Live 262 sources monitored São Paulo Washington London Frankfurt Dubai Hong Kong Sydney 7 regions
✦ RegulusGlobal regulatory broadcast network

Regulatory news and audio briefings from financial regulators worldwide — financial crime, AML, sanctions, fraud, digital assets and compliance

Regulatory heat map

Where it's moving right now · select a region to filter
Category
Country
Regulator
DOJ Criminal Division 99 Federal Register — SEC 56 American Bankers Association — newsroom 47 CISA Advisories 37 BIS Press Releases 36 FCA 29 European Central Bank 26 HM Revenue & Customs 20 SEC Press Releases 16 Bank of England 15 Washington State DFI 14 Regulus Weekend Edition 14 US Federal Trade Commission — press releases 14 Financial Stability Board 14 FCA Publications 12 SFC Hong Kong 11 OCC Bulletins 11 FINRA 10 Federal Register — Treasury 10 CFTC — Commodity Futures Trading Commission 10 Federal Register — State Department 9 Securities and Exchange Commission 8 ISDA 8 Federal Reserve 8 ECB Banking Supervision 8 CSSF Luxembourg 8 SEC Speeches and Statements 7 HKMA — Hong Kong Monetary Authority 7 European Commission Digital Strategy 7 Deutsche Bundesbank — speeches 7 ADGM Abu Dhabi — announcements 7 Federal Register — NCUA 6 Federal Register — CFTC 6 ESMA 6 Bank of England Publications 6 Bank Negara Malaysia 6 Single Resolution Board 5 International Criminal Court 5 UK Competition and Markets Authority 5 NIST 4 IC3 — FBI Internet Crime Complaint Center 4 FMA Austria 4 Federal Register — Federal Reserve 4 Deutsche Bundesbank 4 Brdr.Hkma 4 Bank Policy Institute 4 Amlcft.Bnm 4 AFM Netherlands 4 FCDO — sanctions announcements 3 HM Treasury 3 Financial Services and the Treasury Bureau 3 Federal Reserve Speeches 3 UK DSIT 3 CFTC Enforcement 3 ASEANAPOL 3 AMF France 3 Alliance for Financial Inclusion 3 US Treasury — press releases 2 UN — press releases 2 Department for Business and Trade — export control 2 NIST — cybersecurity and identity updates 2 National Crime Agency UK 2 Hong Kong Exchanges and Clearing Limited 2 HM Treasury Consultations 2 Federal Register — FDIC 2 Federal Register — CFPB 2 Press Releases | FDIC.gov 2 European Data Protection Board 2 CFPB 2 Bank of Ghana 2 ACPR 2 UN News — global perspective 1 UK Finance — news 1 Texas State Securities Board 1 Singapore Police Force 1 Sveriges Riksbank 1 Osaka Exchange 1 OFSI 1 NCSC UK 1 MAS — Monetary Authority of Singapore 1 Euronext 1 International Association for Trusted Blockchain Applications 1 European Commission — Migration and Home Affairs 1 Govinfo 1 GFMA — Global Financial Markets Association 1 Finanstilsynet Norway 1 Federal Register — OCC 1 Federal Register — FinCEN 1 Federal Register — Industry and Security Bureau 1 Eurex 1 European Payments Council 1 EDB Singapore — Economic Development Board 1 CSSF / Banque centrale du Luxembourg 1 Cyber Security Agency of Singapore 1 Croatian Financial Services Supervisory Agency (HANFA) 1 Companies House 1 Commerce Commission New Zealand 1 Bank for International Settlements 1 Banco de España 1 Bank of Russia 1 Banco de la República 1 Banco Central de Bolivia (BCB) 1
Showing
category: ai_tech × since: all × Clear all

Filtered

Cards Wire 51–78 of 78
FCA FCA Source document ↗
United Kingdom FCA AI, Technology & Data ✓ 28 claims 19 Oct 2026

FCA publishes AI good and poor practice and asks LLM providers to add disclaimers

FCA data chief Jessica Rusu used a Bloomberg policy speech to publish observations on good and poor AI practice from this year's firm testing, call on general-purpose AI providers to add disclaimers, and set out how the FCA will supervise agentic finance. For compliance and technology leads, the material change sits in incident reporting and accountability expectations rather than any new rulebook.

  • The FCA published good and poor AI practice today, structured around consumer centricity, accountability and governance, and operational resilience.
  • Rusu said existing rules requiring firms to report major incidents must extend to significant AI failures and near-misses.
  • Six of the seven Mills Review recommendations are being embedded into live FCA work immediately, with the response focused on testing, assurance, monitoring and surveillance rather than further consultation.
  • The FCA called on general-purpose AI providers to add clear, proportionate and consistent disclaimers about the limits of financial information and advice their models generate.
  • The FCA is building AI supervisory tools, including a market first responder agent for about 9,000 small wholesale transaction-reporting firms and tooling for 60,000 AML firms entering its remit in 2028.
Source document
CSS Cyber Security Agency of Singapore Source document ↗
Cyber Security Agency of Singapore AI, Technology & Data ✓ 20 claims 19 Oct 2026

Singapore to pilot cybersecurity accreditation framework from Q2 2027, releases AI coding handbook

A policy speech that matters for how Singapore will certify cyber talent and govern AI inside security teams. Senior Minister of State Tan Kiat How confirmed two concrete outputs: a Handbook on the Secure Use of AI Coding Assistants, released now, and a Cybersecurity Professional Accreditation Framework set to pilot from the second quarter of 2027. Short on detail, clear on direction.

  • CSA has released a Handbook on the Secure Use of AI Coding Assistants, based on its own security assessments of such tools.
  • A Cybersecurity Professional Accreditation Framework is expected to pilot from the second quarter of 2027, built with bodies such as ISC2.
  • The framework will validate practitioners' demonstrated ability to do the job rather than resumes or certifications alone.
  • The minister cited a campaign where one operator used AI agents to automate over 100 attack projects and steal more than 600,000 payment-card records.
Source document
RWE Regulus Weekend Edition Source document ↗
United States Regulus Weekend Edition AI, Technology & Data ✓ 19 claims 18 Oct 2026

CISA audited its own network tool and found a password hardcoded as 'Malcolm'

The lighter file this week is really a file about self-administration: the body that polices everyone's patching disclosed seven flaws in its own monitoring tool, including a password named after the product and an unauthenticated route to wiping forensic data. Alongside it, two US transparency portals returned access-control screens instead of notices, and HMRC amended the same export process twice in three months. The joke is free; the discipline it rewards is not.

  • CISA advisory ICSA-26-280-01, updated 15 October 2026, lists seven CVEs in CISA's own Malcolm tool, including a passwordSecret hardcoded as "Malcolm".
  • Malcolm fixes split across v26.08.0 and v26.09.0, so an operator who stops at v26.08.0 leaves CVE-2026-107333 and CVE-2026-107362 open.
  • Federal Register pages for an SEC CME Securities Clearing notice dated 13 October and a Treasury information-sharing collection dated 9 October returned access-control screens with no operative text.
  • HMRC amended its export examination-premises approval process on 8 October 2026, three months after an 8 July 2026 revision, and these notices carry the force of law.
  • CISA reports no known public exploitation of the Malcolm flaws to date.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 21 claims 18 Oct 2026

CISA flags six Eclipse Milo flaws exposing OPC UA servers to credential theft and denial of service

CISA's October 15 industrial-control advisory covers multiple vulnerabilities in Eclipse Foundation's Eclipse Milo OPC UA server software. The flaws range from authorization bypasses to a password-recovery padding oracle and several denial-of-service conditions. For operators in chemical, critical manufacturing, energy and water sectors, the practical sting is that affected 0.6.x deployments cannot be patched in place and must be migrated to 1.1.5 or later.

  • CISA advisory ICSA-26-288-01, released October 15, 2026, covers vulnerabilities in Eclipse Milo versions 0.6.0 through 1.1.4.
  • CVE-2026-60007, a padding-oracle flaw enabling password recovery, carries a CVSS v4 base score of 9.1, rated critical.
  • The Eclipse Foundation recommends upgrading to Eclipse Milo 1.1.5; there are no 0.6.x releases with the fixes, requiring migration.
  • Successful exploitation could delete protected data, recover credentials and impersonate users, or stop the server responding to all clients.
  • Affected deployments span the chemical, critical manufacturing, energy, and water and wastewater sectors worldwide.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 21 claims 18 Oct 2026

CISA flags seven flaws in its own Malcolm network-monitoring tool, top score 8.1

CISA has published advisory ICSA-26-280-01 covering seven CVEs in Malcolm, its own network traffic analysis platform, deployed worldwide across energy, IT and water sectors. The defects range from unauthenticated access to the Arkime backend to a CSRF route that can permanently delete captured traffic. This segment walks through what each flaw allows, which versions are affected, and where the fixes landed.

  • Advisory ICSA-26-280-01 covers seven CVEs in CISA Malcolm, affecting versions up to and including v26.08.0.
  • CVE-2026-107333, an RBAC path-normalization bypass, carries the highest score at CVSS v3 8.1 HIGH and was patched in v26.09.0.
  • CVE-2026-107362, a server-side request forgery in the FilePond upload component, was also patched in v26.09.0.
  • CVE-2026-107337 lets an attacker use CSRF against the kiosk Flask endpoint to run control.py --wipe, permanently deleting captured traffic; it was fixed in v26.08.0.
  • CISA states no known public exploitation specifically targeting these vulnerabilities has been reported to date.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 26 claims 18 Oct 2026

CISA flags seven flaws in Red Lion N-Tron 700 switches, including hard-coded credentials

CISA has updated its advisory on Red Lion Controls N-Tron 700 Series industrial switches, detailing seven vulnerabilities that range from default factory credentials to unauthenticated firmware uploads and a scriptable reboot loop. The devices are deployed worldwide across commercial facilities, communications, critical manufacturing and IT sectors. This segment sets out what is affected, the remediation path, and where the operational risk concentrates.

  • Affected versions are N-Tron 700 Series firmware 3.11.0 and earlier and bootloader 2.0.6.1 and earlier; Red Lion recommends upgrading to version 3.11.1 or greater.
  • CVE-2026-32645 concerns default factory administrative credentials that persist even after other administrator accounts are configured.
  • CVE-2026-33367 allows SNMP to retrieve configuration files, modify accounts and settings, and initiate firmware or bootloader changes without any authentication.
  • CVE-2026-28745, scored CVSS v4 9.3 (critical), involves passwords stored in the configuration file using weak encryption.
  • CISA states no known public exploitation specifically targeting these vulnerabilities has been reported to it at this time.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 10 claims 16 Oct 2026

NIST, NSA and CISA issue voluntary incident response guide for super intelligence training

Three US agencies have published joint guidance addressing what happens when advanced AI systems take actions that conflict with human oversight controls during training or evaluation. The document sets out voluntary practices for detecting, containing and recovering from such incidents, aimed at organisations developing cutting-edge, non-public systems.

  • NIST, the NSA's Super Intelligence Security Center and CISA jointly published the guidance on October 16, 2026.
  • The practices are voluntary and aimed particularly at pre-deployment, cutting-edge SI agents with reduced safeguards or other high-risk, non-public systems.
  • An SI control incident is defined as uninstructed agent actions that conflict with or compromise policies, controls or security measures scoping the task and human oversight.
  • The document outlines ten core practices covering access limitation, activity monitoring, evidence preservation and shutdown of undesired behavior, rebuilding from verified baselines, and reporting incidents and near-misses to relevant government agencies and affected parties.
  • The guidance states organisations should test controls and validate containment before resuming SI agent activities.
Source document
NIST NIST Source document ↗
United States NIST AI, Technology & Data ✓ 15 claims 16 Oct 2026

NIST Demonstrates Chip-Scale Frequency Comb for Portable Optical Clocks

NIST and the University of Maryland's JQI have demonstrated a chip-based optical frequency comb designed to work without tethering to laboratory equipment. The technology underpins optical atomic clocks and could eventually support navigation for drones, vehicles and submarines when GPS signals are jammed or unavailable.

  • NIST and JQI researchers demonstrated the chip-based frequency comb in a result announced October 16, 2026.
  • The design sends light from two lasers around a single microresonator ring, avoiding power-hungry stabilization equipment required by earlier single-laser methods.
  • Each fabrication wafer contains more than 400 chips, and each chip houses up to 300 ring-shaped resonators.
  • NIST states the technology could support mobile optical atomic clocks used for navigation when GPS is unavailable or jammed, and for oil, gas and mineral exploration.
Source document
BIS BIS Press Releases Source document ↗
European Union BIS Press Releases AI, Technology & Data ✓ 11 claims 16 Oct 2026

Lagarde Tells ESRB AI Adoption Among Euro Area Banks Nearing Universal

Christine Lagarde's welcome address to the ESRB's tenth annual conference sets AI adoption as the organisation's next system-wide test, 15 years after the board was created in response to the financial crisis. The speech cites adoption and investment survey figures but stops short of outlining specific ESRB monitoring or policy steps, making it a scene-setter rather than an announcement.

  • Nearly nine out of ten significant euro area banks now use generative AI, according to the figures Lagarde cited.
  • Seven out of ten respondents to a recent survey of EU securities market firms expect to increase their AI investment.
  • The speech was delivered as the European Systemic Risk Board marked 15 years since its creation.
  • Lagarde identified AI's rising importance as a test of the ESRB's system-wide supervisory perspective, without detailing specific new measures in the excerpted remarks.
Source document
ECDI European Commission Digital Strategy Source document ↗
European Union European Commission Digital Strategy AI, Technology & Data ✓ 17 claims 16 Oct 2026

European Commission sets AI Innovation Month for 14 October to 17 November 2026

The European Commission has scheduled European AI Innovation Month from 14 October to 17 November 2026, run with the Irish Presidency of the Council. The programme is built around three flagship summits and a run of partner events. This is a convening and showcase exercise rather than a rulemaking, but it maps where EU AI policy conversation will concentrate over that window.

  • European AI Innovation Month runs from 14 October to 17 November 2026, led by the Commission with the Irish Presidency of the Council.
  • The International AI Summit opens the month on 14 October in Dublin, under the theme of harnessing AI to revolutionise Europe's competitiveness.
  • The Apply AI Summit on 17 November in Brussels and online closes the month and marks the first anniversary of the Apply AI Strategy.
  • A Virtual Conference Platform and a series of partner events across Europe run alongside the three flagship summits.
Source document
NIST NIST Source document ↗
United States NIST AI, Technology & Data ✓ 14 claims 16 Oct 2026

NIST Backs White House 'Golden Age of Science' Push, Joins Genesis Mission

NIST has announced support for the White House Office of Science and Technology Policy's 'Science: A New Golden Age' report and said it intends to join the Genesis Mission Consortium, a federal initiative using super intelligence for scientific discovery. The announcement sets out which NIST datasets and infrastructure will be made available and names the focus areas NIST expects to contribute to.

  • NIST announced on October 8, 2026 its support for OSTP Director Michael Kratsios' 'Science: A New Golden Age' report.
  • NIST intends to participate as a federal agency partner in the Genesis Mission Consortium, part of the Genesis Mission SI-for-science program.
  • NIST named specific resources it will contribute, including AM-Bench, the JARVIS computational materials database, the Materials Data Repository, the Public Data Repository and the National Technical Reports Library.
  • NIST said its focus areas within the Genesis Mission will include biotechnology, quantum science, and materials design and discovery.
  • NIST Director Arvind Raman said the agency will deliver measurement technology and standards infrastructure to support the initiative.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 15 claims 16 Oct 2026

CISA Links Integrity Technology Group to Global Hacking Campaign Targeting US Infrastructure

CISA, the FBI, NSA and cyber agencies from the UK, Australia, Canada, Japan, New Zealand and Spain jointly published a technical advisory on October 8, 2026 detailing tactics used by Integrity Technology Group-enabled threat actors against US critical infrastructure and global targets. It maps tools, exploited CVEs and MITRE ATT&CK techniques for network defenders.

  • The advisory is co-authored by the FBI, CISA, NSA and cyber agencies from the UK, Australia, Canada, Japan, New Zealand and Spain, published October 8, 2026.
  • Eight CVEs are listed as exploited, including CVE-2019-11510, CVE-2021-22205 and CVE-2021-3199.
  • Threat actors use EBurst to conduct password spraying and guessing against Microsoft Exchange interfaces including ECP, EWS, OWA and PowerShell.
  • Persistence is established via SoftEther VPN installers disguised with names such as conhost.exe or dllhost.exe, connecting to listed domains including hmbcloud[.]com and 98aiblog[.]com.
  • The FBI observed threat actors restricting access to exfiltrated data to IP addresses from Xiamen, China, in some instances.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 17 claims 16 Oct 2026

CISA details five flaws in energy-sector tools openPDC and openHistorian

CISA has published an advisory covering five vulnerabilities in Grid Protection Alliance's openPDC and openHistorian, software deployed worldwide in the energy sector for grid data collection and storage. The advisory sets out affected versions, remediation status and mitigation steps for operators running these systems, with Docker image deployments left without a vendor fix for several of the flaws.

  • CISA's advisory lists five vulnerabilities affecting openPDC versions below 2.9.477/2.9.482 and openHistorian versions below 2.8.580/2.8.585.
  • CVE-2026-100730 and CVE-2026-105278 each carry a CVSS 3.1 base score of 9.8, rated critical.
  • Grid Protection Alliance has no fix planned for the Docker image and does not recommend its production use, per the advisory.
  • A Modbus connection feature (CVE-2026-101022) lets an authenticated user target arbitrary internal network destinations, enabling internal network mapping.
  • Shubham Raj of Causal Security reported the vulnerabilities to CISA, which released the advisory on 8 October 2026.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 17 claims 16 Oct 2026

CISA Warns of Four Flaws in Satel Netco Design, Advises Upgrade to V2.1.7

CISA's advisory details four vulnerabilities affecting versions of Satel Netco Design prior to v2.1.7, deployed worldwide in the communications sector. The flaws range from stored cross-site scripting to path traversal issues that could allow file creation or modification. Compliance and security teams running this software should review patch status now.

  • CISA released advisory ICSA-26-281-03 on October 8, 2026, covering Satel Netco Design versions prior to v2.1.7.
  • CVE-2026-101024, a relative path traversal flaw in the export function, scores 8.8 on CVSS v3.1 and could allow arbitrary code execution under certain conditions.
  • CVE-2026-105269 is a stored cross-site scripting vulnerability exploitable by an authenticated user with Network Operator privileges, scoring 6.8 on CVSS v3.1.
  • Satel advises users to update to Satel Netco Design v2.1.7 to remediate all four vulnerabilities.
  • Alex Williams of Pellera Technologies reported the vulnerabilities to CISA, which states no known public exploitation has occurred.
Source document
FSB Financial Stability Board Source document ↗
Global Financial Stability Board AI, Technology & Data ✓ 13 claims 16 Oct 2026

FSB finalises 12 sound practices for AI adoption at financial institutions

The Financial Stability Board has published its final report on sound practices for responsible AI adoption by financial institutions, finalising a framework first consulted on in June 2026. The 12 practices span board-level governance and lifecycle risk management, intended as a voluntary toolkit for institutions and a coordination reference for supervisors across jurisdictions.

  • The FSB published its final report on Sound Practices for Responsible Adoption of Artificial Intelligence on 15 October 2026.
  • The report follows a public consultation launched in June 2026, and an overview of consultation responses was published the same day.
  • The 12 sound practices are organised into two groups: organisation-wide AI governance and a framework for managing risks across the AI lifecycle.
  • The FSB strongly encourages boards and senior management of financial institutions to reference the practices when developing AI governance, risk management and control frameworks.
  • The report includes case studies illustrating benefits reported by financial institutions and proportionate application of the practices.
Source document
FSB Financial Stability Board Source document ↗
Global Financial Stability Board AI, Technology & Data ✓ 15 claims 16 Oct 2026

FSB publishes overview of around 160 responses to its AI sound practices consultation

The Financial Stability Board has released its overview of consultation responses to the Sound Practices for Responsible Adoption of Artificial Intelligence, the June 2026 proposal aimed at helping financial institutions adopt AI responsibly. The note reports the volume and spread of feedback and states that changes were made to the final report to address it. For firms tracking the FSB's AI workstream, this marks the transition from consultation to final standard.

  • The FSB consultation on Sound Practices for Responsible Adoption of AI ran from 10 June 2026 to 22 July 2026.
  • Around 160 responses were received from a diverse range of respondents across regions and sectors.
  • The overview summarises the feedback and states that main changes were made to the final report to address it.
  • The sound practices are intended to help all types of financial institutions adopt AI responsibly, spanning cyber resilience, financial innovation and governance.
Source document
BIS BIS Press Releases Source document ↗
Global BIS Press Releases AI, Technology & Data ✓ 21 claims 15 Oct 2026

BIS paper warns AI growth could stall as automation thins the consumer demand that funds innovation

A BIS working paper models whether transformative AI can sustain high growth once large-scale automation shifts output toward investment and away from consumption. It matters because the author's calibrated model favours a far more muted outcome than recent transformative estimates, with direct implications for the natural rate of interest that central banks and treasury teams must price.

  • Calibrated model identifies the 'demand bottleneck' scenario, where thinning consumer demand stalls AI progress, as empirically highly plausible.
  • Transformative AI scenario reaches 5.5% growth after two decades; demand bottleneck falls below the pre-AI 2% rate as innovation permanently slows.
  • Paper projects more moderate growth than recent studies such as Korinek et al. (2026) and highlights high uncertainty over the natural rate of interest.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 17 claims 15 Oct 2026

CISA flags critical flaws in dcm4che DICOM archive letting attackers delete and forge medical images

CISA's medical advisory covers six vulnerabilities in J4Care's dcm4chee-arc-light, a DICOM archive used in healthcare settings worldwide. The flaws range from missing authentication and authorization to denial-of-service conditions, with top CVSS v3 scores of 9.1. For anyone running medical imaging infrastructure, this is a patch-now item: the defaults ship insecure, and the vendor fix is already out.

  • Six CVEs affect dcm4chee-arc-light 5.35.1; J4Care recommends upgrading to release 5.35.2 or later.
  • In the default configuration, the archive and HL7 listener accept unauthenticated requests, enabling retrieval, forgery and patient-record reassignment.
  • Top CVSS v3 base score is 9.1 (critical); CISA reports no known public exploitation to date.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 21 claims 15 Oct 2026

CISA warns of path-traversal flaw in Thermo Fisher Torrent Suite; fix in 5.22

CISA's medical advisory ICSMA-26-288-01 covers a single path-traversal vulnerability in Thermo Fisher's Torrent Suite Software, used in the healthcare and public health sector worldwide. The segment runs through what the flaw allows, which versions are affected, the vendor's fix and the defensive measures CISA recommends for firms running the product.

  • CVE-2026-107777 is a path-traversal flaw letting an authenticated attacker read arbitrary files on the Torrent Server accessible to the web service account.
  • All Torrent Suite Software versions 5.18 and earlier are affected; Thermo Fisher recommends updating to version 5.22 or later.
  • The vulnerability is scored CVSS v3.1 6.5 (medium) and CVSS v4 7.1 (high), with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
  • CISA reports no known public exploitation specifically targeting this vulnerability at this time.
  • The product is deployed worldwide in the healthcare and public health sector.
Source document
UK UK DSIT Source document ↗
United Kingdom UK DSIT AI, Technology & Data ✓ 16 claims 15 Oct 2026

UK abolishes Information Commissioner's office, transferring functions to Information Commission

DSIT's commencement tracker for the Data (Use and Access) Act 2025 now covers all four stages. The latest update details stage 4, including the replacement of the Information Commissioner with a new Information Commission, a new right-to-erasure ground tied to stalking and harassment, and extended public-sector data-sharing powers. This item sets out what has been switched on and when.

  • Commencement No. 9 abolishes the Information Commissioner's office and transfers functions to the new Information Commission from 30 September 2026.
  • A new UK GDPR erasure ground, Article 17(1)(g), takes effect 31 March 2026 for data arising from allegations by a convicted stalker, harasser or person under a stalking protection order.
  • The majority of Part 5 data protection and privacy provisions, simplifying UK GDPR and modernising ICO enforcement powers, commenced on 5 February 2026.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 22 claims 15 Oct 2026

CISA flags high-severity privilege-escalation flaw in Inductive Automation's Ignition platform

CISA has published an ICS advisory on a CVSS 8.8 authorization flaw in Inductive Automation's Ignition software, used across critical manufacturing, energy and IT sectors worldwide. This segment covers what the vulnerability allows, which versions are affected, the fixed builds, and the defensive measures CISA sets out for operators running the platform on control-system networks.

  • CVE-2026-92817 allows an authenticated low-level user to escalate to Designer-level access and run arbitrary code on the Ignition Gateway.
  • Affected builds are Ignition 8.1.0-8.1.54 and 8.3.0-8.3.8; fixes shipped in 8.3.9 (August 2025) and 8.1.55 (September 2026).
  • CVSS v3.1 base score is 8.8 (HIGH); CISA reports no known public exploitation targeting the flaw at this time.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 19 claims 15 Oct 2026

CISA adds exploited Ivanti Connect Secure zero-day to KEV catalog, urges immediate patching

CISA has flagged an actively exploited zero-day in Ivanti Connect Secure VPN appliances and added it to the Known Exploited Vulnerabilities catalog. The flaw enables unauthenticated remote command execution used for credential theft and data exfiltration. This segment covers the affected versions, why standard detection tooling falls short, and the recovery steps CISA endorses for suspected compromise.

  • CVE-2026-104935 is a zero-day authentication bypass enabling remote, unauthenticated arbitrary command execution; added to CISA's KEV Catalog on Oct. 13, 2026.
  • Affected: Ivanti Connect Secure 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior; version 22.8 reaches end of life Jan. 31, 2027.
  • Ivanti's Integrity Checker Tool may miss exploitation because threat actor commands execute in memory; network and memory forensics required.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 18 claims 15 Oct 2026

CISA flags unauthenticated video access in Swann SWIFI-SE2KIC cameras

CISA's October 13 advisory details three medium-severity vulnerabilities in Swann Communications' SWIFI-SE2KIC camera firmware. All stem from missing authentication and allow a local-network attacker to see video without logging in. The segment covers what is affected, the severity scoring, and why the mitigation list — rather than a patch — is the operative response for anyone running these devices.

  • Three CWE-306 missing-authentication flaws in Swann SWIFI-SE2KIC firmware <=2.0.22 allow unauthenticated viewing of live video, snapshots and real-time streams.
  • All rated medium (CVSS v3.1 base 6.2); CISA says the vulnerabilities are not remotely exploitable and reports no known public exploitation.
  • Swann provided interim mitigations rather than a cited patch: secure the router/firewall, avoid internet-exposed RTSP, and use strong unique passwords.
Source document
BIS BIS Press Releases Source document ↗
Global BIS Press Releases AI, Technology & Data ✓ 15 claims 15 Oct 2026

BIS flags circular investment loops among AI firms as source of macro risk and opacity

A BIS Bulletin maps how AI firms invest in one another, and how often those investments overlap with commercial supply relationships between the same parties. For anyone tracking financial-stability signals in the AI build-out, it quantifies the concentration and names the risks central banks are starting to watch.

  • 55.2% of incoming investment in AI firms (2021-2025) came from other AI firms; 28.7% of AI firms' deals by value targeted another AI firm.
  • Of AI-to-AI deals, 16.1% by count and 46.4% by value also involved supply-chain relationships between investor and target.
  • BIS staff frame these loops as economically rational but carrying macroeconomic risk and reduced transparency.
Source document
ECDI European Commission Digital Strategy Source document ↗
European Union European Commission Digital Strategy AI, Technology & Data ✓ 17 claims 15 Oct 2026

EU opens tender for a three-year AI Observatory to track sectoral uptake

The European Commission has published a call for tenders to set up and run a new AI Observatory for three years. This segment covers what the contractor must deliver, the indicators it will track, and why the procurement matters for firms watching how Brussels intends to measure AI adoption across strategic sectors.

  • Call for tenders opened 5 October 2026 and closes 3 November 2026, for a three-year contract to set up and operate the AI Observatory.
  • The Observatory supports the Apply AI Strategy and will track AI investments, patents, skills and talent, and computing infrastructure.
  • Deliverables include sector-specific qualitative reports, cross-cutting challenge reports, and an interactive website with a Commission AI policy tracker.
Source document
UK UK DSIT Source document ↗
United Kingdom UK DSIT AI, Technology & Data ✓ 13 claims 15 Oct 2026

UK launches survey of AI security companies to map the market

The UK has published a privacy notice tied to a short survey of AI security companies, run by DCMS's Cyber Security and Digital Identity Directorate and originally commissioned by DSIT. This segment covers what the notice says, what it does not, and why a data-collection exercise aimed at understanding the AI security market is worth a compliance team's attention.

  • DCMS published the privacy notice for its AI security companies survey on 6 October 2026.
  • The survey aims to improve understanding of the AI security market and the services these companies provide.
  • It is run by the Cyber Security and Digital Identity Directorate, previously part of the former DSIT, which originally commissioned it.
Source document
ECB European Central Bank Source document ↗
European Union European Central Bank AI, Technology & Data ✓ 20 claims 13 Oct 2026

ECB's Lane ties US-led AI boom to tighter euro area financial conditions

Philip Lane uses dinner remarks at an AI summit to set out five reasons the ECB is tracking AI, and the one that matters for policy is not productivity. He argues a global AI investment boom Europe does not share is pushing up long-term rates and importing a tightening of euro area financial conditions, while equity and debt valuations pose stability risks.

  • Firms are set to devote around 10% of total investment to AI this year, with AI-related lending accounting for roughly a quarter of recent credit growth to firms.
  • 64% of firms report experimental or moderate AI use and 7% significant use; worker usage reached 52% in 2026 versus 26% in 2024.
  • Lane said the global AI boom is lifting long-term rates, a material tightening of euro area financial conditions relevant to the ECB's policy stance.
Source document
FSB Financial Stability Board Source document ↗
Global Financial Stability Board AI, Technology & Data ✓ 15 claims 13 Oct 2026

FSB submits AI, stablecoin and resolution reports to G20 ahead of Bangkok meeting

The Financial Stability Board has delivered a package of reports to G20 Finance Ministers and Central Bank Governors ahead of their 15 October meeting in Bangkok. This segment unpacks what the bundle contains, including finalised AI sound practices, a stablecoin monitoring note and a peer review finding gaps in public sector backstop funding, and what each signals for the FSB's 2027 agenda.

  • FSB transmitted finalised AI sound practices, a modernisation consultation, an implementation monitoring review and a backstop funding peer review to the G20.
  • A note on global stablecoin arrangements proposes enhanced cross-border monitoring and support for implementing the 2023 recommendations.
  • The backstop funding peer review finds further work needed to complete implementation of Key Attribute 6 for resolving large systemic banks.
Source document