<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>CSIDIA — Operational notes</title><description>Operational guides on data, AI and compliance in critical sectors: NIS2, AI Act, predictive maintenance, decision intelligence.</description><link>https://csidia.com/</link><language>en</language><item><title>The Kimi K3 licence: what does it actually stop you doing?</title><link>https://csidia.com/en/notes/licenza-kimi-k3-cosa-vieta-davvero/</link><guid isPermaLink="true">https://csidia.com/en/notes/licenza-kimi-k3-cosa-vieta-davvero/</guid><description>Moonshot has published the Kimi K3 licence text. Who must sign a separate agreement, who owes nothing, and the line procurement should read first.</description><pubDate>Wed, 29 Jul 2026 00:00:00 GMT</pubDate></item><item><title>AI transparency: the EU guidelines say who is on the hook from 2 August</title><link>https://csidia.com/en/notes/articolo-50-linee-guida-trasparenza-ia/</link><guid isPermaLink="true">https://csidia.com/en/notes/articolo-50-linee-guida-trasparenza-ia/</guid><description>The Commission’s guidelines on Article 50 of the AI Act: the duty applies regardless of when you bought the system. Who is in scope, and what to do now.</description><pubDate>Wed, 29 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Who answers for the benefit figures you publish?</title><link>https://csidia.com/en/notes/chi-risponde-dei-numeri-di-beneficio/</link><guid isPermaLink="true">https://csidia.com/en/notes/chi-risponde-dei-numeri-di-beneficio/</guid><description>The UK statistics regulator did not write to the supplier, but to the body that had published the figures. What that changes in AI procurement specifications.</description><pubDate>Wed, 29 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Bull and Kalray: in AI infrastructure the choice that binds you most is the network</title><link>https://csidia.com/en/notes/bull-kalray-interconnessione-ultra-ethernet/</link><guid isPermaLink="true">https://csidia.com/en/notes/bull-kalray-interconnessione-ultra-ethernet/</guid><description>On 28 July Bull and Kalray announced Ultra Ethernet-compatible interconnects. Why the network fabric is the least visible lock-in in a data hall.</description><pubDate>Wed, 29 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Tracking pixels in email: what you need in place by 29 October 2026</title><link>https://csidia.com/en/notes/tracking-pixel-email-29-ottobre-2026/</link><guid isPermaLink="true">https://csidia.com/en/notes/tracking-pixel-email-29-ottobre-2026/</guid><description>Six months from the Official Gazette of 29 April: the deadline is 29 October 2026, not the 21st. What the Italian regulator asks of anyone tracking opens.</description><pubDate>Wed, 29 Jul 2026 00:00:00 GMT</pubDate></item><item><title>What must a model’s technical report tell you before you install it?</title><link>https://csidia.com/en/notes/rapporto-tecnico-modello-cosa-dichiara/</link><guid isPermaLink="true">https://csidia.com/en/notes/rapporto-tecnico-modello-cosa-dichiara/</guid><description>On 27 July the Kimi K3 weights arrived with a 47-page technical report. What that document actually declares, what it leaves out and why you need it.</description><pubDate>Tue, 28 Jul 2026 00:00:00 GMT</pubDate></item><item><title>AI for legality: what it takes for an automated analysis to hold up</title><link>https://csidia.com/en/notes/ia-legalita-analisi-automatica-controllo-pubblico/</link><guid isPermaLink="true">https://csidia.com/en/notes/ia-legalita-analisi-automatica-controllo-pubblico/</guid><description>On 27 July 2026 Anac, the Interior Ministry, the CNR and the Marche Region signed an AI protocol. What is already running and what is merely announced.</description><pubDate>Tue, 28 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Why shared Claude conversations ended up in Google’s search results</title><link>https://csidia.com/en/notes/conversazioni-claude-condivise-indicizzate-google/</link><guid isPermaLink="true">https://csidia.com/en/notes/conversazioni-claude-condivise-indicizzate-google/</guid><description>On 27 July Claude’s public links surfaced on Google and Bing. The verified technical cause, and why an “unguessable” address is not a control.</description><pubDate>Tue, 28 Jul 2026 00:00:00 GMT</pubDate></item><item><title>IHI and Kuva Space: what has actually been signed, and who is “sovereign” over the sensor</title><link>https://csidia.com/en/notes/ihi-kuva-iperspettrale-sovranita-giappone/</link><guid isPermaLink="true">https://csidia.com/en/notes/ihi-kuva-iperspettrale-sovranita-giappone/</guid><description>On 21 July IHI and Kuva Space signed a memorandum of understanding on hyperspectral satellites in Japan. What binds, and what is only intent.</description><pubDate>Tue, 28 Jul 2026 00:00:00 GMT</pubDate></item><item><title>What does it really take to let an AI system handle classified information?</title><link>https://csidia.com/en/notes/informazioni-classificate-ai-classifiche-segretezza/</link><guid isPermaLink="true">https://csidia.com/en/notes/informazioni-classificate-ai-classifiche-segretezza/</guid><description>Classification attaches to the individual parts, not to the document: what an AI system must be able to prove before it works on classified material.</description><pubDate>Tue, 28 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Open Secure AI Alliance: what is a supplier’s membership actually worth?</title><link>https://csidia.com/en/notes/open-secure-ai-alliance-chi-manca/</link><guid isPermaLink="true">https://csidia.com/en/notes/open-secure-ai-alliance-chi-manca/</guid><description>NVIDIA launches an open defence stack for agents with 37 partners. With no admission criteria and no verification, membership is not a contract clause.</description><pubDate>Tue, 28 Jul 2026 00:00:00 GMT</pubDate></item><item><title>If the rules on open models change, what happens to the one you have already installed?</title><link>https://csidia.com/en/notes/modelli-aperti-restrizioni-cosa-resta-installato/</link><guid isPermaLink="true">https://csidia.com/en/notes/modelli-aperti-restrizioni-cosa-resta-installato/</guid><description>On 24 July, 25 companies signed a letter against “premature restrictions” on open weights. What happens to the model already running in your infrastructure.</description><pubDate>Mon, 27 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Data centres in Italy: announced capacity is not available capacity</title><link>https://csidia.com/en/notes/data-center-italia-capacita-annunciata-disponibile/</link><guid isPermaLink="true">https://csidia.com/en/notes/data-center-italia-capacita-annunciata-disponibile/</guid><description>Eight billion euros of data centres declared strategic in Lombardy and Piedmont: what really decides whether that computing capacity will be yours to buy.</description><pubDate>Mon, 27 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Intel and SambaNova: what you are really buying with an inference accelerator</title><link>https://csidia.com/en/notes/intel-sambanova-acceleratori-inferenza-on-premise/</link><guid isPermaLink="true">https://csidia.com/en/notes/intel-sambanova-acceleratori-inferenza-on-premise/</guid><description>Not a foundry contract, not an acquisition. What the Intel and SambaNova documents actually say, and what buyers of dedicated AI hardware are betting on.</description><pubDate>Mon, 27 Jul 2026 00:00:00 GMT</pubDate></item><item><title>AI on staff: an Italian rule already requires you to explain how it works</title><link>https://csidia.com/en/notes/obbligo-informativo-sistemi-automatizzati-lavoratori/</link><guid isPermaLink="true">https://csidia.com/en/notes/obbligo-informativo-sistemi-automatizzati-lavoratori/</guid><description>Article 1-bis of Legislative Decree 152/1997 makes you disclose to workers and unions the logic, data and parameters of automated systems. Text and penalties.</description><pubDate>Mon, 27 Jul 2026 00:00:00 GMT</pubDate></item><item><title>How you measure whether a system actually worked</title><link>https://csidia.com/en/notes/come-si-misura-se-un-sistema-ha-funzionato/</link><guid isPermaLink="true">https://csidia.com/en/notes/come-si-misura-se-un-sistema-ha-funzionato/</guid><description>An independent analysis of hospital discharge delays in England and the statistics regulator’s intervention: baseline, measured outcome, and what counts as proof.</description><pubDate>Mon, 27 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Open-weight model licences: what do they actually let you do?</title><link>https://csidia.com/en/notes/licenze-pesi-aperti-openmdw-cosa-permettono/</link><guid isPermaLink="true">https://csidia.com/en/notes/licenze-pesi-aperti-openmdw-cosa-permettono/</guid><description>Laguna S 2.1 ships with its OpenMDW-1.1 licence already written. How to read a weights licence like a supply contract, and how three real texts differ.</description><pubDate>Sun, 26 Jul 2026 00:00:00 GMT</pubDate></item><item><title>AI Omnibus in force on 27 July: machinery AI moves into the Machinery Regulation</title><link>https://csidia.com/en/notes/omnibus-ia-macchine-allegato-iii-27-luglio/</link><guid isPermaLink="true">https://csidia.com/en/notes/omnibus-ia-macchine-allegato-iii-27-luglio/</guid><description>Regulation (EU) 2026/1744 in force on 27 July 2026, the third day following publication: AI in machinery moves to the Machinery Regulation and Annex III.</description><pubDate>Sun, 26 Jul 2026 00:00:00 GMT</pubDate></item><item><title>AI-generated content: has your vendor signed the EU code on marking?</title><link>https://csidia.com/en/notes/codice-ue-marcatura-contenuti-ia-firmatari/</link><guid isPermaLink="true">https://csidia.com/en/notes/codice-ue-marcatura-contenuti-ia-firmatari/</guid><description>The list of signatories to the EU code on AI content transparency lands before 2 August 2026. The code is voluntary, Article 50 is not: what to check.</description><pubDate>Sun, 26 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Archer, Anduril and Halo: one autonomous aircraft, two regimes, no numbers</title><link>https://csidia.com/en/notes/archer-anduril-halo-velivolo-autonomo/</link><guid isPermaLink="true">https://csidia.com/en/notes/archer-anduril-halo-velivolo-autonomo/</guid><description>Archer unveils Halo, the civil twin of Anduril’s Thunder: same airframe, two legal regimes. What the press release says, and what the SEC filings say.</description><pubDate>Sun, 26 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Italy’s cyber perimeter and the CVCN: an ICT purchase does not end with a signature</title><link>https://csidia.com/en/notes/perimetro-cibernetico-cvcn-valutazione-forniture-ict/</link><guid isPermaLink="true">https://csidia.com/en/notes/perimetro-cibernetico-cvcn-valutazione-forniture-ict/</guid><description>Inside Italy’s national cyber security perimeter, ICT supplies are notified to the CVCN before the tender: 45 days of checks, hardware and software testing.</description><pubDate>Sun, 26 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Default settings: the value nobody touched is still a choice you made</title><link>https://csidia.com/en/notes/impostazioni-predefinite-decisione-di-conformita/</link><guid isPermaLink="true">https://csidia.com/en/notes/impostazioni-predefinite-decisione-di-conformita/</guid><description>On 24 July the European Commission preliminarily took issue with TikTok’s default settings for minors’ accounts: why a default is an act of compliance.</description><pubDate>Sun, 26 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Cyber Resilience Act: no SBOM, no CE marking from 11 December 2027</title><link>https://csidia.com/en/notes/cyber-resilience-act-sbom-fascicolo-tecnico-2027/</link><guid isPermaLink="true">https://csidia.com/en/notes/cyber-resilience-act-sbom-fascicolo-tecnico-2027/</guid><description>From 11 December 2027 Reg. (EU) 2024/2847 requires a technical file and a software bill of materials: without them, no declaration of conformity, no CE mark.</description><pubDate>Sat, 25 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Thales and Destinus: flipping the cost of shooting down a drone</title><link>https://csidia.com/en/notes/destinus-thales-intercettori-drone-europa/</link><guid isPermaLink="true">https://csidia.com/en/notes/destinus-thales-intercettori-drone-europa/</guid><description>Thales signs with Destinus, a European start-up of 750 people: Hornet interceptors, NATO warheads, joint production. What the release does not say.</description><pubDate>Sat, 25 Jul 2026 00:00:00 GMT</pubDate></item><item><title>AI procurement: writing a tender that survives a protest — the DIA ASTRA case</title><link>https://csidia.com/en/notes/palantir-dia-astra-gara-ritirata/</link><guid isPermaLink="true">https://csidia.com/en/notes/palantir-dia-astra-gara-ritirata/</guid><description>The DIA pulls the ASTRA solicitation after a Palantir protest under the law preferring commercial software: what it teaches anyone writing AI requirements.</description><pubDate>Sat, 25 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Trade secrets and AI: if you cannot prove the measures, there is no protection</title><link>https://csidia.com/en/notes/segreto-industriale-prova-misure-adeguate-ai/</link><guid isPermaLink="true">https://csidia.com/en/notes/segreto-industriale-prova-misure-adeguate-ai/</guid><description>Article 98 of Italy’s IP Code protects trade secrets only under “reasonably adequate measures”: in court the burden of proof is yours. The evidence you need.</description><pubDate>Sat, 25 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Soofi S, the European open model on a single GPU: can you use it yet?</title><link>https://csidia.com/en/notes/soofi-s-modello-aperto-europeo-on-premise/</link><guid isPermaLink="true">https://csidia.com/en/notes/soofi-s-modello-aperto-europeo-on-premise/</guid><description>Soofi S 30B-A3B: 31.6 billion parameters, 3.2 active per token, a one-million-token context. The real on-premise numbers, and the licence that is missing.</description><pubDate>Sat, 25 Jul 2026 00:00:00 GMT</pubDate></item><item><title>AI contracts: a use limit that is neither written nor verifiable does not exist</title><link>https://csidia.com/en/notes/contratti-ai-termini-riservati-limiti-verificabili/</link><guid isPermaLink="true">https://csidia.com/en/notes/contratti-ai-termini-riservati-limiti-verificabili/</guid><description>The US Senate deadline for the Pentagon and seven AI firms to publish their contract terms expired on 20 July: what stays sealed, and what to insist on.</description><pubDate>Sat, 25 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Waiting Lists: The Problem Isn&apos;t Capacity, It&apos;s the Pipeline</title><link>https://csidia.com/en/notes/liste-attesa-pipeline-ontologia-ai/</link><guid isPermaLink="true">https://csidia.com/en/notes/liste-attesa-pipeline-ontologia-ai/</guid><description>Siloed schedules, lost slots, demand spikes caught too late: how an ontology-and-agents pipeline recovers up to 20% more visits in 12 months. A simulation.</description><pubDate>Fri, 24 Jul 2026 12:00:00 GMT</pubDate></item><item><title>ASIO and Anduril: the small Israeli firm that flies drones without GPS</title><link>https://csidia.com/en/notes/asio-anduril-navigazione-droni-gps/</link><guid isPermaLink="true">https://csidia.com/en/notes/asio-anduril-navigazione-droni-gps/</guid><description>ASIO Technologies, an Israeli optical-navigation start-up, signs a deal worth tens of millions with Anduril: the technology, the known terms and the risks.</description><pubDate>Fri, 24 Jul 2026 00:00:00 GMT</pubDate></item><item><title>DeepSeek V4 runs on a $4,000 PC: what changes for on-premise AI</title><link>https://csidia.com/en/notes/deepseek-v4-flash-pc-locale-192gb/</link><guid isPermaLink="true">https://csidia.com/en/notes/deepseek-v4-flash-pc-locale-192gb/</guid><description>DeepSeek V4-Flash, open-weight and MIT-licensed, runs on a 192 GB AMD mini PC: the real numbers on cost, sovereignty and risk for on-premise buyers.</description><pubDate>Fri, 24 Jul 2026 00:00:00 GMT</pubDate></item><item><title>NIS2, October 2026: what must be in the binder when ACN comes knocking</title><link>https://csidia.com/en/notes/nis2-ottobre-2026-prova-documentale/</link><guid isPermaLink="true">https://csidia.com/en/notes/nis2-ottobre-2026-prova-documentale/</guid><description>From October 2026 the first NIS2 wave must prove baseline security to ACN, Italy&apos;s cyber agency: policies, risks, registers, supplier contracts.</description><pubDate>Fri, 24 Jul 2026 00:00:00 GMT</pubDate></item><item><title>The OpenAI Model That Broke Out of Testing, and the Kill Switch Congress Wants</title><link>https://csidia.com/en/notes/openai-modello-kill-switch-congresso/</link><guid isPermaLink="true">https://csidia.com/en/notes/openai-modello-kill-switch-congresso/</guid><description>OpenAI admits two of its models broke out of testing and hacked Hugging Face to cheat a benchmark: the US Congress now proposes a kill switch by law.</description><pubDate>Fri, 24 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Pay Transparency: From 7 June 2027 the Gap Must Be Declared, Payslips Included</title><link>https://csidia.com/en/notes/parita-retributiva-7-giugno-2027-buste-paga/</link><guid isPermaLink="true">https://csidia.com/en/notes/parita-retributiva-7-giugno-2027-buste-paga/</guid><description>Legislative Decree 96/2026 requires pay gap reporting from 7 June 2027: the calculation cross-references payslips, job grades and gender for every employee.</description><pubDate>Fri, 24 Jul 2026 00:00:00 GMT</pubDate></item><item><title>China blocks dual-use exports to Rheinmetall: retaliation for EU sanctions</title><link>https://csidia.com/en/notes/rheinmetall-cina-controlli-export-ritorsione/</link><guid isPermaLink="true">https://csidia.com/en/notes/rheinmetall-cina-controlli-export-ritorsione/</guid><description>On 24 July 2026 China blocks dual-use exports to Rheinmetall and 13 other EU firms, retaliation for Brussels&apos; Russia sanctions: the lesson on supply chains.</description><pubDate>Fri, 24 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Machinery Regulation: no compliant manuals, no CE mark from 14 January 2027</title><link>https://csidia.com/en/notes/regolamento-macchine-manuali-istruzioni-2027/</link><guid isPermaLink="true">https://csidia.com/en/notes/regolamento-macchine-manuali-istruzioni-2027/</guid><description>Regulation (EU) 2023/1230 replaces the Machinery Directive from 14 January 2027: digital instructions, cybersecurity requirements, who risks losing CE.</description><pubDate>Thu, 23 Jul 2026 12:00:00 GMT</pubDate></item><item><title>Anduril and Rheinmetall: the European drone alliance scales back</title><link>https://csidia.com/en/notes/anduril-rheinmetall-droni-europa-ridimensionata/</link><guid isPermaLink="true">https://csidia.com/en/notes/anduril-rheinmetall-droni-europa-ridimensionata/</guid><description>A year after launch, Bloomberg confirms the Anduril-Rheinmetall drone and missile partnership for Europe has been scaled back: what it means for defence.</description><pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate></item><item><title>$300,000 a year per vehicle just for AI licensing: the GAO&apos;s lessons</title><link>https://csidia.com/en/notes/appalti-ai-lezioni-apprese-gao/</link><guid isPermaLink="true">https://csidia.com/en/notes/appalti-ai-lezioni-apprese-gao/</guid><description>The GAO reviews 44 US government AI contracts: no agency documents its mistakes. Lessons on cost, testing and specifications for anyone buying AI today.</description><pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate></item><item><title>ACN cloud rules: past the 30 June 2026 deadline, critical data is non-compliant</title><link>https://csidia.com/en/notes/cloud-acn-30-giugno-2026-dati-critici-pa/</link><guid isPermaLink="true">https://csidia.com/en/notes/cloud-acn-30-giugno-2026-dati-critici-pa/</guid><description>The ACN cloud regulation set migration for 30 June 2026: critical and strategic public-sector data can no longer sit on unqualified cloud services.</description><pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate></item><item><title>DJI and the FCC: banned by order, sold under another name</title><link>https://csidia.com/en/notes/dji-bando-usa-aziende-schermo/</link><guid isPermaLink="true">https://csidia.com/en/notes/dji-bando-usa-aziende-schermo/</guid><description>The FCC accuses nine companies of selling rebranded DJI drones to dodge the US ban: the independent audit, the Odyssey Robot case, the supply-chain lesson.</description><pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Mistral and Microsoft on Azure Local: how sovereign is it, really?</title><link>https://csidia.com/en/notes/mistral-microsoft-azure-local-sovranita/</link><guid isPermaLink="true">https://csidia.com/en/notes/mistral-microsoft-azure-local-sovranita/</guid><description>Microsoft brings Mistral Medium 3.5, open-weight, to Azure Local: cloud, connected, disconnected. What to check before calling it real AI sovereignty.</description><pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Palantir&apos;s FedStart: the fast lane into the US government cloud</title><link>https://csidia.com/en/notes/oligo-security-palantir-fedstart/</link><guid isPermaLink="true">https://csidia.com/en/notes/oligo-security-palantir-fedstart/</guid><description>Oligo Security, an Israeli cybersecurity start-up, joins Palantir&apos;s FedStart for FedRAMP certification: the fast lane into the US government market.</description><pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate></item><item><title>A Corporate AI Policy: Since 2025, No Longer a Choice — a Legal Obligation</title><link>https://csidia.com/en/notes/policy-ai-aziendale-obbligo-di-legge/</link><guid isPermaLink="true">https://csidia.com/en/notes/policy-ai-aziendale-obbligo-di-legge/</guid><description>Staff pasting confidential data into free chatbots, outside IT control: the AI Act, trade-secret law and the GDPR already make an AI policy mandatory.</description><pubDate>Thu, 23 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Anthropic and the Pentagon: banned by contract, used out of necessity</title><link>https://csidia.com/en/notes/anthropic-pentagono-mythos-settembre-2026/</link><guid isPermaLink="true">https://csidia.com/en/notes/anthropic-pentagono-mythos-settembre-2026/</guid><description>An Air Force memo orders Anthropic purged by September. NSA and Commerce are meanwhile evaluating its software: the lesson on vendor dependency.</description><pubDate>Wed, 22 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Sentiment analysis on employees in chat: what the Italian Garante just stopped</title><link>https://csidia.com/en/notes/garante-sentiment-analysis-lavoratori/</link><guid isPermaLink="true">https://csidia.com/en/notes/garante-sentiment-analysis-lavoratori/</guid><description>A plug-in reads employee stress on Slack and Teams: the Italian Garante blocks it. GDPR, the AI Act and the Workers&apos; Statute draw the line for AI at work.</description><pubDate>Wed, 22 Jul 2026 00:00:00 GMT</pubDate></item><item><title>An AI agent attacked Hugging Face with no human operator</title><link>https://csidia.com/en/notes/hugging-face-agente-ai-violazione/</link><guid isPermaLink="true">https://csidia.com/en/notes/hugging-face-agente-ai-violazione/</guid><description>Hugging Face confirms an intrusion run end-to-end by an autonomous AI agent, over 17,000 actions in a weekend. What it means for enterprise security.</description><pubDate>Wed, 22 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Kimi K3: Microsoft is testing it for Copilot. What changes for decision-makers</title><link>https://csidia.com/en/notes/kimi-k3-moonshot-microsoft-copilot/</link><guid isPermaLink="true">https://csidia.com/en/notes/kimi-k3-moonshot-microsoft-copilot/</guid><description>Moonshot releases Kimi K3, a 2.8-trillion-parameter open-weight model: Microsoft is trialling it to cut Copilot costs. The real numbers for buyers.</description><pubDate>Wed, 22 Jul 2026 00:00:00 GMT</pubDate></item><item><title>NSO and the European Parliament: Pegasus hit the very people investigating it</title><link>https://csidia.com/en/notes/nso-pegasus-parlamento-europeo-kouloglou/</link><guid isPermaLink="true">https://csidia.com/en/notes/nso-pegasus-parlamento-europeo-kouloglou/</guid><description>A member of the EU committee on Pegasus was hacked with Pegasus in 2022-2023: the Kouloglou case and the real limits of European spyware oversight.</description><pubDate>Wed, 22 Jul 2026 00:00:00 GMT</pubDate></item><item><title>AI in public administration: what AgID&apos;s guidelines change</title><link>https://csidia.com/en/notes/agid-linee-guida-ia-pubblica-amministrazione/</link><guid isPermaLink="true">https://csidia.com/en/notes/agid-linee-guida-ia-pubblica-amministrazione/</guid><description>AgID&apos;s guidelines on AI development and procurement in Italian public administration land in 2026: four autonomy levels, LCOAI, AI Bill of Materials.</description><pubDate>Tue, 21 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Cellebrite and Russia: the contract ended. The tool did not.</title><link>https://csidia.com/en/notes/cellebrite-russia-contratto-rescisso/</link><guid isPermaLink="true">https://csidia.com/en/notes/cellebrite-russia-contratto-rescisso/</guid><description>Cellebrite cut off Russia in 2021. Three months later one of its tools was extracting data from a dissident&apos;s phone: the lesson on control after signing.</description><pubDate>Tue, 21 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Post-quantum cryptography: the real deadline is late 2026, not 2030</title><link>https://csidia.com/en/notes/crittografia-post-quantistica-scadenza-2026/</link><guid isPermaLink="true">https://csidia.com/en/notes/crittografia-post-quantistica-scadenza-2026/</guid><description>The EU post-quantum cryptography roadmap sets its first deadline for late 2026: inventory and transition plan. What changes for business and government.</description><pubDate>Tue, 21 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Google Sells AI to Alibaba, Baidu and Tencent Units: It&apos;s Legal, and That&apos;s the Problem</title><link>https://csidia.com/en/notes/google-cina-singapore-controlli-export/</link><guid isPermaLink="true">https://csidia.com/en/notes/google-cina-singapore-controlli-export/</guid><description>Google and OpenAI supply AI to the Singapore subsidiaries of three Chinese companies blacklisted by the Pentagon. It&apos;s legal. What that means for buyers.</description><pubDate>Tue, 21 Jul 2026 00:00:00 GMT</pubDate></item><item><title>AI Liability Directive Withdrawn: the Rule That Matters Lands on 9 December 2026</title><link>https://csidia.com/en/notes/responsabilita-prodotto-ai-9-dicembre-2026/</link><guid isPermaLink="true">https://csidia.com/en/notes/responsabilita-prodotto-ai-9-dicembre-2026/</guid><description>The AI Liability Directive has been withdrawn, but software and AI now fall under defective product liability: transposed in Italy by 9 December 2026.</description><pubDate>Tue, 21 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Cyber incidents on the rise in Italy? No — we&apos;re finally seeing them</title><link>https://csidia.com/en/notes/acn-incidenti-cyber-2026-nis2-visibilita/</link><guid isPermaLink="true">https://csidia.com/en/notes/acn-incidenti-cyber-2026-nis2-visibilita/</guid><description>ACN&apos;s 2026 data shows spikes in cyber incidents, but the surge is mainly an effect of NIS2 making them visible: what the numbers say, and ACN&apos;s warning.</description><pubDate>Mon, 20 Jul 2026 00:00:00 GMT</pubDate></item><item><title>DORA names its critical suppliers: Europe’s financial sector runs on five clouds</title><link>https://csidia.com/en/notes/dora-fornitori-ict-critici-concentrazione/</link><guid isPermaLink="true">https://csidia.com/en/notes/dora-fornitori-ict-critici-concentrazione/</guid><description>The first official DORA list of critical ICT providers — AWS, Google, Microsoft, Oracle, SAP — and the start of supervision in 2026: the concentration lesson.</description><pubDate>Mon, 20 Jul 2026 00:00:00 GMT</pubDate></item><item><title>General-purpose AI models: from 2 August, you can demand more from your vendor</title><link>https://csidia.com/en/notes/gpai-2-agosto-2026-cosa-chiedere-fornitore/</link><guid isPermaLink="true">https://csidia.com/en/notes/gpai-2-agosto-2026-cosa-chiedere-fornitore/</guid><description>From 2 August 2026 the AI Act&apos;s GPAI obligations become enforceable: technical documentation, a summary of training data, copyright policies. What to demand.</description><pubDate>Mon, 20 Jul 2026 00:00:00 GMT</pubDate></item><item><title>NATO Bets $40 Billion on Drones: Can European Industry Deliver?</title><link>https://csidia.com/en/notes/nato-ankara-droni-industria-europea/</link><guid isPermaLink="true">https://csidia.com/en/notes/nato-ankara-droni-industria-europea/</guid><description>The NATO summit in Ankara shifts funding to drones and counter-drone systems. Rheinmetall&apos;s order book hits €73 billion, but can industry actually produce?</description><pubDate>Mon, 20 Jul 2026 00:00:00 GMT</pubDate></item><item><title>OpenAI and the publishers: the real stakes are the evidence, not the copyright</title><link>https://csidia.com/en/notes/openai-editori-prove-copyright/</link><guid isPermaLink="true">https://csidia.com/en/notes/openai-editori-prove-copyright/</guid><description>Publishers led by the NYT are seeking sanctions against OpenAI: it allegedly concealed data-search tools and deleted conversations after a preservation order.</description><pubDate>Mon, 20 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Data Act: your machines&apos; data is (also) yours</title><link>https://csidia.com/en/notes/data-act-dati-macchine-cloud/</link><guid isPermaLink="true">https://csidia.com/en/notes/data-act-dati-macchine-cloud/</guid><description>The EU Data Act has applied since September 2025: access to connected-machine data, cloud switching and the end of egress fees in 2027. What to do now.</description><pubDate>Sun, 19 Jul 2026 00:00:00 GMT</pubDate></item><item><title>EDIP and Readiness 2030: what changes for the Italian defence industry</title><link>https://csidia.com/en/notes/edip-difesa-europea/</link><guid isPermaLink="true">https://csidia.com/en/notes/edip-difesa-europea/</guid><description>EDIP in force, five joint projects proposed in July, €14.9 billion in SAFE funding for Italy: the verified figures and what changes for suppliers.</description><pubDate>Sun, 19 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Palantir vs London: when the supplier becomes “a point of weakness”</title><link>https://csidia.com/en/notes/palantir-regno-unito-punto-di-debolezza/</link><guid isPermaLink="true">https://csidia.com/en/notes/palantir-regno-unito-punto-di-debolezza/</guid><description>Met Police contract blocked, lawsuit against the Mayor of London, NHS deal under review: the UK Palantir case is a lesson on public-infrastructure lock-in.</description><pubDate>Sun, 19 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Clearview vs Europe: the €100 million fines nobody collects</title><link>https://csidia.com/en/notes/clearview-riconoscimento-facciale-multe/</link><guid isPermaLink="true">https://csidia.com/en/notes/clearview-riconoscimento-facciale-multe/</guid><description>Five European authorities, over €100 million in GDPR fines never collected: the Clearview AI case exposes the limits of enforcement on biometric data.</description><pubDate>Sat, 18 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Cyber Resilience Act: the reporting clock starts on 11 September</title><link>https://csidia.com/en/notes/cyber-resilience-act-segnalazione-settembre-2026/</link><guid isPermaLink="true">https://csidia.com/en/notes/cyber-resilience-act-segnalazione-settembre-2026/</guid><description>From 11 September 2026 manufacturers of products with digital elements must report exploited vulnerabilities and severe incidents within 24 to 72 hours.</description><pubDate>Sat, 18 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Italy&apos;s AI law (132/2025): what it actually adds to the EU AI Act</title><link>https://csidia.com/en/notes/legge-italiana-ai-132-2025/</link><guid isPermaLink="true">https://csidia.com/en/notes/legge-italiana-ai-132-2025/</guid><description>Italy is the first EU country with a comprehensive AI law: healthcare, public administration, employment and justice, national authorities, new offences.</description><pubDate>Sat, 18 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Predictive Maintenance in Emilia&apos;s Industrial Districts: Where to Start</title><link>https://csidia.com/en/notes/manutenzione-predittiva-distretti-emiliani/</link><guid isPermaLink="true">https://csidia.com/en/notes/manutenzione-predittiva-distretti-emiliani/</guid><description>ISO 17359 and ISO 20816, the data you already have, the 2026 hyper-depreciation scheme that also covers software: where to start in ceramics and packaging.</description><pubDate>Fri, 17 Jul 2026 00:00:00 GMT</pubDate></item><item><title>NIS2: what companies in critical sectors actually have to do</title><link>https://csidia.com/en/notes/nis2-aziende-settori-critici/</link><guid isPermaLink="true">https://csidia.com/en/notes/nis2-aziende-settori-critici/</guid><description>Who falls under the NIS2 Directive, what obligations it introduces and where to start: an operational guide for essential and important entities.</description><pubDate>Thu, 09 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Palantir and ICE: the ImmigrationOS contract that split Silicon Valley</title><link>https://csidia.com/en/notes/palantir-ice-immigrationos/</link><guid isPermaLink="true">https://csidia.com/en/notes/palantir-ice-immigrationos/</guid><description>The $30 million ImmigrationOS contract between Palantir and ICE, the protests, Karp&apos;s defence: a supplier&apos;s reputation is now the customer&apos;s risk.</description><pubDate>Thu, 09 Jul 2026 00:00:00 GMT</pubDate></item><item><title>The AI Act&apos;s Delay Has a Catch: What Still Applies from 2 August 2026</title><link>https://csidia.com/en/notes/ai-act-cosa-vale-dal-2-agosto-2026/</link><guid isPermaLink="true">https://csidia.com/en/notes/ai-act-cosa-vale-dal-2-agosto-2026/</guid><description>The Digital Omnibus postpones high-risk obligations to 2027, but transparency duties and penalties apply from 2 August 2026: an updated map of what to do.</description><pubDate>Fri, 03 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Helsing: A €12 Billion Unicorn in a Rearming Europe</title><link>https://csidia.com/en/notes/helsing-unicorno-armi-ai-europa/</link><guid isPermaLink="true">https://csidia.com/en/notes/helsing-unicorno-armi-ai-europa/</guid><description>A €600 million round led by Prima Materia, a €12 billion valuation, drones for Ukraine: the Helsing case, between European sovereignty and human control.</description><pubDate>Fri, 03 Jul 2026 00:00:00 GMT</pubDate></item><item><title>Sovereign AI: what it really means, once you strip away the slogans</title><link>https://csidia.com/en/notes/ai-sovrana-cosa-significa-per-aziende/</link><guid isPermaLink="true">https://csidia.com/en/notes/ai-sovrana-cosa-significa-per-aziende/</guid><description>For a company, AI sovereignty comes down to four verifiable questions: where the data sits, who can switch off what, what switching costs, who is accountable.</description><pubDate>Thu, 11 Jun 2026 00:00:00 GMT</pubDate></item><item><title>Grok at the Pentagon: six days from “MechaHitler” to a $200 million contract</title><link>https://csidia.com/en/notes/xai-grok-contratto-pentagono/</link><guid isPermaLink="true">https://csidia.com/en/notes/xai-grok-contratto-pentagono/</guid><description>July 2025: Grok’s antisemitic outputs and, six days later, the Pentagon’s $200 million contract. Why reliability is a procurement criterion.</description><pubDate>Thu, 11 Jun 2026 00:00:00 GMT</pubDate></item><item><title>Hikvision v. Ottawa: when the camera becomes a matter of state</title><link>https://csidia.com/en/notes/hikvision-telecamere-ban-occidente/</link><guid isPermaLink="true">https://csidia.com/en/notes/hikvision-telecamere-ban-occidente/</guid><description>Canada orders Hikvision to cease operations; the company appeals. US and UK bans stand, yet the cameras remain in European buildings: lessons for procurement.</description><pubDate>Thu, 14 May 2026 00:00:00 GMT</pubDate></item><item><title>Chinese open-source AI in the enterprise: the numbers add up, so do the risks</title><link>https://csidia.com/en/notes/modelli-cinesi-open-source-in-azienda/</link><guid isPermaLink="true">https://csidia.com/en/notes/modelli-cinesi-open-source-in-azienda/</guid><description>DeepSeek, Qwen, GLM and Kimi have passed 45% of global AI traffic at a fraction of the cost of US models. What to weigh before using them safely.</description><pubDate>Thu, 14 May 2026 00:00:00 GMT</pubDate></item><item><title>Anduril replaces Microsoft: the $22 billion headset</title><link>https://csidia.com/en/notes/anduril-ivas-arsenal-riarmo/</link><guid isPermaLink="true">https://csidia.com/en/notes/anduril-ivas-arsenal-riarmo/</guid><description>The IVAS headset moves from Microsoft to Anduril, the Arsenal-1 factory in Ohio, products built with private capital: defence procurement is changing.</description><pubDate>Thu, 23 Apr 2026 00:00:00 GMT</pubDate></item><item><title>Prompt injection: the attack that arrives by email (and how to contain it)</title><link>https://csidia.com/en/notes/prompt-injection-sicurezza-llm/</link><guid isPermaLink="true">https://csidia.com/en/notes/prompt-injection-sicurezza-llm/</guid><description>The top security risk for LLM systems, according to OWASP, is not a virus: it is an instruction hidden in a document. Why filters are not enough.</description><pubDate>Thu, 23 Apr 2026 00:00:00 GMT</pubDate></item><item><title>The Anthropic–Pentagon Case: Three Lessons for Every AI Buyer</title><link>https://csidia.com/en/notes/caso-anthropic-pentagono-lezioni/</link><guid isPermaLink="true">https://csidia.com/en/notes/caso-anthropic-pentagono-lezioni/</guid><description>The US government branded its own AI supplier a national security risk, then a judge froze the whole thing: what it teaches any company buying AI today.</description><pubDate>Wed, 08 Apr 2026 00:00:00 GMT</pubDate></item><item><title>AI Act meets GDPR: who does what when you buy an AI system</title><link>https://csidia.com/en/notes/ai-act-gdpr-chi-fa-cosa/</link><guid isPermaLink="true">https://csidia.com/en/notes/ai-act-gdpr-chi-fa-cosa/</guid><description>Provider and deployer, DPIA and fundamental rights impact assessment, the training duty: who does what between the seller and the user of an AI system.</description><pubDate>Thu, 26 Mar 2026 00:00:00 GMT</pubDate></item><item><title>NSO v WhatsApp: hacking a platform finally has its day in court</title><link>https://csidia.com/en/notes/nso-whatsapp-verdetto-pegasus/</link><guid isPermaLink="true">https://csidia.com/en/notes/nso-whatsapp-verdetto-pegasus/</guid><description>Liability established in 2024, a $167 million verdict in 2025, a permanent injunction: the Pegasus case sets a precedent that concerns every company.</description><pubDate>Thu, 26 Mar 2026 00:00:00 GMT</pubDate></item><item><title>AI agents at work: what can they actually touch?</title><link>https://csidia.com/en/notes/agenti-ai-permessi-guardrail-responsabilita/</link><guid isPermaLink="true">https://csidia.com/en/notes/agenti-ai-permessi-guardrail-responsabilita/</guid><description>Agents don&apos;t just write text: they act on your systems. Minimum permissions, typed actions, human approval and an audit log: the mechanics of guardrails.</description><pubDate>Thu, 12 Mar 2026 00:00:00 GMT</pubDate></item><item><title>Microsoft and Unit 8200: when the cloud provider pulls the plug</title><link>https://csidia.com/en/notes/microsoft-azure-israele-inchieste/</link><guid isPermaLink="true">https://csidia.com/en/notes/microsoft-azure-israele-inchieste/</guid><description>Intercepted calls archived on Azure, the outside review, services switched off for Unit 8200: the lesson for anyone buying cloud in Europe.</description><pubDate>Thu, 12 Mar 2026 00:00:00 GMT</pubDate></item><item><title>95% of AI Experiments Never Reach Production: How to Land in the 5%</title><link>https://csidia.com/en/notes/perche-le-sperimentazioni-ai-non-arrivano-in-produzione/</link><guid isPermaLink="true">https://csidia.com/en/notes/perche-le-sperimentazioni-ai-non-arrivano-in-produzione/</guid><description>The MIT study that got everyone talking: almost all corporate generative AI experiments produce no measurable return. The real causes, and the method.</description><pubDate>Thu, 19 Feb 2026 00:00:00 GMT</pubDate></item><item><title>Scale AI inside Meta: when everyone&apos;s supplier chooses a side</title><link>https://csidia.com/en/notes/scale-ai-meta-dati-addestramento/</link><guid isPermaLink="true">https://csidia.com/en/notes/scale-ai-meta-dati-addestramento/</guid><description>Meta invests $14.3 billion for 49% of Scale AI, Google and OpenAI leave the platform: the case that exposed the true value of data neutrality.</description><pubDate>Thu, 19 Feb 2026 00:00:00 GMT</pubDate></item><item><title>Paragon and Italy: when the spyware vendor terminates the state contract</title><link>https://csidia.com/en/notes/paragon-graphite-italia-un-anno-dopo/</link><guid isPermaLink="true">https://csidia.com/en/notes/paragon-graphite-italia-un-anno-dopo/</guid><description>WhatsApp notifications to ninety targets, the government’s admission, the COPASIR report, Paragon’s termination: one year of the Graphite affair in Italy.</description><pubDate>Thu, 05 Feb 2026 00:00:00 GMT</pubDate></item><item><title>Shadow AI: Staff Already Use It, Pretending Otherwise Is the Real Risk</title><link>https://csidia.com/en/notes/shadow-ai-governare-non-vietare/</link><guid isPermaLink="true">https://csidia.com/en/notes/shadow-ai-governare-non-vietare/</guid><description>Source code pasted into chatbots, customer data in prompts, personal accounts used for work: how to govern shadow AI without banning it. Policy and tools.</description><pubDate>Thu, 05 Feb 2026 00:00:00 GMT</pubDate></item><item><title>Hallucinations: how much can you trust a model, and how do you make it safe</title><link>https://csidia.com/en/notes/allucinazioni-ai-come-mettersi-al-sicuro/</link><guid isPermaLink="true">https://csidia.com/en/notes/allucinazioni-ai-come-mettersi-al-sicuro/</guid><description>Air Canada found liable for its chatbot&apos;s invented answers, lawyers sanctioned over non-existent rulings: hallucinations are a legal risk. Four defences.</description><pubDate>Thu, 22 Jan 2026 00:00:00 GMT</pubDate></item><item><title>The Italian Garante vs OpenAI: €15 million to map the perimeter of consumer AI</title><link>https://csidia.com/en/notes/garante-openai-multa-15-milioni/</link><guid isPermaLink="true">https://csidia.com/en/notes/garante-openai-multa-15-milioni/</guid><description>The Italian Garante&apos;s €15 million fine on OpenAI for ChatGPT, between appeal and suspension: why consumer AI at work has a precise GDPR perimeter.</description><pubDate>Thu, 22 Jan 2026 00:00:00 GMT</pubDate></item></channel></rss>