LOWVulnerability
Verified
United States

SEC Proposes Updated Cybersecurity Incident Reporting Rules for Public Companies

·Source: SEC

Updated:

Executive Summary

SEC proposes amendments requiring public companies to report material cyber incidents within 48 hours, down from 4 business days.

Analysis

The SEC has proposed amendments to its cybersecurity incident reporting rules that would shorten the material incident reporting deadline from four business days to 48 hours. The proposal also requires quarterly disclosure of cyber risk management metrics and board-level cyber expertise. The rule change comes after criticism that the current four-day window allows too much time for market manipulation. Public comment period runs through May 2026.
Source Attribution

Originally published by SEC on Mar 7, 2026. Verified by: SEC.

Related Threats

LOWVulnerabilityNEW

CVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities route

<p><b>Bulletin ID:</b> 2026-082-AWS<br> <b>Scope:</b> AWS<br> <b>Content Type:</b> Important (requires attention)<br> <b>Publication Date:</b> 08/18/2026 10:00 AM PDT</p> <p><b>Description:</b></p> <p>OpenSearch Dashboards is the open-source visualization and management UI for OpenSearch, and ships as part of Amazon OpenSearch Service. We identified CVE-2026-75897, an improper input validation in

CVE-2026-75897
AWS Security Bulletins
CRITICALVulnerability

NVD CRITICAL: CVE-2026-75625 — Kraken agents fail to verify peer-to-peer downloaded blobs against their request...

Kraken agents fail to verify peer-to-peer downloaded blobs against their requested SHA-256 digest before committing to the content-addressable cache, relying only on CRC32 checksums for piece validation. Attackers on the agent-to-agent path or malicious peers can supply substituted content with forged CRC32 corrections that passes per-piece checks, poisoning the cache with attacker-chosen containe

CVE-2026-75625
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-75130 — Context7 through 2.1.2 contains a prompt injection vulnerability that allows att...

Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injecting unsanitized content through the Custom AI Instructions feature served via the MCP server. Attackers can poison the custom instructions to exfiltrate credentials from environment files to an attacker-controlled service and perform destru

CVE-2026-75130
NIST NVD