: risk-based remediation (Phase III) DESCRIPTION:Under the new SSVC risk-tiered model\, FCEB agencies must rem ediate vulnerabilities per the directive's risk table\; non-CDM agencies report status every 7 days — the operational replacement for the old fixed KEV remediation timelines.\n\nhttps://www.cisa.gov/news-events/dir ectives/bod-26-04-prioritizing-security-updates-based-risk URL:https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-se curity-updates-based-risk CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:bfbd92f3c3050a3a39a6960e@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261207 SUMMARY:Black Hat Europe 2026 DESCRIPTION:ExCeL London\; EU industry policy + technical track converge here — closest European peer to Black Hat USA for the disclosure commu nity.\n\nhttps://www.blackhat.com/eu-26/ URL:https://www.blackhat.com/eu-26/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:42aeabb4738f486512c18c01@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261207 SUMMARY:UN Global Mechanism on ICT Security: Dedicated Thematic Groups DESCRIPTION:New York\; first working-level meetings of the permanent UN c yber mechanism's Dedicated Thematic Groups — where the technical detai l behind state-level cyber-norm and vulnerability-equities discussions i s worked out.\n\nhttps://dig.watch/processes/un-gge URL:https://dig.watch/processes/un-gge CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:0b6e231824e3064e2ca86e99@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261209 SUMMARY:EU Product Liability Directive: Applies to Digital Products DESCRIPTION:The revised EU PLD (2024/2853) applies to products placed on the market after this date — for the first time\, standalone software and digital elements are explicitly "products\," and failure to provide security updates can constitute a defect\, directly raising the legal st akes of slow patch cycles and inadequate disclosure handling.\n\nhttps:/ /eur-lex.europa.eu/eli/dir/2024/2853/oj/eng URL:https://eur-lex.europa.eu/eli/dir/2024/2853/oj/eng CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:7e3813e0b6e859181229a572@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261210 SUMMARY:Australia Privacy Act: Automated Decision-Making Transparency DESCRIPTION:New APP 1 obligations from the Privacy and Other Legislation Amendment Act 2024 take effect: Australian entities must disclose in pri vacy policies how personal information is used in automated decisions th at could significantly affect individuals' rights — a transparency req uirement touching AI systems that process personal data during security assessments.\n\nhttps://www.oaic.gov.au/privacy/guidance-and-advice/priv acy-and-other-legislation-amendment-act-2024 URL:https://www.oaic.gov.au/privacy/guidance-and-advice/privacy-and-other -legislation-amendment-act-2024 CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:5449ca8a72c65397a3eec37a@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261210 SUMMARY:Australia SOCI: Enhanced CIRMP All-Hazards Compliance DESCRIPTION:Six-month grace period for the Enhanced Critical Infrastructu re Risk Management Program Rules (F2026L00701\, commenced June 10\, 2026 ) expires — requiring all-hazards material-risk compliance across nine high-risk asset classes including cyber hazards.\n\nhttps://www.cyberas sure.com.au/blog-soci-aescsf-sp2-deadline URL:https://www.cyberassure.com.au/blog-soci-aescsf-sp2-deadline CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:d0bad9e1a2cef0b5b798d6ca@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261211 SUMMARY:EU CRA: target for sufficient notified bodies DESCRIPTION:Member States are to ensure enough notified bodies exist to p erform CRA conformity assessments\, avoiding market-entry bottlenecks ah ead of the main obligations.\n\nhttps://digital-strategy.ec.europa.eu/en /factpages/cyber-resilience-act-implementation URL:https://digital-strategy.ec.europa.eu/en/factpages/cyber-resilience-a ct-implementation CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:ef2c1e734a9b332d3224d8e9@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261212 SUMMARY:BSides London 2026 DESCRIPTION:Novotel London West\; long-running UK community con with a st rong rookie-track pipeline into the research community.\n\nhttps://bside s.london/ URL:https://bsides.london/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:8716da6a12b0bf098ad7c8a4@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261216 SUMMARY:UK DSIT Software Security Code of Practice: Evaluation Survey DESCRIPTION:Six-month call for evidence on the UK's voluntary Software Se curity Code (vulnerability disclosure + reporting expectations on softwa re vendors).\n\nhttps://www.gov.uk/government/calls-for-evidence/evaluat ion-survey-for-the-software-security-code-of-practice URL:https://www.gov.uk/government/calls-for-evidence/evaluation-survey-fo r-the-software-security-code-of-practice CATEGORIES:Policy Comment Deadlines TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:0f7b6e71729ce3f1d946075f@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261224 SUMMARY:EU eIDAS 2.0: Digital Identity Wallets Deployment Deadline DESCRIPTION:All 27 EU member states must make at least one certified Euro pean Digital Identity Wallet available to citizens and businesses — 24 months after implementing acts entered into force Dec 4\, 2024\; volunt ary and free\, creating new authentication infrastructure with identity- verification implications for cross-border security research.\n\nhttps:/ /eidasreadiness.com/eidas-2-timeline URL:https://eidasreadiness.com/eidas-2-timeline CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:f71c601c9ee27fe08832abda@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261227 SUMMARY:40C3 Chaos Communication Congress DESCRIPTION:Hamburg Messe\, Hamburg\; anchor European hacker congress — longstanding free-software\, civil-liberties\, and disclosure-ethics ve nue.\n\nhttps://events.ccc.de/en/ URL:https://events.ccc.de/en/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:8c5194d2116daf6f46f95161@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261231 SUMMARY:John Deere $99M settlement: offline diagnostic/repair-tool deadli ne DESCRIPTION:By this date Deere must let owners and independent repairers run reprogramming and diagnostics in offline mode and access the same to oling as its Dealer Technical Assistance Center — a concrete embedded- firmware access milestone from the April 2026 right-to-repair settlement .\n\nhttps://www.theregister.com/2026/04/09/john_deere_repair_settlement / URL:https://www.theregister.com/2026/04/09/john_deere_repair_settlement/ CATEGORIES:Right to Repair TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:bfd0f6531c59bce3ada0547c@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20261231 SUMMARY:UN Cybercrime Convention (Hanoi) closes for signature DESCRIPTION:40 ratifications required for entry into force\; a handful de posited so far against ~76 signatories — Articles 6-10 risk criminaliz ing unauthorized-access research without sufficient safeguards.\n\nhttps ://www.unodc.org/unodc/en/cybercrime/convention/home.html URL:https://www.unodc.org/unodc/en/cybercrime/convention/home.html CATEGORIES:International Developments TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:263f8cc6f454b0e5cda0bf30@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20270101 SUMMARY:Oregon SB 1596 Right to Repair (parts-pairing ban) enforcement be gins DESCRIPTION:Oregon's first-in-the-nation ban on "parts pairing" (software serialization that blocks replacement components) becomes enforceable — directly constraining the firmware-level lockouts researchers and re pairers otherwise have to circumvent.\n\nhttps://www.complianceandrisks. com/blog/sb-1596-right-to-repair-of-consumer-electronic-equipment/ URL:https://www.complianceandrisks.com/blog/sb-1596-right-to-repair-of-co nsumer-electronic-equipment/ CATEGORIES:Right to Repair TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:27962cd8f9f88bf5f0485b2c@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20270101 SUMMARY:New York RAISE Act DESCRIPTION:Frontier-model developers (>$500M revenue\, >10^26 FLOPs\, >$ 100M compute) must publish safety frameworks pre-deployment and report s afety incidents to NY DFS within 72h — first US state-level AI safety- incident reporting channel.\n\nhttps://www.wiley.law/alert-New-York-Fina lizes-RAISE-Act-for-Frontier-AI-Models-Law-Takes-Effect-January-1-2027 URL:https://www.wiley.law/alert-New-York-Finalizes-RAISE-Act-for-Frontier -AI-Models-Law-Takes-Effect-January-1-2027 CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:cc12d3da5fa44458c5fe4590@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20270101 SUMMARY:Colorado SB 189 (repeal-and-replace of the Colorado AI Act) DESCRIPTION:Signed May 14\, 2026\, SB 189 scraps the original Colorado AI Act (whose June 30\, 2026 effective date is now defunct) and replaces i t with a narrower ADMT transparency/disclosure framework for automated d ecision systems.\n\nhttps://leg.colorado.gov/bills/sb26-189 URL:https://leg.colorado.gov/bills/sb26-189 CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:b8701d57ce08b952a8f851d8@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20270101 SUMMARY:Illinois SB 315 (AI Safety Measures Act) DESCRIPTION:First US law mandating annual independent third-party AI safe ty audits of frontier developers\, plus AI critical-safety-incident repo rting (audit/transparency reporting phases in Jan 1\, 2028)\; passed bot h chambers May 29\, 2026\, awaiting the Governor's signature.\n\nhttps:/ /www.transparencycoalition.ai/news/illinois-lawmakers-send-significant-a i-frontier-model-safety-bill-to-gov-pritzker URL:https://www.transparencycoalition.ai/news/illinois-lawmakers-send-sig nificant-ai-frontier-model-safety-bill-to-gov-pritzker CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:af96125fec1dac8e02e03922@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20270101 SUMMARY:Indiana Consumer Data Protection Act (ICDPA) DESCRIPTION:20th US comprehensive state privacy law: 100K consumer thresh old\; "reasonable" admin/technical/physical security required\; AG-only enforcement\, 30-day cure\, $7\,500/violation.\n\nhttps://iga.in.gov/ic/ 2024/Title_24/Article_15.pdf URL:https://iga.in.gov/ic/2024/Title_24/Article_15.pdf CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:74168affd1edf778821d8322@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20270101 SUMMARY:Kentucky Consumer Data Privacy Act (HB 15) DESCRIPTION:Same threshold structure as Indiana\; data protection assessm ents required for processing created/generated after Jun 1\, 2026.\n\nht tps://apps.legislature.ky.gov/recorddocuments/bill/24RS/hb15/bill.pdf URL:https://apps.legislature.ky.gov/recorddocuments/bill/24RS/hb15/bill.p df CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:1ee63bdd4b55d71acc1c230a@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20270101 SUMMARY:Texas Responsible AI Governance Act (TRAIGA\, HB 149) DESCRIPTION:Bans manipulative/discriminatory AI\; first US state AI law w ith an explicit safe harbor for internal adversarial testing / red-team exercises — materially lowers legal risk for AI security research in T exas.\n\nhttps://capitol.texas.gov/tlodocs/89R/billtext/pdf/HB00149I.pdf URL:https://capitol.texas.gov/tlodocs/89R/billtext/pdf/HB00149I.pdf CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:2d48b1e93a3e37ff8975639c@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20270613 SUMMARY:FIRST Annual Conference 2027 DESCRIPTION:Bangkok\, Thailand\; FIRST's global annual conference for inc ident response and security teams — premier CERT/CSIRT coordination ve nue\; CFP not yet open.\n\nhttps://www.first.org/conference/ URL:https://www.first.org/conference/ CATEGORIES:Conferences\, CFPs\, and Events TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:64ae0dc9ef6c31cfbdef45f0@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20271211 SUMMARY:EU CRA: main obligations apply DESCRIPTION:The core CRA requirements take effect — secure-by-design\, CE marking\, SBOMs\, mandatory vulnerability handling and security updat es across the support period\; non-compliant connected products cannot b e placed on the EU market after this date.\n\nhttps://digital-strategy.e c.europa.eu/en/factpages/cyber-resilience-act-implementation URL:https://digital-strategy.ec.europa.eu/en/factpages/cyber-resilience-a ct-implementation CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:9593451c79b934388706d6c8@disclose.io DTSTAMP:20260101T000000Z DTSTART;VALUE=DATE:20301231 SUMMARY:EO 14412: Federal post-quantum cryptography migration (key establ ishment) DESCRIPTION:Under Executive Order 14412 ("Securing the Nation Against Adv anced Cryptographic Attacks")\, federal High Value Assets must migrate t o post-quantum cryptography for key establishment by this date (digital signatures follow by Dec 31\, 2031)\, with a companion procurement rule pulling federal contractors onto the same clock — years of rushed PQC library swaps will generate a fresh class of cryptographic-implementatio n bugs entering VDP intake.\n\nhttps://www.federalregister.gov/documents /2026/06/25/2026-12909/securing-the-nation-against-advanced-cryptographi c-attacks URL:https://www.federalregister.gov/documents/2026/06/25/2026-12909/secur ing-the-nation-against-advanced-cryptographic-attacks CATEGORIES:Regulations Coming Into Effect TRANSP:TRANSPARENT END:VEVENT END:VCALENDAR