PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What You Should Know About The Next Wave of EU AI Act Requirements

hackerone.com | blog | #ai-security | #red-teaming | #compliance | #gpai | #eu-ai-act | #ai-regulation | #high-risk-ai | #enforcement
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Starting August 2, 2025, key EU AI Act requirements take effect, impacting high-risk AI systems and GPAI models. Learn how to align security with compliance.
Published
Collected

Related coverage

blog · hackerone.com
The EU’s GPAI Code of Practice Highlights A Security-Centered Approach to AI
The EU's final GPAI Code of Practice is a voluntary framework helping AI developers meet AI Act obligations. It elevates red teaming, vulnerability disclosure, and bug bounties as core practices.
blog · jfrog.com
The AI/ML Regulatory Landscape and How to Stay Ahead
Mapping the AI/ML regulatory landscape: the EU AI Act's risk tiers with fines up to 6% of global revenue, and US rules at state (CA, CO, NY, TX, WA) and federal levels — plus readiness advice.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
What Automated CTEM Tools Miss, and Why Human Attackers Still Win
HackerOne on the limits of automated CTEM and BAS tools: they only validate known attack patterns, while chained exploits, business logic flaws and prompt injection still need human attackers.
blog · hackerone.com
Advancing AI Red Teaming: Agentic Taxonomies and Governance-Ready Reporting
AI Red Teaming now maps validated agentic exploit paths to OWASP, NIST, ISO, and the EU AI Act. Get governance-ready reporting without spreadsheets.
blog · hackerone.com
How to Choose the Right AI Testing Approach: AI Penetration Testing, AI Red Teaming, and Beyond
A maturity-based framework for AI security testing: add-on LLM pentests for simple AI features, standalone pentests plus red teaming for sensitive-data LLMs, continuous assurance at higher maturity.
Back