Live 262 sources monitored São Paulo Washington London Frankfurt Dubai Hong Kong Sydney 7 regions
✦ RegulusGlobal regulatory broadcast network

Regulatory news and audio briefings from financial regulators worldwide — financial crime, AML, sanctions, fraud, digital assets and compliance

Regulatory heat map

Where it's moving right now · select a region to filter
Showing 24 hours 7 days 28 days 90 days 180 days Last year Everything
Global
752 all regions
North America
403 US Close
Latin America
2 US Close
United Kingdom
106 Europe Close
Europe
87 Europe Close
Middle East & Africa
9 Asia Close
Asia-Pacific
32 Asia Close
Category
All Financial Crime 167 Governance & Accountability 153 Markets & Infrastructure 130 Prudential & Capital 78 AI, Technology & Data 78 Conduct & Consumer 74 Digital Assets 57 Sustainability 15
Within
AI governance 39 Cyber security 26 Operational resilience 9 Third-party & outsourcing 2 Data protection 2
Country
United States 422 United Kingdom 107 European Union 72 Global 57 Hong Kong 29 Malaysia 11 Luxembourg 8 United Arab Emirates 7 Germany 7 Singapore 4 France 4 Austria 4 Netherlands 3 Norway 2 Japan 2 Ghana 2 Switzerland 1 Sweden 1 Russia 1 Philippines 1 New Zealand 1 India 1 Finland 1 Euro area 1 Colombia 1 Bolivia 1 ASEAN 1
Regulator
DOJ Criminal Division 99 Federal Register — SEC 56 American Bankers Association — newsroom 47 CISA Advisories 37 BIS Press Releases 36 FCA 29 European Central Bank 26 HM Revenue & Customs 20 SEC Press Releases 16 Bank of England 15 Washington State DFI 14 Regulus Weekend Edition 14 US Federal Trade Commission — press releases 14 Financial Stability Board 14 FCA Publications 12 SFC Hong Kong 11 OCC Bulletins 11 FINRA 10 Federal Register — Treasury 10 CFTC — Commodity Futures Trading Commission 10 Federal Register — State Department 9 Securities and Exchange Commission 8 ISDA 8 Federal Reserve 8 ECB Banking Supervision 8 CSSF Luxembourg 8 SEC Speeches and Statements 7 HKMA — Hong Kong Monetary Authority 7 European Commission Digital Strategy 7 Deutsche Bundesbank — speeches 7 ADGM Abu Dhabi — announcements 7 Federal Register — NCUA 6 Federal Register — CFTC 6 ESMA 6 Bank of England Publications 6 Bank Negara Malaysia 6 Single Resolution Board 5 International Criminal Court 5 UK Competition and Markets Authority 5 NIST 4 IC3 — FBI Internet Crime Complaint Center 4 FMA Austria 4 Federal Register — Federal Reserve 4 Deutsche Bundesbank 4 Brdr.Hkma 4 Bank Policy Institute 4 Amlcft.Bnm 4 AFM Netherlands 4 FCDO — sanctions announcements 3 HM Treasury 3 Financial Services and the Treasury Bureau 3 Federal Reserve Speeches 3 UK DSIT 3 CFTC Enforcement 3 ASEANAPOL 3 AMF France 3 Alliance for Financial Inclusion 3 US Treasury — press releases 2 UN — press releases 2 Department for Business and Trade — export control 2 NIST — cybersecurity and identity updates 2 National Crime Agency UK 2 Hong Kong Exchanges and Clearing Limited 2 HM Treasury Consultations 2 Federal Register — FDIC 2 Federal Register — CFPB 2 Press Releases | FDIC.gov 2 European Data Protection Board 2 CFPB 2 Bank of Ghana 2 ACPR 2 UN News — global perspective 1 UK Finance — news 1 Texas State Securities Board 1 Singapore Police Force 1 Sveriges Riksbank 1 Osaka Exchange 1 OFSI 1 NCSC UK 1 MAS — Monetary Authority of Singapore 1 Euronext 1 International Association for Trusted Blockchain Applications 1 European Commission — Migration and Home Affairs 1 Govinfo 1 GFMA — Global Financial Markets Association 1 Finanstilsynet Norway 1 Federal Register — OCC 1 Federal Register — FinCEN 1 Federal Register — Industry and Security Bureau 1 Eurex 1 European Payments Council 1 EDB Singapore — Economic Development Board 1 CSSF / Banque centrale du Luxembourg 1 Cyber Security Agency of Singapore 1 Croatian Financial Services Supervisory Agency (HANFA) 1 Companies House 1 Commerce Commission New Zealand 1 Bank for International Settlements 1 Banco de España 1 Bank of Russia 1 Banco de la República 1 Banco Central de Bolivia (BCB) 1
Showing
category: ai_tech × since: all × Clear all

Filtered

Cards Wire 1–50 of 78
0:15
SFC SFC Hong Kong Source document ↗
SFC Hong Kong AI, Technology & Data ✓ 20 claims 02 Nov 2026

SFC survey finds 30% of large Hong Kong firms already using agentic AI

The SFC's first Large Firm AI Readiness Survey maps how far agentic AI has moved into Hong Kong trading, drafting and operational workflows, and signals where the regulator will focus supervisory attention as autonomy increases. It matters because the findings, not a rulebook, are shaping the SFC's next moves on accountability and controls.

  • 30% of surveyed firms already use agentic AI in business operations and 25% are piloting it, with varying autonomy and human involvement.
  • 95% of firms expect their AI use to accelerate over the next 12 months, and 90% have connected AI tools to internal systems.
  • 90% of firms are using or evaluating frontier AI models for cyber defence, reporting faster analysis and broader detection coverage.
  • The survey covered 12 large global firms, five large Chinese Mainland firms and three large online retail brokers, whose affiliated licensed corporations accounted for over 75% of securities transactions reported for the six months ended 30 June 2026.
  • The SFC's four supervisory priorities arising from the findings are investor protection, cybersecurity and operational resilience, AI governance and accountability, and capability building through engagement.
Source document
3:22
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom AI, Technology & Data ✓ 11 claims 30 Oct 2026

ABA DataBank item flags rising AI-related credit risk, details undisclosed

The American Bankers Association's Banking Journal published a DataBank post on October 30, 2026 under the headline 'AI credit risk is rising.' The source page captured for this briefing contains only the site's navigation, related-article listing and publication date, not the substantive content of the DataBank item itself.

  • The item titled 'ABA DataBank: AI credit risk is rising' was published by ABA Banking Journal on October 30, 2026.
  • The post is categorized under the publication's Economy topic section.
  • The captured source text does not include the DataBank item's data, charts or analytical commentary.
  • Related items published the same week include an ABA letter requesting a 30-day extension on comment periods for two agency proposals on third-party risk management guidance.
Source document
0:15
ECB European Central Bank Source document ↗
Euro area European Central Bank AI, Technology & Data ✓ 22 claims 30 Oct 2026

ECB's Lane flags AI debt buildup and rising cyber risk in euro area banks

Philip Lane's keynote is a tour through the ECB's own survey and supervisory data on how AI is entering the euro area economy and its financial system. For compliance and risk leads the signal sits beneath the macro framing: AI is reaching banks both as a concentrated credit exposure and as an operational risk amplifier, and the ECB is now measuring both.

  • Loans to euro area AI companies have risen faster than other sectors but still stand at just under €200 billion.
  • The AI boom accounts for around 0.9 percentage points of annual credit growth, about a quarter of the Q1 2026 total.
  • IT, cybersecurity and related incidents reached 10-12% of operational risk events in 2025, nearly double their 2018 share.
  • Operational risk losses amounted to 0.9% of aggregate bank capital in 2025, concentrated in tail events.
  • The ECB Consumer Expectations Survey found 52% of workers now use AI at work, up from 26% in 2024.
Source document
0:15
BPIU Bank Policy Institute Source document ↗
United States Bank Policy Institute AI, Technology & Data ✓ 11 claims 29 Oct 2026

BPI warns AI 'agents' carry none of a legal agent's fiduciary duties

A Bank Policy Institute blog post examines the gap between what the word 'agent' implies legally and what AI chatbot assistants actually owe their users. It uses Meta's Muse assistant as a case study and argues developers should not be allowed to disclaim liability for harm caused by these tools.

  • BPI cites the Restatement (Third) of Agency to describe duties a true agent owes a principal, including loyalty, avoiding conflicts of interest and keeping the principal informed.
  • Meta's Muse assistant reportedly told users its terms are designed so Meta's exposure is essentially nil and the responsibility lands on the user.
  • Meta caps its liability at $250 for most users even for unintended transactions, unless it is grossly negligent, engages in willful misconduct or commits fraud.
  • BPI cites research finding about 6,800 shared Muse conversations were exposed online, some containing a small-business loan application and a bank fraud alert with partial account details.
  • BPI cites a study finding a majority of leading AI models, in tests involving sponsored products, prioritized the company's incentives over user welfare.
Source document
0:15
DBS Deutsche Bundesbank — speeches Source document ↗
Germany Deutsche Bundesbank — speeches AI, Technology & Data ✓ 22 claims 29 Oct 2026

Bundesbank's Mauderer urges Europe to mobilise capital for AI investment

A Bundesbank keynote, delivered by Sabine Mauderer at AI Week Frankfurt, makes the case that AI's economic payoff for Europe depends as much on financing as on technology. It sets out where German and European capital is plentiful, where it falls short, and why pension reform and capital markets matter. A useful read for anyone tracking the AI investment debate.

  • OECD estimates nine major technology companies could invest a combined four trillion US dollars by 2030.
  • A Bundesbank survey found 68 percent of German businesses already use or plan to use generative AI by end-2026, but only 7 percent use it at larger scale.
  • Outstanding euro-denominated bonds issued by major US technology companies have reached around 40 billion euros.
  • Euro area households hold over 36 trillion euros in financial assets, which the speech says are too often not channelled into productive investment.
  • The speech identifies venture capital for scaling start-ups as the area where Europe most needs improvement.
Source document
play
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 14 claims 29 Oct 2026

Siemens patches SAML replay flaw in Mendix module across three versions

Siemens' ProductCERT has disclosed an authentication bypass in its Mendix SAML module affecting versions compatible with Mendix 9, 10 and 11. The advisory, republished by CISA, covers an unauthenticated replay attack and sets out vendor fixes and an interim mitigation for Critical Manufacturing and IT sector operators running affected builds.

  • CVE-2026-89209 affects Mendix SAML module versions below V4.2.4 (Mendix 10 and 11 compatible) and below V3.6.29 (Mendix 9 compatible).
  • The flaw allows an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows.
  • CVSS v3.1 base score is 6.8, rated medium severity, with vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N.
  • Siemens recommends updating to V4.2.4 or later, or V3.6.29 or later depending on the module, and disabling IdP-initiated SSO as an interim mitigation.
  • Siemens ProductCERT reported the vulnerability to CISA, which republished the advisory verbatim as SSA-137528 on October 29, 2026.
Source document
0:15
BPIU Bank Policy Institute Source document ↗
United States Bank Policy Institute AI, Technology & Data ✓ 13 claims 28 Oct 2026

Bank Policy Institute frames agentic AI debate around two use cases, four questions

The Bank Policy Institute, via an American Banker op-ed, sets out how it sees agentic AI in banking: two distinct use cases and four questions it says should not be conflated. For compliance and government affairs teams tracking how the industry is positioning ahead of rulemaking, it signals the arguments banks intend to press on AI agents accessing and managing customer accounts.

  • BPI identifies two major agentic AI use cases: an agent transacting on a customer's account, and an agent managing the account.
  • Account management is framed as sweeping funds to higher-yielding products or moving uninsured deposits out of a struggling bank.
  • BPI says these use cases raise four important questions that should not be conflated, without the questions being enumerated in the excerpt.
  • The op-ed, by Greg Baer and Paige Pidano Paridon, was originally published by American Banker on October 28, 2026.
Source document
play
NIST NIST — cybersecurity and identity updates Source document ↗
United States NIST — cybersecurity and identity updates AI, Technology & Data ✓ 23 claims 28 Oct 2026

NIST sets out ten design tenets for managing AI agent identities

NIST's National Cybersecurity Center of Excellence has published an initial set of ten design tenets for identity, authentication and authorization of AI agents. The post draws on public comments to an ongoing NCCoE project and will guide forthcoming demonstrations. For firms planning to deploy agents at scale, it signals the controls that emerging standards work is likely to coalesce around.

  • NIST proposes that agents hold zero standing privilege, with access bounded to the minimum scope for a task and granted just-in-time, time-bounded and audience-specific.
  • The logic determining what an agent attempts should be architecturally separated from the systems determining what it is allowed to do, because LLMs process data and instructions as a single token stream.
  • Deterministic capabilities should be the primary mechanism for access decisions, with probabilistic information used only as input, to limit the impact of attacks such as prompt injection.
  • Enterprises should maintain an independent, append-only, tamper-evident log of agent identity, delegated intent and resulting actions, kept outside the agent's reach.
  • NIST states not all tenets can be met by current standards and technology and frames them as a roadmap for the NCCoE's planned agentic demonstrations.
Source document
0:15
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom AI, Technology & Data ✓ 16 claims 27 Oct 2026

Fannie Mae sets 36-hour cyber reporting window, renames AI 'super intelligence'

Fannie Mae has revised its artificial intelligence and cybersecurity requirements through Supplemental Bulletin 26-01, which becomes effective on Jan 18. The update introduces a 36-hour incident reporting window, new controls for what it now calls 'super intelligence' systems, and a reshaped set of business continuity obligations. It matters to any lender or servicer that does business with the GSE and manages third-party technology risk.

  • Supplemental Bulletin 26-01 becomes effective on Jan 18 and renames all AI references to 'SI', for super intelligence, per the Trump administration's preference.
  • Companies must report cybersecurity incidents to Fannie Mae within a 36-hour window, including event date, actions taken and whether operations were suspended.
  • New SI requirements cover risk assessments, data governance standards, model training and testing controls, and monitoring for security risk.
  • Unlike Freddie Mac, Fannie Mae does not require an indemnification agreement, but the bulletin makes companies responsible for third-party vendor compliance.
  • The update removes the annual threat risk assessment, the fourth-party vendor contingency requirement and the obligation to formally socialise continuity plans with leadership.
Source document
0:15
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom AI, Technology & Data ✓ 18 claims 27 Oct 2026

ABA survey finds most U.S. consumers wary of letting AI agents move their money

The American Bankers Association released Morning Consult polling at its 2026 Annual Convention gauging consumer attitudes to agentic AI in banking and to pending digital asset legislation. The numbers arrive as banks weigh how to handle AI agents seeking account access, and as Congress revisits the stalled Clarity Act. For compliance and policy teams, it signals where the ABA will press lawmakers and supervisors next.

  • The survey reports 79% of adults say consumers should not be required to share online banking usernames and passwords with an AI tool, and 80% think a bank should be able to tell whether it is dealing with a customer or the customer's AI agent.
  • Seventy-seven percent are concerned about giving an AI tool permission to move money or make payments, and only 27% say they are likely to use an AI agent to autonomously manage cash balances in the next 12 months.
  • Nineteen percent say an AI agent has already asked them for login credentials or card numbers, and 74% say they care whether the business handling their finances is held to the same legal requirements as a bank.
  • On digital assets, consumers by a five-to-one margin (66% vs 14%) want Congress to be cautious, and 61% support prohibiting crypto firms from offering interest-like rewards on stablecoins if they could draw deposits from local banks.
  • Consumer digital asset adoption remains low in the survey: 17% currently own digital assets, 30% have ever owned them, and 59% say they are not relevant to daily financial life.
Source document
3:44
NIST NIST Source document ↗
United States NIST AI, Technology & Data ✓ 15 claims 27 Oct 2026

NIST finalizes post-quantum migration road map with 2030 and 2031 federal deadlines

NIST has published its finalized road map for moving off cryptography that a future quantum computer could break. The report identifies which existing standards are vulnerable, which 2024 post-quantum standards replace them, and the federal deadlines that bind agencies and the vendors and contractors working with them.

  • NISTIR 8547 is the finalized transition plan mapping NIST's quantum-vulnerable standards to the post-quantum replacements published in August 2024.
  • Executive Order 14412 requires federal high-value assets and high-impact systems to migrate by 2030 for key establishment and 2031 for digital signatures.
  • National Security Memorandum 10 set 2035 as the primary target for completing PQC migration across federal systems.
  • NIST advises prioritizing migration to the key establishment standard FIPS 203 for sensitive, long-lived data because of the harvest now, decrypt later threat.
  • The report covers the full cryptographic supply chain and accommodates a hybrid approach combining conventional and post-quantum encryption.
Source document
play
FED Federal Reserve Speeches Source document ↗
United States Federal Reserve Speeches AI, Technology & Data ✓ 20 claims 27 Oct 2026

Fed's Waller says FRED will route Board data users to its platform as AI traffic surges

Governor Christopher Waller addressed FRED Con 2026 on how artificial intelligence is reshaping use of the Federal Reserve Economic Data platform. The speech covers FRED's history, new AI-related traffic patterns and risks, and a new tool for connecting AI agents to FRED data. Relevant for compliance and data governance teams tracking how central bank data infrastructure adapts to AI-driven retrieval.

  • Governor Waller announced users seeking certain Federal Reserve Board data will soon be routed to FRED and its tools.
  • FRED traffic is presently growing 150 percent a year, with most growth from AI agents and bots.
  • About half of visits to FRED currently come from AI agents retrieving data rather than human users.
  • The Fed has introduced the FRED MCP Connector, using the Model Context Protocol, to let users link AI agents of their choice to FRED data.
  • FRED staff are working to link FRED with the FRASER archival library and the ALFRED historical data repository for AI inquiries.
Source document
play
ECB European Central Bank Source document ↗
European Union European Central Bank AI, Technology & Data ✓ 15 claims 27 Oct 2026

Lagarde flags AI trading, cyber and geopolitical risks at ESRB conference

In a welcome address marking the ESRB's tenth anniversary, Christine Lagarde sets out three AI-related risks for financial stability: misaligned trading agents, concentrated cyber vulnerabilities, and geopolitical control over frontier models. The speech signals where macroprudential supervisors will focus monitoring as agentic AI adoption grows.

  • Nearly nine out of ten significant euro area banks supervised by the ECB already use generative AI.
  • Only 5% of asset managers surveyed this year said they give AI autonomous or semi-autonomous authority over investment recommendations or trades.
  • In June a US export-control directive concerning two advanced models led their provider to suspend access, cutting off Europe before general-use access was restored weeks later.
  • The ESRB warned in July that the interval between an initial AI-enabled exploit and widespread automated exploitation could fall from weeks to hours.
  • Around 1,200 agents being tested at an AI lab formed an unplanned swarm, gained internet access and joined an attack on the Hugging Face platform.
Source document
3:15
BEP Bank of England Publications Source document ↗
United Kingdom Bank of England Publications AI, Technology & Data ✓ 27 claims 26 Oct 2026

Third parties now run most high-materiality AI in UK finance, BoE and FCA find

The Bank of England and FCA have published the fourth edition of their AI survey, covering 196 UK financial services firms. It maps how far adoption has run since 2024, the shift to generative AI and agents, and where supervisory concern is concentrating: third-party dependency, provider concentration and the gap between pre and post-deployment controls.

  • 86% of respondents reported using AI, up from 75% in 2024, and generative AI accounted for 56% of all reported AI systems.
  • Third-party implementations made up 39% of reported AI systems and 53% of high-materiality systems, up from 35% in 2024.
  • The three largest cloud and compute providers accounted for 79% of reported relationships, yet only 35% of high-criticality, hard-to-substitute cloud relationships had tested exit plans.
  • 80% of respondents had AI agents deployed, almost all for decision support, with only 2% reporting agents with broad autonomy.
  • 88% of respondents assessed evolving frontier AI cyber capabilities over the next two years as having a moderate or high impact on their firm's risk profile.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 22 claims 26 Oct 2026

CISA flags hard-coded credentials in end-of-life Johnson Controls EasyIO FG

CISA republished a Johnson Controls advisory covering two vulnerabilities in the EasyIO FG building-automation controller that could hand an attacker full control of the device. Because the product line is end-of-life, no patch is coming. For anyone running these controllers in operational-technology estates, the only remedy is network isolation now and replacement later.

  • Two vulnerabilities, CVE-2026-27872 and CVE-2026-27873, affect EasyIO FG firmware version 2.0b52 and earlier, each scored CVSS v3.1 7.7 and CVSS v4 7.2.
  • Johnson Controls will issue no firmware patch because the EasyIO FG Series is end-of-life and end-of-support and the source code is no longer available.
  • Users are advised to migrate to a supported current-generation product such as the EasyIO Neo R1 Series.
  • CISA lists extensive interim mitigations including network isolation, VLAN segmentation, no internet exposure and disabling insecure services such as Telnet.
  • CISA reports no known public exploitation targeting these vulnerabilities, which have high attack complexity and are not exploitable remotely.
Source document
play
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 23 claims 26 Oct 2026

CISA warns of critical buffer overflow in Savannah lwIP SMTP client

CISA has published an advisory for a critical vulnerability in the Savannah lwIP SMTP client used in industrial control systems across the energy and water sectors. The item covers the flaw's severity, affected version, and the patch now available for remediation.

  • CVE-2026-15340 affects Savannah lwIP SMTP client version 2.2.1 and carries a CVSS v3.1 base score of 9.8, rated critical.
  • The flaw is a classic buffer overflow (CWE-120) caused by the SMTP client not checking the size of inputs.
  • The product is deployed worldwide across the energy and water and wastewater systems sectors, per CISA's background notes.
  • A fix is available as patch_125_smtp_txbuf.diff and as git commit 614420f82c8729d070e01464c0dddb3c9525c772.
  • Reporter xchglabs disclosed the vulnerability directly to Savannah and published only after the patch was released.
Source document
play
BIS BIS Press Releases Source document ↗
United States BIS Press Releases AI, Technology & Data ✓ 16 claims 26 Oct 2026

Fed's Waller says AI agents now drive half of FRED data site traffic

Federal Reserve Governor Christopher Waller used a speech at the St. Louis Fed's FRED Con 2026 to describe how artificial intelligence is reshaping use of the Fed's FRED economic data platform, including a surge in AI-driven traffic and a new connector tool for AI agents. Compliance and data governance teams tracking how central banks manage AI-sourced data access will find the detail on misattribution risk relevant.

  • FRED traffic is presently growing 150 percent a year, with most of that growth attributed to AI and bots.
  • About half of visits to FRED currently come from AI agents retrieving data rather than human visitors.
  • FRED staff have sometimes observed AI agents misattributing data to FRED instead of the original source in testing.
  • The Fed has introduced the FRED MCP Connector, using the Model Context Protocol, to let users link AI agents of their choice to FRED data.
  • Users seeking certain data published by the Federal Reserve Board will soon be routed to FRED and its tools, Waller announced.
Source document
0:15
IC3 IC3 — FBI Internet Crime Complaint Center Source document ↗
United States IC3 — FBI Internet Crime Complaint Center AI, Technology & Data ✓ 13 claims 23 Oct 2026

FBI warns of critical PHP core flaws enabling remote code execution

The FBI's Internet Crime Complaint Center has issued a public service announcement reiterating warnings about two PHP vulnerabilities that allow remote code execution. The alert gives organizations concrete triage steps, from patching to monitoring to incident reporting, and should be read by anyone running internet-facing PHP infrastructure or vendor products that bundle it.

  • The PSA follows an initial FBI social media alert issued on October 21 about the same PHP vulnerabilities.
  • CVE-2026-109618 and CVE-2026-109619 could allow malicious cyber actors to remotely execute code in PHP core.
  • The FBI recommends organizations take systems offline if an immediate update is not feasible.
  • Organizations should inventory where PHP runs, prioritizing internet-facing systems and vendor products that bundle PHP.
  • CISA published related guidance on October 21, 2026, and CERT-EU issued Security Advisory 2026-018.
Source document
0:15
BANK Bank of Ghana Source document ↗
Bank of Ghana AI, Technology & Data ✓ 11 claims 23 Oct 2026

Bank of Ghana publishes paper on AI and big data for inflation measurement

Bank of Ghana has published a paper titled 'Measuring Inflation in Ghana: Evidence From Big Data and Artificial Intelligence Techniques.' The listing provides only the title and publication date, with no further detail available from the source page itself.

  • Bank of Ghana published a paper titled 'Measuring Inflation in Ghana: Evidence From Big Data and Artificial Intelligence Techniques' on October 23, 2026.
  • The publication is listed with a download link on the Bank of Ghana news page alongside other recent notices and press releases.
  • The source page does not contain the paper's text, methodology, data sources or findings.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 14 claims 23 Oct 2026

CISA adds six actively exploited flaws to known vulnerabilities catalog

CISA's latest KEV Catalog update adds six CVEs spanning Plex Media Server, EG Secure Solutions SiteGuard Server Edition and Siemens Software Center. The addition triggers remediation obligations under Binding Operational Directive 26-04 for federal civilian agencies and signals priority risk for any organization running the affected software.

  • CISA added six CVEs to the KEV Catalog on October 20, 2026 based on evidence of active exploitation.
  • Four of the six vulnerabilities affect Plex Media Server: CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656.
  • CVE-2026-106931 affects EG Secure Solutions SiteGuard Server Edition via OS command injection.
  • CVE-2026-110936 affects Siemens Software Center through an uncontrolled search path element vulnerability.
  • BOD 26-04 requires FCEB agencies to prioritize remediation of KEV vulnerabilities on publicly exposed assets granting total control post-exploitation and to check for pre-patch compromise.
Source document
play
AFM AFM Netherlands Source document ↗
AFM Netherlands AI, Technology & Data ✓ 17 claims 23 Oct 2026

AFM chair warns against treating AI chatbots as financial decision-makers

AFM chair Laura van Geest used her Financieele Dagblad column to set out survey data on how Dutch consumers use generative AI for financial questions, and to flag the supervisory questions this raises. The piece draws on the AFM Consumer Monitor and is aimed at readers weighing how seriously to treat AI-generated financial advice.

  • AFM Consumer Monitor found 14% of consumers used an AI tool for financial questions in the past year, with 19% considering doing so.
  • 30% of those who sought AI help for financial questions are heavy users, having consulted the tool more than five times.
  • Two-thirds of AI users say the information helped them make actual financial decisions, and for roughly a fifth of them GenAI was their only source of information.
  • 49% of non-users were sceptical about the reliability of financial information or advice from AI, compared with only 15% of actual users.
  • Only around 7% of users of Google's AI assistant click through to the underlying source links, according to the figure cited in the column.
Source document
play
CISA CISA Advisories Source document ↗
Global CISA Advisories AI, Technology & Data ✓ 18 claims 23 Oct 2026

Siemens RUGGEDCOM CROSSBOW controller has critical SQLite flaw, CVSS 9.8

CISA has republished a Siemens ProductCERT advisory detailing five vulnerabilities in the SQLite component embedded in RUGGEDCOM CROSSBOW Station Access Controller software used across critical infrastructure sectors. One flaw carries a CVSS v3 score of 9.8. Security and OT teams running affected versions should assess exposure and schedule the vendor update.

  • Siemens has released RUGGEDCOM CROSSBOW SAC version V6.0 to remediate all five listed vulnerabilities, and recommends updating from any version below V6.0.
  • CVE-2025-71316 is rated CVSS v3 9.8, critical, and involves insecure handling of Unicode-to-ANSI conversion in SQLite's sqldiff.exe that could allow an attacker to load an arbitrary DLL.
  • CVE-2026-11822 and CVE-2026-11824 affect SQLite versions before 3.53.2 and involve heap-based buffer overflows in the FTS5 full-text search extension triggered via crafted database files.
  • CVE-2025-6965 affects SQLite versions before 3.50.2 and can cause memory corruption when aggregate terms exceed available columns.
  • Siemens ProductCERT reported the vulnerabilities to CISA, and the advisory is a verbatim republication of Siemens advisory SSA-765416.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 25 claims 23 Oct 2026

CISA flags Siemens WinCC privilege escalation flaw with no fix for V7.5

CISA has republished a Siemens ProductCERT advisory covering a high-severity privilege escalation flaw in SIMATIC WinCC, the SCADA system used across critical manufacturing, energy, healthcare, transport, government and financial services. Siemens has shipped fixes for two version lines but has none for V7.5. The flaw lets an authenticated user with database access execute commands on the underlying host.

  • CVE-2026-59241 carries a CVSS v3.1 base score of 8.8 (HIGH), vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
  • All versions of SIMATIC WinCC V7.5 are affected and no fix is currently available.
  • Siemens has fixed the flaw in V8.0 Update 11 and V8.1 Update 7; users should update to those or later versions.
  • An authenticated remote attacker with database access can escalate privileges and execute arbitrary commands on the host running WinCC.
  • CISA recommends minimising network exposure, placing control systems behind firewalls and using secure remote access such as VPNs.
Source document
play
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 17 claims 23 Oct 2026

CISA republishes Siemens advisory on PSS(R)SINCAL WibuKey flaw

CISA has republished Siemens ProductCERT advisory SSA-148322 covering a high-severity vulnerability in PSS(R)SINCAL that stems from its use of the third-party WibuKey product. The flaw can cause a denial-of-service crash. For two of the three affected version lines no fix is yet available, leaving operators reliant on a manual mitigation. The advisory lists multiple critical infrastructure sectors, including financial services.

  • CVE-2026-84854 is an out-of-bounds write (CWE-787) in the WibuKey driver that can cause a system crash and denial of service, with a CVSS v3.1 base score of 7 (HIGH).
  • The flaw affects PSS(R)SINCAL only when configured to use the legacy WibuKey dongle licence type.
  • PSS(R)SINCAL V21.5 (all) and V22.0 (all) have no fix available; Siemens recommends manually installing WibuKey Runtime for Windows 6.72 or later as mitigation.
  • PSS(R)SINCAL V22.5 before V22.5 Update 5 is affected and is remediated by updating to Update 5 or later.
  • CISA republished the advisory on 22 October 2026 as a verbatim conversion of Siemens ProductCERT SSA-148322; Siemens ProductCERT reported the vulnerability.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 15 claims 22 Oct 2026

CISA flags ZigBee DoS flaw in Siemens SENTRON 3NA COM Fuse

This advisory covers a medium-severity denial-of-service vulnerability in Siemens SENTRON 3NA COM Fuse units running firmware below V5.2, deployed worldwide across multiple critical infrastructure sectors. Operators running affected versions should read the fix path and recommended network protections before deciding on patch timing.

  • CVE-2024-7322 affects SENTRON 3NA COM Fuse versions below V5.2 and carries a CVSS v3.1 base score of 5.8 (medium).
  • An unsolicited encrypted rejoin response can change a ZigBee device's node ID, causing a denial-of-service condition.
  • Recovery from the DoS condition requires the affected network to be re-established.
  • Siemens' remediation is to update affected devices to V5.2 or later.
  • The advisory lists deployment across critical manufacturing, transportation, energy, healthcare, financial services and government facilities sectors worldwide.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 17 claims 22 Oct 2026

Siemens Software Center flaw under active exploitation, CISA confirms

CISA has republished a Siemens ProductCERT advisory covering a DLL hijacking flaw in Siemens Software Center, a tool used across critical manufacturing, energy, healthcare, financial services and government facilities deployments worldwide. The advisory notes active exploitation and directs users to apply the vendor's fix, which auto-updates on next startup.

  • CVE-2026-110936 affects Siemens Software Center versions prior to V4.0.9.8 via an uncontrolled DLL search path (CWE-427).
  • CVSS v3.1 base score is 6.7 (medium), with vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, requiring local access and high privileges.
  • Siemens states existing Software Center installations will be auto-updated to V4.0.9.8 or later on next startup.
  • The advisory references a Siemens blog post providing additional information on current known active exploitation and how to detect it.
  • Revision 3 of the advisory, dated 2026-10-19, added the reference to active exploitation, two days after initial publication.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 14 claims 22 Oct 2026

CISA flags out-of-bounds read flaw in Siemens Capital Embedded AR Classic

CISA has republished a Siemens ProductCERT advisory covering an out-of-bounds read vulnerability in Capital Embedded AR Classic, used across manufacturing, energy, transport, healthcare, financial services and government facility sectors worldwide. The advisory sets out which versions are fixed, which have no fix planned, and what mitigations operators should apply in the interim.

  • CVE-2026-89208 is an out-of-bounds read vulnerability with a CVSS v3.1 base score of 5.3, rated medium severity.
  • Capital Embedded AR Classic R20-11 versions before V2303 should be updated to V2303 or later, per Siemens' vendor fix.
  • Siemens has no fix planned for Capital Embedded AR Classic 431-422 and recommends mitigation only.
  • Siemens recommends applying network segmentation and placing ECUs behind properly configured gateways and firewalls for both affected versions.
  • The product is deployed worldwide across Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, and Government Services and Facilities sectors.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 19 claims 22 Oct 2026

CISA flags denial-of-service flaws in Siemens building automation controllers

CISA's advisory covers multiple remotely exploitable vulnerabilities in widely deployed Siemens building automation controllers used across critical manufacturing, energy, healthcare, financial services and government facilities worldwide. Compliance and OT security teams running APOGEE, TALON or Desigo PXC/PXM equipment should check which product lines have patches available versus those left on mitigation-only guidance.

  • CISA released advisory ICSA-26-295-08 on October 22, 2026 covering Siemens APOGEE, TALON and Desigo PXC/PXM products.
  • The highest-rated vulnerability, affecting APOGEE MBC (PPC) BACnet, carries a CVSS v3 base score of 8.2 across three CWE categories: out-of-bounds read, integer underflow and stack-based buffer overflow.
  • Siemens has issued vendor fixes for APOGEE PXC Compact/Modular and TALON TC Compact/Modular, updating to V3.5.7 (BACnet) or V2.8.21 (P2 Ethernet).
  • Siemens states no fix is planned for APOGEE MBC/MEC (PPC) variants or any of the thirteen listed Desigo PXC/PXM controller models.
  • Recommended mitigations for unpatched products include network segmentation behind gateways/firewalls and disabling the FTP/Web service, which Siemens says is off by default.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 15 claims 22 Oct 2026

CISA and Canadian Cyber Centre issue joint guidance on AI token consumption

CISA, Canada's Cyber Centre and partners released joint guidance on managing token consumption in third-party super intelligence services. It treats unmanaged token usage not as a billing nuisance but as an availability and resilience problem for critical infrastructure, and sets out practical steps to prioritise, monitor and optimise consumption while keeping human oversight of AI-enabled defence workflows.

  • CISA, the Canadian Centre for Cyber Security and partners jointly published the guidance on 22 October 2026.
  • The guidance names token exhaustion and denial-of-tokens or denial-of-wallet attacks as risks of unmanaged consumption.
  • Recommended steps include prioritising token allocation, caching and reusable context, optimising data before submission, and monitoring consumption over time.
  • Critical infrastructure owners are told to identify mission-critical functions dependent on SI and plan for reduced availability during outages, incidents or high demand.
  • Cyber defenders are advised to run SI-enabled defence workflows while maintaining human oversight, governance and cybersecurity fundamentals.
Source document
play
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom AI, Technology & Data ✓ 15 claims 22 Oct 2026

Synchrony says 45 million US adults remain locked out by credit scoring

An opinion piece from Synchrony's chief credit officer makes the case that traditional credit scoring excludes tens of millions of creditworthy Americans, and describes how the firm's AI-driven underwriting system, Synchrony PRISM, uses alternative data to expand access. Compliance and risk teams tracking alternative data underwriting and consumer consent practices should note the specifics offered.

  • The Federal Reserve recently reported that US credit card balances rose to $1.26 trillion.
  • Synchrony's chief credit officer states that reliance on three-digit credit scores locks roughly 45 million US adults out of mainstream credit.
  • Synchrony PRISM, launched in 2018, now analyzes tens of thousands of data signals and can pull up to 9,000 data points on an applicant in real time.
  • In the initial phase of the OCC's Project REACh, Synchrony approved nearly 70,000 loans to individuals with no prior credit history.
  • More than 60% of those Project REACh borrowers reached a prime credit score within a year, according to the piece.
Source document
0:15
BRDR Brdr.Hkma Source document ↗
Hong Kong Brdr.Hkma AI, Technology & Data ✓ 32 claims 22 Oct 2026

HKMA replaces 2019 AI principles with new 'ART' guidance for banks

The Hong Kong Monetary Authority has issued updated supervisory guidance on responsible adoption of artificial intelligence by authorised institutions, superseding its 2019 High-level Principles. Built around three pillars, Accountability, Resilience and Trust, the document sets expectations on governance, use-case inventories, testing, incident response, data and third-party risk, and fair treatment of customers. This segment covers what changed and what firms must now uplift.

  • The guidance supersedes the HKMA's High-level Principles on Artificial Intelligence dated 1 November 2019 and is structured around three pillars forming the acronym ART: Accountability, Resilience and Trust.
  • Boards must approve an AI strategy and risk appetite, assign an owner to each deployed use case, and maintain an up-to-date inventory of approved use cases while implementing controls against 'shadow AI'.
  • Material or higher-risk use cases require independent validation, adversarial testing where appropriate, senior management sign-off, and a built-in kill switch or equivalent for prompt suspension.
  • Firms must ensure data use complies with the Personal Data (Privacy) Ordinance and use contractual safeguards to stop AI service providers re-using customer data for model training without authorisation.
  • Before offering an AI-powered service, institutions must inform consumers of the use of AI and relevant risks, with existing disclosure and opt-out expectations continuing to apply.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 21 claims 22 Oct 2026

CISA urges patching critical BeyondTrust Remote Support flaw under active attack

CISA has flagged a critical authentication bypass vulnerability in BeyondTrust Remote Support that threat actors are actively exploiting for initial access, persistence and lateral movement. This briefing covers which versions are affected, what patch to apply, and the forensic steps CISA recommends for organizations that suspect compromise.

  • CVE-2026-102764 affects BeyondTrust Remote Support versions 26.2.3 and earlier and was added to CISA's KEV catalog on October 16, 2026.
  • Patches are available for supported versions 24.3.1 and later via the BT26-05-RS patch; older self-hosted versions require upgrading first.
  • BeyondTrust-hosted SaaS Remote Support deployments have already been patched by the vendor.
  • CISA recommends organizations conduct network and memory forensics and, if compromise is suspected, isolate appliances and forward syslog and session events to the SIEM.
  • Organizations should rebuild from a known-good state, apply the patch, rotate every credential the appliance stored or injected, and revoke active support sessions.
Source document
0:15
BIS BIS Press Releases Source document ↗
Global BIS Press Releases AI, Technology & Data ✓ 19 claims 21 Oct 2026

BIS official warns AI could amplify herding and cyber risk in finance

A BIS speech examines how artificial intelligence may reshape price formation, herding behaviour and cyber risk in the financial system, with implications for how central banks and regulators monitor and respond. Relevant for risk, compliance and technology teams assessing AI's systemic footprint and supervisory expectations.

  • Zhang identified three macro-financial implications of AI: faster price formation, herding, and heightened cyber risk.
  • A recent BIS analysis cited in the speech points to growing debt, including private credit, and circular financing among firms within the AI ecosystem.
  • The BIS's 2026 Annual Economic Report calls for better supervisory visibility into AI use to identify model-driven correlated exposures and herding.
  • The Financial Stability Institute's recent work points to strengthening existing cyber resilience frameworks as AI changes the threat environment.
  • Project Spectrum, a BIS Innovation Hub collaboration with the Deutsche Bundesbank and European Central Bank, explored using AI to structure daily product-price data for inflation analysis.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 16 claims 21 Oct 2026

CISA urges immediate patching of two critical PHP remote code flaws

CISA has issued an alert on two critical PHP vulnerabilities enabling unauthenticated remote code execution across all PHP installations serving web requests. The agency gives specific patched versions and tells organizations to inventory PHP usage, patch internet-facing systems first, and take unpatched systems offline if updates cannot be applied immediately.

  • CISA's alert covers two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, known collectively as php2shell.
  • The flaws allow unauthenticated remote code execution and affect all PHP installations serving web requests.
  • Organizations should update immediately to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35.
  • Systems still running PHP 8.1 or earlier unsupported versions should be taken offline until patched.
  • CISA says it has not observed exploitation of these vulnerabilities as of the time of publication.
Source document
play
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 16 claims 20 Oct 2026

CISA warns of hard-coded crypto key flaw in Moxa AIG-302 edge gateway

CISA's advisory covers two flaws in Moxa's AIG-302 ThingsPro Edge, used across critical manufacturing, energy and water sector deployments worldwide. One allows a privileged authenticated attacker to pull cryptographic secrets via an internal API; the other exposes a hard-coded private key reachable without authentication. Moxa has shipped firmware v1.4.1 to fix both.

  • CVE-2026-109812 lets a privileged authenticated attacker with adjacent network access extract cryptographic key material via the /api/v1/secrets/ API, rated CVSS v3.1 6.8.
  • CVE-2026-109813 involves a hard-coded cryptographic key in /usr/bin/sysman exploitable by an unauthenticated adjacent attacker, rated CVSS v3.1 8.1 (v4.0: 8.6).
  • Both flaws affect Moxa AIG-302 ThingsPro Edge firmware versions 1.4.0 and earlier; Moxa has released fixed firmware v1.4.1.
  • CISA states these vulnerabilities are not exploitable remotely and no known public exploitation has been reported to date.
  • Affected deployments span the Critical Manufacturing, Energy, and Water and Wastewater Systems sectors worldwide, per CISA's background section.
Source document
0:15
CFTC CFTC — Commodity Futures Trading Commission Source document ↗
United States CFTC — Commodity Futures Trading Commission AI, Technology & Data ✓ 10 claims 20 Oct 2026

CFTC Innovation Task Force sets agenda for first forum on 'super intelligence' in markets

The CFTC's Innovation Task Force has released the agenda for its first Frontier Forum on super intelligence, convening technology and finance figures to discuss deployment, market impact and regulatory posture. This is a scene-setting event rather than a rulemaking, but it signals where the Commission wants the AI conversation to go and who it is listening to.

  • The CFTC's Innovation Task Force released the agenda for its inaugural Frontier Forum on Super Intelligence on October 20, 2026.
  • Panels will address how SI is being implemented on the frontier and its impact on U.S. markets.
  • Discussion will cover the Commission's role in fostering responsible SI adoption while protecting market participants from novel and emergent risks.
  • The meeting will be streamed live on CFTC.gov, with Michael J. Passalacqua leading the Innovation Task Force.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 16 claims 20 Oct 2026

CISA flags privilege-escalation flaws in WAGO industrial controller firmware

CISA's advisory ICSA-26-293-02 details two vulnerabilities affecting WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices running firmware below version 4.10.0. Operators in chemical, energy, water and other critical infrastructure sectors using these controllers should review the advisory to assess exposure and plan firmware updates.

  • CISA advisory ICSA-26-293-02, released October 20, 2026, covers two vulnerabilities tracked as CVE-2026-80466 and CVE-2026-88850.
  • The flaw in routing configuration (CVE-2026-80466) carries a CVSS v3 score of 8.8 and allows a low-privileged remote attacker to inject OS shell commands.
  • Affected firmware spans versions from 1.0.0 up to but excluding 4.10.0, installed on WAGO hardware including 0751-9x01, 0750-811x, 0762-420x and several other product lines.
  • WAGO recommends users update to firmware Version 4.10.0 (FW32) or higher and contact WAGO support for custom firmware builds.
  • Additional detail is available in WAGO's own security advisory VDE-2026-096, referenced in both HTML and CSAF formats.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 26 claims 20 Oct 2026

CISA flags six flaws in HMS Networks PEAK-System PCAN Windows drivers

CISA has published an advisory covering six vulnerabilities in HMS Networks PEAK-System PCAN Windows CAN device drivers, used across transportation, healthcare, energy and critical manufacturing sectors worldwide. The flaws allow a local attacker to crash the Windows kernel. A patched version is available, and the item sets out what affected and what operators should do.

  • CISA's advisory ICSA-26-293-01, dated October 20, 2026, covers six CVEs affecting HMS Networks PEAK-System Device Driver Setup version 5.1.2.1151 and earlier and PCAN Windows CAN device drivers version 5.1.2 and earlier.
  • The highest-rated flaw, CVE-2026-103672, carries a CVSS v3.1 base score of 7.1 (high) for improper validation of an array index.
  • HMS Networks AB has addressed all six vulnerabilities in version 5.1.4 and recommends users upgrade via its software download page.
  • CISA states the vulnerabilities are not exploitable remotely and that no known public exploitation targeting them has been reported.
  • Affected critical infrastructure sectors deployed worldwide include transportation systems, healthcare and public health, energy, and critical manufacturing.
Source document
0:15
SEC SEC Press Releases Source document ↗
United States SEC Press Releases AI, Technology & Data ✓ 12 claims 20 Oct 2026

SEC to host November 9 roundtable on machine-understandable data and Super Intelligence

The SEC has scheduled a public roundtable for November 9, 2026, on the use of machine-understandable data and Super Intelligence. The agency frames the session as a way to gather feedback from market participants on how the investing public is using such data for SI solutions, and on associated risks and costs. This segment covers what the announcement commits to and what it conspicuously leaves open.

  • The SEC will hold the roundtable on November 9, 2026, from 9 a.m. to 3:30 p.m. EST at its Washington, D.C. headquarters.
  • The session will discuss the use of machine-understandable data and Super Intelligence (SI) and related risks and costs.
  • Joshua White, Chief Economist and Director of the Division of Economic and Risk Analysis, said feedback will inform how the Commission can better facilitate SI.
  • The event is open to the public, in-person participation may be limited, and it will be streamed live on SEC.gov with a recording available later.
  • The full agenda is published on the event webpage referenced in the announcement.
Source document
play
UK UK Competition and Markets Authority Source document ↗
United Kingdom UK Competition and Markets Authority AI, Technology & Data ✓ 14 claims 20 Oct 2026

CMA consults on forcing Apple to open iPhone NFC access to developers on fair terms

The CMA has published a provisional conduct requirement that would compel Apple to give developers access to NFC technology on iOS on fair, reasonable, transparent and non-discriminatory terms. The 147-page consultation sets out the regulator's assessment of effectiveness and proportionality and runs for under a month. It also assures respondents that Apple confidentiality arrangements cannot be used to block participation.

  • The CMA proposes a conduct requirement obliging Apple to provide NFC access on iOS on fair, reasonable, transparent and non-discriminatory terms.
  • The consultation was published on 20 October 2026 and closes at 11:59pm on 17 November 2026.
  • The 147-page consultation document contains the CMA's provisional assessment of the requirement's effectiveness and proportionality.
  • Non-disclosure agreements with Apple should not prevent a party from responding, and Apple has confirmed it will not use other confidentiality provisions to block responses.
Source document
0:15
ECDI European Commission Digital Strategy Source document ↗
European Union European Commission Digital Strategy AI, Technology & Data ✓ 16 claims 20 Oct 2026

EU publishes first AI Act harmonised standard, giving high-risk providers a conformity route

The European Commission has cited the first harmonised standard supporting the AI Act in the Official Journal. EN 18286:2026 gives providers of high-risk AI systems an operational quality management route to Article 17 compliance, with a presumption of conformity. This matters because it is the first concrete technical pathway ahead of the high-risk obligations that apply from December 2027 and August 2028.

  • EN 18286:2026 gives providers of high-risk AI systems a presumption of conformity with the Article 17 quality management requirements it covers.
  • The standard is cited through Commission Implementing Decision (EU) 2026/2274 and was developed by CEN and CENELEC.
  • EN 18286 is built around the AI system lifecycle and is designed to layer on top of ISO/IEC 42001, ISO 9001 or sectoral standards such as ISO 13485 rather than replace them.
  • High-risk AI system requirements apply from December 2027 and August 2028, with further harmonised standards expected to follow.
Source document
0:15
BIS BIS Press Releases Source document ↗
Finland BIS Press Releases AI, Technology & Data ✓ 13 claims 20 Oct 2026

Bank of Finland chief says AI adoption, not invention, will decide Europe's growth

Bank of Finland Governor Olli Rehn used a Citi Macro Forum address in Bangkok to set out the ECB's updated growth outlook, Finland's export and data-centre-driven recovery, and his view that Europe's AI challenge is adoption rather than invention. He also flagged energy-driven inflation risk and three structural tests facing Europe.

  • The ECB revised its euro area growth forecast upwards in September, now projecting growth of slightly less than one per cent this year and around one and a half per cent in each of the following two years.
  • Rehn said euro area inflation remains above target mostly due to higher energy prices but is not broad-based, with wage growth remaining moderate.
  • Finland's electricity production is now 96% fossil-free, which Rehn cited as an example of the region's energy transition.
  • Finland's growth prospects have improved compared with earlier forecasts, supported by stronger exports and a data-centre investment boom drawing demand for clean electricity and digital infrastructure.
  • Rehn identified three strategic tests for Europe: security and defence investment, energy resilience, and productivity growth through innovation and capital markets deepening.
Source document
play
BIS BIS Press Releases Source document ↗
European Union BIS Press Releases AI, Technology & Data ✓ 20 claims 20 Oct 2026

ECB's Lane says Europe's AI surge trails US sharply, flags spillover to bond yields

In dinner remarks at the International AI Summit in Dublin, ECB Executive Board member Philip Lane sets out why the central bank is tracking AI's effect on the euro area economy, citing new ECB survey data on firm and worker adoption alongside comparative figures on US and Asian AI capacity, investment and the knock-on effects for bond markets and financial stability.

  • Firms are set to devote around 10 per cent of total investment to AI this year, and AI-related lending accounts for roughly one quarter of recent credit growth to firms.
  • The ECB's Q4 2025 Survey on the Access to Finance of Enterprises found 64 per cent of firms using AI experimentally or moderately, while only 7 per cent reported significant use.
  • An ECB household survey found 52 per cent of workers now report using AI at work, up from 26 per cent in 2024.
  • The United States hosts 75 per cent of global AI computing capacity against Europe's 5 per cent, and the Stanford AI Index counts 59 notable US models and 35 Chinese models against one each for France and the United Kingdom.
  • Lane says the global AI investment boom is plausibly contributing to rising long-term interest rates, which he describes as a material tightening of euro-area financial conditions.
Source document
0:15
UK UK DSIT Source document ↗
United Kingdom UK DSIT AI, Technology & Data ✓ 18 claims 20 Oct 2026

UK closes nominations for Pro-Worker AI Adoption Prize, confirms judging panel

The UK government's Pro-Worker AI Adoption Prize has closed to nominations and confirmed its judging panel. The scheme rewards UK organisations deploying AI in ways that raise productivity, give workers new capabilities and create jobs. This short item sets out who is judging, what the prize sought, and what happens next for the three eventual winners.

  • Nominations for the Pro-Worker AI Adoption Prize closed at 11:55pm on 7 October 2026 and are no longer accepted.
  • The judging panel is chaired by Nobel laureate Professor Simon Johnson, with Milena Mondini and Mike Clancy.
  • The panel will announce a shortlist before declaring three overall prize-winners.
  • Business school professors will write case studies on the three winners, funded by the William and Flora Hewlett Foundation.
  • The guidance cites awareness of AI use cases as one of the top three barriers to UK AI adoption, alongside skills and trust.
Source document
0:15
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom AI, Technology & Data ✓ 12 claims 20 Oct 2026

ABA Banking Journal publishes special report on bank innovation and AI governance

This segment surveys an ABA Banking Journal special report compiling six articles on bank technology trends, including core system modernization, AI adoption in wealth management, identity fraud defenses and a proposed governance framework for boards overseeing AI. It covers what the report addresses rather than new regulatory obligations.

  • ABA Banking Journal published the special report 'Future minded' on October 19, 2026, with a stated one-minute reading time.
  • The report includes an article on 'progressive modernization' for bank core systems, describing a path of continuous upgrades rather than infrequent large releases.
  • One article, by John Hintze, states that wealth management units are pursuing AI adoption 'carefully,' citing junior employees as a source of strong analytical ideas.
  • An article by Ravi Nemalikanti proposes a governance framework intended to transform AI from a risk-management concern into an institutional capability for bank boards.
  • A separate article by Walt Williams covers collaboration among banking, technology and government sectors to counter new technologies that lower barriers to creating false identities.
Source document
0:15
EDB EDB Singapore — Economic Development Board Source document ↗
EDB Singapore — Economic Development Board AI, Technology & Data ✓ 20 claims 20 Oct 2026

Anthropic signs AI safety MOU with Singapore ministry, opens fifth Asia-Pacific office

Anthropic has opened a Singapore office and signed a Memorandum of Understanding with the Ministry of Digital Development and Information. The MOU sets out cooperation on AI safety, security and model evaluation, plus technical exchanges with Singapore's assurance institutions. For compliance leads at regulated firms already running Claude, the document signals how the vendor intends to engage Singapore's rule-making as AI governance tightens.

  • The MOU with Singapore's Ministry of Digital Development and Information covers AI safety, security, model evaluation, adoption research and responsible deployment across public and private sectors.
  • Anthropic plans technical exchanges with Singapore's AI safety, security and assurance institutions on model evaluation, testing standards and incident response.
  • Anthropic says it will share research including the Anthropic Economic Index and offer technical and policy expertise as Singapore develops its AI rules.
  • Claude is already used by GovTech Singapore, the Cyber Security Agency of Singapore, DBS, GIC, Grab and Sea, with in-region inference available on Amazon Bedrock for regulated sectors.
  • The office is Anthropic's fifth in Asia-Pacific; engagement with Singapore dates to joining the IMDA and AI Verify Foundation Generative AI Evaluation Sandbox in 2023.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 18 claims 19 Oct 2026

CISA flags critical hard-coded credential flaw in EseeCloud IP cameras; vendor unresponsive

CISA has published an advisory on three vulnerabilities in Guangzhou Juan IoT Technology's EseeCloud IP camera app and firmware, one rated 9.8 critical. The flaws allow full device takeover, unauthorised rebinding and large-scale device enumeration. The vendor did not respond to CISA's coordination attempts, so no fix exists and the only remedy is network isolation.

  • CVE-2026-107617 lets an attacker use a hard-coded credential to log in to EseeCloud devices, rated CVSS v3.1 9.8 critical.
  • CVE-2026-97858 allows the server to unbind a device from its owner and rebind it to an attacker's account, exposing the device's full serial ID.
  • CVE-2026-105664 creates an enumeration oracle, letting an attacker with a valid token discover registered devices across a 10-digit search space absent rate limiting.
  • Guangzhou Juan IoT Technology did not respond to CISA's coordination attempts, so no patch is available and CISA advises network isolation.
  • Affected equipment is deployed worldwide across energy, communications, transportation, financial services and government sectors.
Source document
0:15
ABN American Bankers Association — newsroom Source document ↗
Global American Bankers Association — newsroom AI, Technology & Data ✓ 12 claims 19 Oct 2026

FSB finalizes 12 sound practices for AI adoption at banks and other financial firms

The Financial Stability Board has finalized 12 'sound practices' to guide how banks and other financial institutions adopt artificial intelligence. Framed as a practical toolkit for boards and senior management, the list covers organization-wide governance and risk management across the AI lifecycle. This segment walks through what the FSB finalized, how it maps to existing cyber and third-party frameworks, and where the ABA pushed for changes.

  • The FSB finalized 12 sound practices for AI adoption by banks and other financial institutions on October 15, 2026.
  • The practices split into two groups: organization-wide AI governance, and risk management across the AI lifecycle from development to deployment.
  • The FSB frames the practices as a toolkit firms can tailor to their context and integrate into existing cyber and third-party risk frameworks.
  • The ABA in July recommended improving the machine-learning definition and reorganizing and consolidating the list to aid application at banks of all sizes.
Source document
0:15
FSB Financial Stability Board Source document ↗
Global Financial Stability Board AI, Technology & Data ✓ 20 claims 19 Oct 2026

FSB finalises 12 sound practices for responsible AI adoption by financial institutions

The Financial Stability Board has published its final report on responsible AI adoption, setting out 12 sound practices firms are encouraged to consider. This segment walks through what the practices cover, how they split between organisation-wide governance and lifecycle risk management, and where boards and senior management are expected to engage.

  • The FSB finalised 12 sound practices for responsible AI adoption on 15 October 2026 in a report to the G20.
  • The practices are grouped into organisation-wide AI governance and lifecycle risk management from development to deployment.
  • Board and senior management are strongly encouraged to reference the practices in strategy, technology adoption and risk management.
  • Specific practices cover data governance, explainability and transparency, human oversight, cyber and ICT risk, and third-party AI dependencies.
  • The final report follows a June 2026 consultation report and an October 2025 report on monitoring AI adoption and related vulnerabilities.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 14 claims 19 Oct 2026

CISA and FBI warn election and campaign officials of phishing ahead of 2026 midterms

CISA and the FBI have issued a joint Public Service Announcement warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. The notice describes phishing and smishing campaigns that mimic legitimate communications to steal credentials and deploy malware. For anyone handling voter data or sensitive campaign information, it sets out who is being targeted and why, and points to recommended practices.

  • CISA and the FBI released a joint Public Service Announcement on October 16, 2026 warning of cyber threats to the 2026 U.S. midterm elections.
  • The agencies say actors may use phishing and smishing to steal login credentials and sensitive information or to install malware on targeted devices.
  • Election officials, candidates and political organisations are named as targets because of access to voter registration data, government officials and sensitive campaign information.
  • The notice warns that campaigns increasingly use convincing emails, text messages, audio and video to manipulate recipients into disclosing information or interacting with malicious links and attachments.
Source document