InfoSecBulletin Cybersecurity for mankind
Portugal has changed its cybercrime law to protect good-faith security research and to make hacking legal under specific, strict conditions.
Daniel Cuthbert identified a new rule in Article 8.o-A, called “Acts not punishable due to public interest in cybersecurity,” which exempts some actions from being illegal that were once seen as illegal system access or data interception.
OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours
Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw
WinRAR, WordPress RCE flaw & Zyxel GS1900 Zero-Day exploited in the wild
Daily Cyber security update for 04.11. 2026
Daily Cyber security update for 03.11. 2026
Using ARTEX AI, Hacker to attack 200 Organizations Across 14 Countries
Amadeus cyber incident impacted “Cathay Pacific, Qantas, Japan, Malaysia, Korean & Asiana” Airlines
Multiple European supermarket fridges got hacked: Temperatures reached high as 55°C
Apple Warns 99 Countries iPhone Users of Mercenary Spyware Attacks
Daily Cyber security update for 31.10. 2026
The exemption applies only to security researchers who identify vulnerabilities to enhance cybersecurity. To avoid criminal liability, specific conditions must be met:
The article outlines the boundaries of security research while offering legal protection for ethical hackers.
In November 2024, Germany’s Federal Ministry of Justice proposed a draft law to protect security researchers who responsibly report flaws to vendors.
Earlier, in May 2022, the U.S. Department of Justice (DOJ) announced revisions to its federal prosecution policies regarding Computer Fraud and Abuse Act (CFAA) violations, adding an exemption for “good-faith” research.
Security research is recognized and allowed to explore systems, find vulnerabilities, and report them safely without legal repercussions.
