TZUTC: -0500   
   MSGID: 2024.consprcy@1:2320/105 2dd62351   
   PID: Synchronet 3.21a-Linux master/123f2d28a Jul 12 2025 GCC 12.2.0   
   TID: SBBSecho 3.28-Linux master/123f2d28a Jul 12 2025 GCC 12.2.0   
   BBSID: CAPCITY2   
   CHRS: ASCII 1   
   FORMAT: flowed   
   The EU wants to overhaul cybersecurity to shut out 'high-risk' foreign   
   entities   
      
   Date:   
   Wed, 21 Jan 2026 11:39:02 +0000   
      
   Description:   
   European policymakers submit proposal to streamline the Cybersecurity Act in   
   response to a rise in critical service attacks.   
      
   FULL STORY   
      
   The European Commission has set out plans to revise its Cybersecurity Act,   
   which it says comes in response to an increase in attacks on critical    
   services and democratic institutions.    
      
   The proposed changes set out a '"cyber-secure by design" approach, speeding    
   up and simplifying the certification process to help reduce the reliance on   
   suppliers deemed to have national security concerns.    
      
   Lawmakers are worried about rising activity from state-backed groups as   
   geopolitical tensions continue globally.   
      
   European proposal targets critical service cybersecurity   
      
   "Recent cybersecurity incidents have highlighted the major risks posed by   
   vulnerabilities in the ICT supply chains, which are essential to the   
   functioning of critical services and infrastructure," the Commission wrote in   
   an update .    
      
   The proposal enables the mandatory derisking of telecom networks from   
   high-risk suppliers, building on the existing 5G security toolbox that's had   
   uneven adoption across the bloc.    
      
   EU Agency for Cybersecurity (ENISA) certifications will be voluntary, but   
   serve as a way to prove compliance with European regulation. "Ultimately, the   
   renewed [European Cybersecurity Certification Framework (ECCF)] will be a   
   competitive asset for EU businesses," the post reads.    
      
   Certification will cover products, services, processes, managed security   
   services and organizational cyber posture.    
      
   Policymakers also want to simplify the NIS2 Directive to ease compliance for   
   an estimated 28,700 companies.    
      
   Changes to the Cybersecurity Act and the NIS2 Directive are subject to   
   approval, after which point bloc members will have one year to implement the   
   changes.    
      
   Tech Sovereignty, Security and Democracy EVP Henna Virkkunen described   
   cybersecurity threats as "strategic risks to our democracy, economy, and way   
   of life."    
      
   "With the new Cybersecurity Package, we will have the means in place to    
   better protect our critical ICT supply chains but also to combat cyber    
   attacks decisively."    
      
   ======================================================================   
   Link to news story:   
   https://www.techradar.com/pro/security/the-eu-wants-to-overhaul-cybersecurity-   
   to-shut-out-high-risk-foreign-entities   
      
   $$   
   --- SBBSecho 3.28-Linux   
    * Origin: Capitol City Online (1:2320/105)   
   SEEN-BY: 105/81 106/201 128/187 129/14 305 153/7715 154/110 218/700   
   SEEN-BY: 226/30 227/114 229/110 134 206 300 307 317 400 426 428 470   
   SEEN-BY: 229/664 700 705 266/512 291/111 320/219 322/757 342/200 396/45   
   SEEN-BY: 460/58 633/280 712/848 902/26 2320/0 105 304 3634/12 5075/35   
   PATH: 2320/105 229/426