Technology

The European Commission's July 7 Action Plan on Cybersecurity and AI (COM(2026) 577) introduces no new law but coordinates existing obligations under the AI Act, NIS2, and the Cyber Resilience Act, while directing ENISA and the Joint Research Centre to build a secure AI testing platform and pre-market evaluation capacity for frontier models. Five flagship measures include an EU Grand Challenge on AI for cybersecurity and a campaign to secure critical open-source software in the AI supply chain. The plan arrives weeks before August 2, when the bulk of AI Act enforcement provisions take effect, and explicitly urges Ireland, Spain, France, and the Netherlands to complete outstanding NIS2 transposition.

Black Kite's 2026 ransomware report tracked 7,551 publicly disclosed victims between April 2025 and March 2026, with second-half disclosures running 60 percent above the first half and March 2026 setting a four-year single-month record at 861 incidents. Qilin alone claimed 1,358 victims, a 443 percent year-over-year jump, while Manufacturing led all sectors for the fourth consecutive year with 1,660 incidents. A separate Sophos survey of attacked organizations found ransom demands falling and backup recovery improving, meaning the two reports together describe a threat environment that is simultaneously broader in reach and somewhat cheaper per incident for individual victims.

On July 21, 2026, Treasury Secretary Scott Bessent stated the U.S. is prepared to sanction Chinese open-source AI developers if investigations confirm their models were trained by distilling outputs from American systems, citing detected watermarks as preliminary evidence. The remarks follow a June 2026 letter from Anthropic to the Senate Banking Committee alleging Alibaba conducted approximately 28.8 million exchanges with Claude models via roughly 25,000 fraudulent accounts to extract capabilities. No specific targets, enforcement mechanisms, or Federal Register actions have been announced, and the September 2026 U.S.–China AI talks, which Bessent is set to lead, represent the next concrete inflection point for whether this posture hardens into regulation or becomes a negotiating tool.