UK finally vows to look at 35-year-old Computer Misuse Act

Portugal has updated its cybersecurity law to provide narrowly scoped safe-harbor protections for good-faith security researchers who responsibly identify and disclose vulnerabilities, provided actions are proportionate and non-disruptive, with certain activities like DoS and phishing remaining prohibited. This move increases pressure on the UK to modernize the Computer Misuse Act, with industry voices stressing that legal reform is overdue to support coordinated vulnerability disclosure and national cyber resilience.