As Russia’s military aggression against Ukraine continues, the European Union (EU) has maintained its commitment to increasing economic and legal pressure on Russia. In 2025, the EU adopted its 16th, 17th, 18th, and now 19th sanctions packages, each introducing new measures and expanding existing restrictions. 

Effective September 29, 2025, many thousands of additional non-U.S. entities around the world are now prohibited from receiving U.S. goods, software, and technology under an “affiliates” interim final rule (the IFR) published by the Bureau of Industry and Security (BIS) at the U.S. Department of Commerce.  

On July 2, 2025, the U.S. Securities and Exchange Commission reached a preliminary settlement with SolarWinds Corp. and its chief information security officer in an effort to resolve a data breach case claiming that SolarWinds defrauded investors by concealing failures in its cybersecurity practices ahead of a major Russia-linked data breach in 2020.