buildOne report1 publisher Grid-tech vendors have had to report actively exploited vulnerabilities and severe incidents under the EU Cyber Resilience Act since 11 September 2026. SBOMs and vulnerability handling become mandatory on 11 December 2027.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap−5
- Incentives
- Insufficient
- Confidence60
Kai Wegner has ruled out paying, which leaves a seven-day clock running on 5.79 terabytes the group says it holds. Two Berlin department networks were already offline for days, and the city still cannot say what was in the files.
Perspective Coverage
3 publishers
- Builder
- Builder 13%
- Operator
- Operator 77%
- Investor
- Investor 10%
Reality
- Evidence65
- Adoption
- Insufficient
- Hype gap−25
- Incentives60
- Confidence62
Kiteworks told customers to shut its file-transfer servers for nine hours this weekend after a federal warning. The company says its current release fixes every known flaw, so the outage guards against one it does not know about.
Perspective Coverage
3 publishers
- Builder
- Builder 12%
- Operator
- Operator 63%
- Investor
- Investor 25%
Reality
- Evidence60
- Adoption50
- Hype gap+25
- Incentives65
- Confidence55
Shell says it is investigating after Clop claimed 89GB of engineering data. It is one of 43 names the gang tied to a single flaw in internet-exposed PTC Windchill and FlexPLM.
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap+25
- Incentives60
- Confidence58
Isolated since Friday and still dark when the Senate Chancellery spoke on Monday, two Berlin ministries show that government containment now means an accepted outage.
Perspective Coverage
3 publishers
- Builder
- Builder 13%
- Operator
- Operator 77%
- Investor
- Investor 10%
Reality
- Evidence70
- Adoption
- Insufficient
- Hype gap+5
- Incentives45
- Confidence65
The Senate says it will not pay and has now dated a second outflow to August 7 through 12. Twenty-two days after that outflow was first reported, it has published nothing for the people whose records went.
Perspective Coverage
6 publishers
- Builder
- Builder 20%
- Operator
- Operator 68%
- Investor
- Investor 12%
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap+20
- Incentives70
- Confidence62
The G7 Cyber Security Working Group's June call to action says the quantum threat is off the radar and under-resourced at most organizations, and it hands CISOs the wording to fund a cryptographic inventory this cycle.
Perspective Coverage
5 publishers
- Builder
- Builder 22%
- Operator
- Operator 55%
- Investor
- Investor 23%
Reality
- Evidence72
- Adoption30
- Hype gap+10
- Incentives60
- Confidence68