ACN

NIS from 2027, simplified registration: what changes for entities already on the register

NIS from 2027, simplified registration: what changes for entities already on the register

29 Oct , 2026 - News

On 23 October 2026 the Italian National Cybersecurity Agency (ACN) announced the simplification of NIS registration from 2027. The rules are set out in the new determination of the Director General (no. 314287/2026), applicable from 25 October 2026, which updates and replaces the one of 13 April 2026. In short: entities already on the NIS […]

, , , ,

After PHP2Shell: staying up to date is a habit, not an emergency

After PHP2Shell: staying up to date is a habit, not an emergency

23 Oct , 2026 - News

On 21 October 2026 the PHP team released emergency updates for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell: they allow code to be run remotely on a vulnerable server without authenticating (CVSS 9.2). Institutional and business websites in several countries were taken offline pending the update. ACN’s CSIRT Italia published advisory AL07/261021/CSIRT-ITA and updated […]

, , , ,

AI Act: Italy’s Decree 179/2026, Penalties and What Changes for SMEs

AI Act: Italy’s Decree 179/2026, Penalties and What Changes for SMEs

13 Oct , 2026 - News

Legislative Decree no. 179 of 7 October 2026, published in Official Gazette no. 234 on 8 October, aligns Italian law with Regulation (EU) 2024/1689, the AI Act. It enters into force on 23 October 2026. It has 54 articles in five chapters: general provisions, powers of the national authorities, AI in education, the professions, work, […]

, , , , , ,

NIS: what changes for regulated entities — updated register, reinforced security measures and the 2027 registration window

NIS: what changes for regulated entities — updated register, reinforced security measures and the 2027 registration window

22 Sep , 2026 - News

On 18 September 2026 the Italian National Cybersecurity Agency (ACN) announced important news for NIS entities: the update of the register of regulated organisations, the launch of the consultation on the new reinforced security measures, and the date of the next registration window. At the same time, the Agency published the Vademecum NIS, which gathers […]

, , , , , ,