<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Spoiledlunch</title><link>https://072f2ff5.spoiledlunch.pages.dev/</link><description>Nerdy Stuff. Tech Talk. Zero Freshness. Analysis and commentary on GRC, security, and AI.</description><generator>Hugo 0.160.1</generator><language>en-us</language><lastBuildDate>Thu, 16 Apr 2026 12:00:00 +0000</lastBuildDate><atom:link href="https://072f2ff5.spoiledlunch.pages.dev/news/" rel="self" type="application/rss+xml"/><item><title>EDPB Sharpens Research Guidance and Speeds Up Anonymisation Work</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-16-edpb-brings-clarity-to-data-processing-for-scientific-research-speeds-up-the-finalisation-of-the-anonymisation-guidelines-and-approves-first-european-data-protection-seal-as-a-tool-for-transfers/</link><pubDate>Thu, 16 Apr 2026 12:00:00 +0000</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-16-edpb-brings-clarity-to-data-processing-for-scientific-research-speeds-up-the-finalisation-of-the-anonymisation-guidelines-and-approves-first-european-data-protection-seal-as-a-tool-for-transfers/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • April 16, 2026</p><p><strong>Topics:</strong> GRC</p><p>Summary: EDPB used its April plenary to tighten guidance on scientific-research processing, accelerate anonymisation work, and approve a new …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-16-edpb-brings-clarity-to-data-processing-for-scientific-research-speeds-up-the-finalisation-of-the-anonymisation-guidelines-and-approves-first-european-data-protection-seal-as-a-tool-for-transfers/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>GRC</category><category>grc</category><category>edpb</category><category>research</category><category>anonymisation</category></item><item><title>NIST Publishes Hardware Security White Paper on Firmware-Based Monitoring</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-15-nist-publishes-hardware-security-white-paper-on-firmware-based-monitoring/</link><pubDate>Wed, 15 Apr 2026 09:00:00 -0400</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-15-nist-publishes-hardware-security-white-paper-on-firmware-based-monitoring/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • April 15, 2026</p><p><strong>Topics:</strong> Security</p><p>Summary: NIST published Cybersecurity White Paper 52, &ldquo;Firmware-Based Monitoring for Bus-Based Computer Systems,&rdquo; on April 15, 2026. The …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-15-nist-publishes-hardware-security-white-paper-on-firmware-based-monitoring/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>Security</category><category>NIST</category><category>hardware security</category><category>firmware</category><category>forensics</category></item><item><title>FTC Targets Noncompete Agreements in Pest Control Enforcement Action</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-15-ftc-takes-action-against-noncompete-agreements-securing-protections-for-workers/</link><pubDate>Wed, 15 Apr 2026 12:00:00 +0000</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-15-ftc-takes-action-against-noncompete-agreements-securing-protections-for-workers/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • April 15, 2026</p><p><strong>Topics:</strong> GRC</p><p>Summary: The FTC ordered Rollins to stop enforcing noncompete agreements against thousands of workers and paired the action with warning letters to …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-15-ftc-takes-action-against-noncompete-agreements-securing-protections-for-workers/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>GRC</category><category>grc</category><category>ftc</category><category>labor</category><category>enforcement</category></item><item><title>NIST Updates NVD Operations to Address Record CVE Growth</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-15-nist-updates-nvd-operations-to-address-record-cve-growth/</link><pubDate>Wed, 15 Apr 2026 12:00:00 +0000</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-15-nist-updates-nvd-operations-to-address-record-cve-growth/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • April 15, 2026</p><p><strong>Topics:</strong> Security</p><p>Summary: NIST is changing NVD operations to keep up with record CVE volume, signaling that vulnerability teams should expect continued prioritization …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-15-nist-updates-nvd-operations-to-address-record-cve-growth/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>Security</category><category>security</category><category>nist</category><category>nvd</category><category>vulnerabilities</category></item><item><title>FTC Bars Forever Living From Deceptive Earnings Claims</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-14-ftc-order-to-prohibit-forever-living-and-its-operators-from-deceiving-consumers-about-potential-earnings/</link><pubDate>Tue, 14 Apr 2026 12:00:00 +0000</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-14-ftc-order-to-prohibit-forever-living-and-its-operators-from-deceiving-consumers-about-potential-earnings/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • April 14, 2026</p><p><strong>Topics:</strong> GRC</p><p>Summary: The FTC settled with Forever Living and its operators, permanently barring deceptive earnings claims and reinforcing that consumer-protection …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-14-ftc-order-to-prohibit-forever-living-and-its-operators-from-deceiving-consumers-about-potential-earnings/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>GRC</category><category>grc</category><category>ftc</category><category>enforcement</category><category>consumer-protection</category></item><item><title>EDPB Annual Report 2025 Highlights the Board's Enforcement Priorities</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-09-edpb-annual-report-2025-supporting-stakeholders-through-guidance-and-dialogue/</link><pubDate>Thu, 09 Apr 2026 12:00:00 +0000</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-09-edpb-annual-report-2025-supporting-stakeholders-through-guidance-and-dialogue/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • April 9, 2026</p><p><strong>Topics:</strong> GRC</p><p>Summary: EDPB&rsquo;s 2025 annual report summarizes the board&rsquo;s guidance, coordination, and enforcement priorities, giving privacy teams a …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-09-edpb-annual-report-2025-supporting-stakeholders-through-guidance-and-dialogue/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>GRC</category><category>grc</category><category>edpb</category><category>enforcement</category><category>privacy</category></item><item><title>OpenAI Opens Applications for a Safety Fellowship Focused on Alignment Research</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-06-openai-opens-applications-for-a-safety-fellowship-focused-on-alignment-research/</link><pubDate>Mon, 06 Apr 2026 09:00:00 -0700</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-06-openai-opens-applications-for-a-safety-fellowship-focused-on-alignment-research/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • April 6, 2026</p><p><strong>Topics:</strong> AI</p><p>Summary: OpenAI announced the OpenAI Safety Fellowship on April 6, 2026, describing it as a pilot program for external researchers, engineers, and …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-04-06-openai-opens-applications-for-a-safety-fellowship-focused-on-alignment-research/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>AI</category><category>OpenAI</category><category>AI safety</category><category>alignment</category><category>research</category></item><item><title>EDPB Publishes One-Stop-Shop Digest on Legitimate Interest</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-26-one-stop-shop-case-digest-on-the-legal-basis-of-legitimate-interest/</link><pubDate>Thu, 26 Mar 2026 12:00:00 +0000</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-26-one-stop-shop-case-digest-on-the-legal-basis-of-legitimate-interest/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • March 26, 2026</p><p><strong>Topics:</strong> GRC</p><p>Summary: EDPB published a digest of one-stop-shop decisions on legitimate interest, giving privacy teams a clearer signal on how regulators are …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-26-one-stop-shop-case-digest-on-the-legal-basis-of-legitimate-interest/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>GRC</category><category>grc</category><category>edpb</category><category>gdpr</category><category>legitimate-interest</category></item><item><title>EDPB conference on cross-regulatory cooperation: what we learned</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-24-edpb-conference-on-cross-regulatory-cooperation-what-we-learned/</link><pubDate>Tue, 24 Mar 2026 12:00:00 +0000</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-24-edpb-conference-on-cross-regulatory-cooperation-what-we-learned/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • March 24, 2026</p><p><strong>Topics:</strong> GRC</p><p>Summary: EDPB used its March conference to press for deeper coordination between privacy regulators and adjacent EU authorities, signaling that …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-24-edpb-conference-on-cross-regulatory-cooperation-what-we-learned/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>GRC</category><category>grc</category><category>edpb</category><category>regulation</category><category>coordination</category></item><item><title>NIST Releases CSF 2.0 Quick-Start Guides for ERM and Informative References</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-23-nist-releases-csf-2-0-quick-start-guides-for-erm-and-informative-references/</link><pubDate>Mon, 23 Mar 2026 09:00:00 -0400</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-23-nist-releases-csf-2-0-quick-start-guides-for-erm-and-informative-references/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • March 23, 2026</p><p><strong>Topics:</strong> GRC</p><p>Summary: NIST announced two Cybersecurity Framework 2.0 quick-start guide updates on March 23, 2026. The agency released the final SP 1308 guide on …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-23-nist-releases-csf-2-0-quick-start-guides-for-erm-and-informative-references/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>GRC</category><category>NIST</category><category>CSF 2.0</category><category>ERM</category><category>governance</category></item><item><title>NIST Finalizes Revision 3 of Its DNS Deployment Guide</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-19-nist-finalizes-revision-3-of-its-dns-deployment-guide/</link><pubDate>Thu, 19 Mar 2026 09:00:00 -0400</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-19-nist-finalizes-revision-3-of-its-dns-deployment-guide/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • March 19, 2026</p><p><strong>Topics:</strong> Security</p><p>Summary: NIST published the final version of SP 800-81 Revision 3, &ldquo;Secure Domain Name System (DNS) Deployment Guide,&rdquo; on March 19, 2026. …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-19-nist-finalizes-revision-3-of-its-dns-deployment-guide/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>Security</category><category>NIST</category><category>DNS</category><category>DNSSEC</category><category>zero trust</category></item><item><title>EDPB and EDPS Back Stronger EU Cybersecurity Rules While Guarding Personal Data</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-19-edpb-and-edps-support-strengthening-eu-s-cybersecurity-and-easing-compliance-while-protecting-individuals-personal-data/</link><pubDate>Thu, 19 Mar 2026 12:00:00 +0000</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-19-edpb-and-edps-support-strengthening-eu-s-cybersecurity-and-easing-compliance-while-protecting-individuals-personal-data/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • March 19, 2026</p><p><strong>Topics:</strong> GRC</p><p>Summary: EDPB and EDPS issued a joint opinion on the Commission&rsquo;s CSA2 and NIS2 proposals, arguing the EU can streamline cybersecurity …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-19-edpb-and-edps-support-strengthening-eu-s-cybersecurity-and-easing-compliance-while-protecting-individuals-personal-data/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>GRC</category><category>grc</category><category>edpb</category><category>cybersecurity</category><category>privacy</category></item><item><title>NIST Maps the Hard Parts of Monitoring Deployed AI Systems</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-09-nist-maps-the-hard-parts-of-monitoring-deployed-ai-systems/</link><pubDate>Mon, 09 Mar 2026 09:00:00 -0400</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-09-nist-maps-the-hard-parts-of-monitoring-deployed-ai-systems/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • March 9, 2026</p><p><strong>Topics:</strong> AI</p><p>Summary: NIST published AI 800-4, &ldquo;Challenges to the Monitoring of Deployed AI Systems,&rdquo; on March 9, 2026. The report groups monitoring …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-03-09-nist-maps-the-hard-parts-of-monitoring-deployed-ai-systems/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>AI</category><category>NIST</category><category>AI monitoring</category><category>AI governance</category><category>standards</category></item><item><title>EDPB Sets a 2026-2027 Programme Focused on Compliance and Regulatory Coordination</title><link>https://072f2ff5.spoiledlunch.pages.dev/news/2026-02-12-edpb-sets-a-2026-2027-programme-focused-on-compliance-and-regulatory-coordination/</link><pubDate>Thu, 12 Feb 2026 09:00:00 +0100</pubDate><guid>https://072f2ff5.spoiledlunch.pages.dev/news/2026-02-12-edpb-sets-a-2026-2027-programme-focused-on-compliance-and-regulatory-coordination/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • February 12, 2026</p><p><strong>Topics:</strong> GRC</p><p>Summary: The European Data Protection Board adopted its 2026-2027 work programme on February 12, 2026. The programme emphasizes making GDPR compliance …</p><p><a href="https://072f2ff5.spoiledlunch.pages.dev/news/2026-02-12-edpb-sets-a-2026-2027-programme-focused-on-compliance-and-regulatory-coordination/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>GRC</category><category>EDPB</category><category>GDPR</category><category>privacy</category><category>compliance</category></item></channel></rss>