CYBERSECURITY
BINANCE, A CRYPTOCURRENCY EXCHANGE PLATFORM, SERIOUSLY HIT
The cryptocurrency exchange platform Binance announced on Thursday, October 29, that it had fallen victim to a major hack estimated to cost around $6.3 billion (about €5.6 billion), with half of the funds frozen to prevent a massive theft. Binance posted several conflicting messages on X, first assuring that all funds deposited by customers on its site were “completely safe,” before later announcing that it would cover “all losses.”
European Publishers Push Back Against Big Tech’s Use of Their Content for AI
Publishers in Europe are taking a stand against the way large tech platforms use their content to power AI services. In the space of a few days, French publishers have turned to Brussels, the UK competition authority has raised concerns about Meta, and a Norwegian court has stepped in.
French press files complaint against Google
On Thursday, 29 October, five French organisations representing the press, online publishers and digital marketing filed a complaint with the European Commission. It concerns Google’s rollout of AI Overviews and AI Mode in France. The groups are:
- the Collective for Digital Marketing Actors (CPA)
- the National Federation of Specialised Information Press (FNPS)
- the Group of Online Content and Service Publishers (Geste)
- the Union of Magazine Press Publishers (SEPM)
- the Union of Independent Online News Press (Spiil)
Their complaint feeds into a formal investigation the Commission opened in December 2025. Brussels is examining whether Google broke EU competition rules by using publishers’ content and YouTube videos to power its own AI services. The French groups say they want to “contribute to the investigation process by providing factual information collected from French publishers and an analysis of practices observed since the deployment of AI Overviews and AI Mode”.
UK competition authority turns to Meta
The UK’s Competition and Markets Authority (CMA) has raised concerns about Meta’s new terms of use. According to the CMA, they could allow Meta “to collect content from websites of businesses and publishers that use its services, and then use it to develop and provide its own products and services, including its AI features, without those companies having a say in whether their content is used or how it is used.” The concerns were raised in particular by the News Media Association, which represents British press publishers, and by the Movement for an Open Web.
Norwegian court halts Meta’s new terms
In Norway, a court has temporarily banned Meta from applying the same new terms, which the country’s major media outlets are challenging. They say the terms would let Meta collect their articles, photos and videos, including content reserved for paying subscribers.
Why it matters
These cases raise a key question for Europe’s digital economy: who controls the value created by content once AI systems reuse it? The outcome could shape how AI services are built and how publishers are paid in the years ahead.
REGULATION
EU DIGITAL WALLET SOON READY TO USE
The European digital identity wallet, or European Digital Identity Wallet (EUDI Wallet), is meant to let its holder present credentials and authenticate with public and private services. It should also give access to qualified electronic signatures. Identity cards, driving licenses, or even diplomas could thus be used directly from an app.
What makes it special is the kind of proof it allows you to exchange. A credential is issued by an identified organization, stored in the wallet, and then presented by its holder to a service. That service can verify its origin, integrity, and validity. In other words, the authenticity of a document doesn’t just depend on how it looks anymore.
Another principle of the digital wallet is to limit the information shared. To access an adult-only service, a user could prove they are of age without handing over their entire ID card. This selective disclosure aims to limit the data which are shared.
The Wallet will be proposed, as of 2027, either by the States or by entitled suppliers. It will be used across the Union, so that a wallet delivered in France can be used in Germany or in the Netherlands. By the end of 2027, it should be accepted by private companies, and will be mandatory for some public services.
FRENCH PRESS TAKES ON GOOGLE
Five French organizations representing the press, online publishers, and digital marketing players filed a complaint with the European Commission on Thursday, October 29, regarding Google’s practices related to the rollout of AI Overviews and AI Mode in France. These organizations are the Collective for Digital Marketing Actors (CPA), the National Federation of Specialized Information Press (FNPS), the Group of Online Content and Service Publishers (Geste), the Union of Magazine Press Publishers (SEPM), and the Union of Independent Online News Press (Spiil).
Through this complaint, these groups aim to directly contribute to an ongoing formal investigation in Brussels: launched by the European Commission in December 2025, it seeks to determine whether Google has violated European Union competition rules by using website publishers’ content and videos posted on YouTube to feed its own artificial intelligence services. In a statement, these French organizations say they want to “contribute to the investigation process by providing factual information collected from French publishers and an analysis of practices observed since the deployment of AI Overviews and AI Mode”
UK Competition and Markets Authority ALSO TAKES ON META TO DEFEND PRESS
According to the CMA, the new conditions set by META could allow this group “to collect content from websites of businesses and publishers that use its services, and then use it to develop and provide its own products and services, including its AI features, without those companies having a say in whether their content is used or how it is used.” These concerns were notably expressed by the News Media Association, which represents British press publishers, and by the Movement for an Open Web (Mow) collective, according to the statement.
At the same time, in Norway, a court temporarily banned Meta from applying these new terms of use, which are being challenged by the country’s major media outlets. According to these media, the terms would allow Meta to collect their articles, photos, and videos, including content reserved for paying subscribers.
Advanced Tech
Space Sector Hit by More Than One Cyberattack a Day in 2025
The space sector faced more than one cyberattack a day in 2025, yet not one reached a satellite in orbit. That is the main finding of a new threat landscape report by Clémence Poirier at ETH Zurich’s Center for Security Studies (CSS). She has tracked cyber activity against the space sector since 2022. Her count for 2025: 407 operations against at least 183 organisations (Satellite Today).
The attacks land on the ground
Distributed denial-of-service (DDoS) attacks made up 61% of incidents, followed by ransomware at 13% and data breaches at 5%. Every incident hit infrastructure on the ground, such as ground stations, corporate networks and user modems. None touched a spacecraft.
Hacktivists dominated the 139 threat actors identified. In earlier years, state-linked groups had drawn most of the attention. Attacks also followed geopolitical crises so closely that researchers could often tell which conflict was behind a given spike.
A quiet orbit isn’t necessarily a safe one
The clean record in orbit is less reassuring than it looks. As Poirier points out, most satellites have no built-in way to detect a cyber intrusion, so an attack in space could go unnoticed for a long time. The record shows what tools on the ground happen to catch, not the real level of threat.
One case shows what’s at stake. The Interlock ransomware group claimed to have stolen around 4.2 terabytes of data from a defence contractor in the space and munitions supply chain. The leaked files reportedly mention customers across the sector.
Why it matters
The ground segment is taking the hits we can count. Orbit stays quiet mainly because almost nothing up there is watching. As space infrastructure becomes more important to Europe’s security and economy, both need protecting: the systems on the ground and the satellites themselves.
Read the full report from ETH Zurich’s CSS and the full breakdown on CYSAT News.
CRA Reporting: ENISA’s Single Reporting Platform One Month On
More than a month has passed since the Cyber Resilience Act (CRA) reporting obligations started to apply on 11 September 2026. The work isn’t over: ENISA, the EU Agency for Cybersecurity, continues to support manufacturers as they adjust, and it is working to improve and expand its Single Reporting Platform (SRP) over the coming months, based on operational experience and user feedback.
What manufacturers must report
Under the CRA, manufacturers of products with digital elements must report actively exploited vulnerabilities and severe incidents affecting their products. They report through the SRP, with tight deadlines:
– An early warning within 24 hours.
– A fuller notification within 72 hours.
– A final report later.
These reporting rules are the first part of the CRA to apply. The rest of the regulation, including its security requirements for products, follows in December 2027.
Resources to get started
ENISA has published practical guides to help manufacturers use the platform:
SRP factsheet: now available in 24 EU languages. It covers what must be reported, who must report, when and how.
SRP User Manual and Guidance: practical tips for using the platform.
All resources, including the factsheet in your language, are available on ENISA’s Single Reporting Platform page.
The expert view: Red Alert Labs
[Placeholder: Red Alert Labs’ view on CRA reporting so far. For example, early lessons from manufacturers, common challenges in meeting the 24-hour deadline, and how companies should prepare for full CRA application in December 2027.]”
