The US Food and Drug Administration replaced its medical-device cybersecurity guidance in February 2026, updating recommendations tied to statutory duties that took effect in 2023. Taiwan's regulator publishes a 2021 lifecycle guide and five reference templates, but the cited public material does not establish a US-style statutory submission rule.
INTERPOL and the United Nations Office on Drugs and Crime warned on March 17, 2026, that generative AI was making trusted-person impersonation easier. A familiar voice or face can now support a false request, so money and data should move only after a separate identity check.
The FIDO Alliance estimated in May 2026 that five billion passkeys were in use worldwide as more services offered passwordless sign-in. Passkeys block reusable secrets from reaching phishing sites, but users must plan for device loss and cross-platform access.
Coinkite warned on July 30, 2026, that seeds created by several Coldcard models on affected firmware may be exposed because seed generation used a general-purpose pseudorandom generator. A build integration error silently routed the process away from the hardware random-number generator without stopping the firmware build.
LayerX reported on June 29, 2026, that six agentic browsers and browser plugins copied test SSH credentials after a rigged online game changed the rules they followed. The proof of concept shows how untrusted web content can reach authenticated resources when an agent is allowed to browse and act with a user's access.
Taiwan completed government trials of three zero-trust controls between 2022 and 2024, while 47 top-tier agencies received help deploying identity checks. Financial regulators are taking a phased approach that starts with guidance and may later put implementation principles into baseline rules.
