Regulatory news and audio briefings from financial regulators worldwide — financial crime, AML, sanctions, fraud, digital assets and compliance

DOJ closes Vistra-Cogentrix probe after second New England plant sale

DOJ's Antitrust Division issued a statement closing its investigation into Vistra's acquisition of Cogentrix Energy after the parties agreed to divest a second New England power plant. The case illustrates how DOJ can keep investigating a merger even after FERC approves it without conditions, applying a methodology drawn from a 2025 electricity-sector settlement.

• Vistra announced its agreement to acquire Cogentrix from Quantum Capital Group on Jan. 5.
• The acquisition combines overlapping generation portfolios in PJM Interconnection, ISO New England and the Electric Reliability Council of Texas.
• FERC approved the transaction without conditions after Vistra unilaterally sold its Casco Bay Energy facility in ISO-NE.
• Vistra and Cogentrix then unilaterally agreed to sell Cogentrix's Rumford, Maine gas-fired combined-cycle power plant to resolve DOJ's remaining concerns.
• DOJ says its legal and economic analysis followed the framework from its 2025 settlement over Constellation Energy's acquisition of Calpine Corp.

Atkins touts SEC plan to rescind Rule 14a-8, climate rule in Dallas speech

Chairman Paul Atkins used an address to the Economic Club of Dallas to frame the SEC's current rulemaking agenda as a 'return to First Principles,' tying together IPO reform, digital asset proposals and a plan to rescind the shareholder-proposal rule. Compliance and governance teams should note which specific proposals he cited and their current status.

• Atkins said the SEC proposed earlier this year to let public companies choose semi-annual reporting instead of quarterly reports.
• From the start of 2025 through the first half of 2026, more than 580 companies went public, raising $208 billion, with 47 IPOs in Texas alone.
• The Commission has proposed rescinding Rule 14a-8, a shareholder-proposal rule in place since 1942, to return governance authority to individual states.
• The SEC's proposed Regulation Crypto Assets, unveiled in August, and its Innovation Exemption aim to create capital-raising pathways for crypto issuers and permit certain onchain trading of tokenized securities.
• Atkins confirmed the Commission has proposed rescinding the prior administration's climate disclosure rule.

DOJ final rule lets firearms dealers use NICS to vet employees

The Justice Department has finalised a rule letting Federal Firearms Licensees run voluntary FBI background checks on certain employees through NICS, the system previously reserved for firearm transfers. It implements a Bipartisan Safer Communities Act mandate, takes effect 30 days after Federal Register publication, and sets out who is eligible, what responses dealers receive, and how subjects can appeal.

• The final rule lets FFLs voluntarily submit Firearm Handler Background Checks through NICS, which DOJ regulations previously barred for any purpose other than a proposed firearm transfer.
• Participation is optional and requires the written consent of the employee; the FBI will not charge a fee for these checks.
• FFLs receive only a Pass, Pending or Did Not Pass response plus a NICS Transaction Number, not the subject's underlying record information.
• A Did Not Pass does not bar employment in roles without access to firearms or ammunition, and subjects may request the reason and appeal as a denied transferee would.
• The rule takes effect 30 days after Federal Register publication, and ATF will issue separate guidance on documenting FHCs.

DEA issues first federal registrations to over 900 medical marijuana dispensaries

DOJ and DEA announced the first phase of federal registrations for state-licensed medical marijuana dispensaries, a mechanism created by the Attorney General's April 23 order. This affects compliance teams at dispensaries, manufacturers and distributors navigating the gap between state licensure and federal controlled-substance obligations.

• DEA has issued federal registrations to more than 900 dispensaries across Alabama, Florida, Mississippi, South Dakota, Texas, Virginia and West Virginia.
• Registration requires applicants to have applied within the order's initial 60-day period and to pass DEA's pre-registration investigation.
• State medical marijuana licensure alone does not automatically grant federal registration.
• Registered dispensaries must comply with federal security, recordkeeping, inventory control and other controlled-substance safeguards.
• DEA is separately reviewing applications from manufacturers and distributors, which require facility inspections, production controls and quota determinations.

Former West Virginia jail officer sentenced to 24 months for inmate abuse conspiracy

A federal civil rights sentencing out of the Southern District of West Virginia closes one strand of a multi-officer conspiracy at Southern Regional Jail. The case documents coordinated use of unjustified force against pretrial detainees and systematic falsification of incident reports, material relevant to institutions overseeing custodial facilities, use-of-force policy and whistleblower reporting controls.

• Michael Pack, 40, was sentenced to 24 months in prison on federal civil rights charges tied to a conspiracy at Southern Regional Jail in Beaver, West Virginia.
• Pack pleaded guilty on March 30 before U.S. Magistrate Judge Omar J. Aboulhosn to one count of violating 18 U.S.C. § 371.
• Pack admitted he and co-conspirators brought inmates to camera blind spots to use unreasonable force without being recorded.
• Pack admitted writing a false report omitting the blind spot incident and falsely stating a detainee sustained no injuries despite being seen bleeding from the head.
• The case was investigated by the FBI's Pittsburgh Field Office, Charleston Resident Agency, and prosecuted by the Civil Rights Division with the U.S. Attorney's Office for the Southern District of West Virginia.

FDIC publishes September enforcement actions, no November hearings scheduled

The FDIC's monthly disclosure of administrative enforcement actions covers orders taken against banks and individuals in September 2026, plus an order amending an earlier September order. The breakdown spans prohibitions, insurance terminations, a written agreement and the termination of 75 waiver orders. No administrative hearings are scheduled for November 2026.

• The FDIC issued 17 orders, one Notice of Charges and one adjudicated Decision in September 2026, published on October 30, 2026.
• Actions included three orders of prohibition, four orders of termination of insurance and one written agreement.
• Five orders terminated a total of 75 waiver orders, and one amended supervisory prompt corrective action directive was issued.
• The FDIC is also publishing an order amending an order that was issued in September 2026.
• No administrative hearings are scheduled for November 2026.

SEC readies exemptive order for Carlyle employee co-investment vehicle

The SEC has published notice of an application by The Carlyle Group and a co-investment partnership for an order exempting employee investment vehicles from most of the Investment Company Act of 1940. The relief will be granted unless someone requests a hearing by November 17. This is the procedural step that precedes a final order, and it sets out exactly which provisions Carlyle wants switched off and which stay in force.

• The relief is sought under sections 6(b) and 6(e) of the Investment Company Act of 1940 and would exempt employee partnerships from most of the Act.
• Sections 9, 17, 30 and 36 through 53 remain in force, with only limited exemptions requested under parts of sections 17 and 30 and rule 38a-1.
• Each partnership qualifies as an 'employees' securities company' within the meaning of section 2(a)(13) of the Act.
• Hearing requests must reach the Commission by 5:30 p.m. Eastern on November 17, 2026, or the order will be granted.
• The application was filed on December 28, 2021, and amended on May 20, 2022, December 1, 2022, July 29, 2025, and October 22, 2026.

ABA seeks 30-day extension to comment on bank third-party risk guidance

US banking agencies have two third-party risk management proposals open for comment, with a Nov. 16 deadline. The American Bankers Association and three other groups want 30 more days, arguing early member feedback on due diligence and contracting needs fuller analysis. This covers what is on the table and why the industry wants more room before responding.

• The ABA and three associations requested a 30-day extension to the Nov. 16 comment deadline on two third-party risk management proposals.
• In September the FDIC, Federal Reserve, OCC and NCUA sought comment on revisions to the interagency third-party risk management guidance.
• The Federal Reserve separately requested input on proposed third-party risk management guidance for community banks.
• The joint letter flagged member concerns about effects on due diligence and contracting as warranting further analysis.

DOJ Antitrust Division sets out division of labour with state AGs on local mergers

The Justice Department has published an update on how its Antitrust Division is dividing merger review with state Attorneys General, naming completed consent decrees and referrals in cement and asphalt matters since January 2026. For GCs and antitrust counsel, it signals which authority is likely to take the lead on a given deal and when a federal filing may be deferred to a state enforcer.

• The Division partnered with the Attorneys General of California and Tennessee on consent decrees resolving competition concerns in cement and asphalt regions within those states.
• It referred asphalt market investigations in New York, Pennsylvania and New Jersey to those states' Attorneys General, who reached settlements with the parties.
• Beller said the Division welcomes state leadership where the state is a purchaser facing direct injury or where competitive effects are confined to a single state.
• Woodward said the Department will generally form its own views on resolving investigations into mergers of national importance, while partnering with states that contribute distinctively.

DOJ charges 18 more noncitizens in North Carolina over 2024 election voting

The Justice Department has indicted 18 more noncitizens in North Carolina for voting in the 2024 general election, spread across the Eastern, Middle and Western Districts. Added to 12 defendants charged earlier this year, the new cases take the statewide total to 30. Prosecutors frame the push as a deterrent message before the 2026 election. This item sets out who is charged, with what, and the penalties involved.

• Eighteen aliens, including one illegal alien, were indicted for voting in the 2024 general election, across North Carolina's Eastern, Middle and Western Districts.
• The new charges are additional to 12 defendants previously indicted in the Eastern District, taking the statewide total charged this year to 30.
• All nine Eastern District defendants are alleged to have falsely claimed U.S. citizenship to register and vote in 2024.
• In the Western District, three defendants are charged with both voting by an alien and making a false claim to citizenship, while Edread Ray Stanley is charged only with voting by an alien.
• Falsely claiming citizenship to vote carries a maximum of five years in prison and a $250,000 fine; voting by an alien carries up to one year and a $100,000 fine.

FinCEN renews OMB clearance for its service feedback survey program

A routine Paperwork Reduction Act notice covering FinCEN's generic clearance for collecting public feedback on its service delivery. The item matters mainly to institutions that receive FinCEN surveys and to compliance teams tracking reporting burden estimates, with a comment deadline of November 30, 2026.

• Comments on the renewal are due on or before November 30, 2026, submitted via www.reginfo.gov.
• FinCEN revised its estimates upward by approximately 28 respondents and six burden hours per year after identifying an additional survey for the collection.
• The revision adds a total of 84 respondents and 18 hours over the full three-year period covered by this notice.
• Estimated average number of expected respondents annually is 5,245, out of an estimated average potential pool of 39,755.
• Estimated average total annual reporting burden is 1,502 hours, with an estimated total three-year reporting burden of 4,507 hours.

ABA's new chair Cathy Owen names digital assets, fraud and cyber as 2026-27 priorities

The American Bankers Association profiles Cathy Owen, its 2026-27 chair and head of Arkansas-based Eagle Bank & Trust. Beyond the personal narrative, the piece sets out the three issues she intends to drive during her term: navigating the digital asset marketplace, and combating fraud and cybersecurity threats. For compliance leaders, it signals where the industry's largest trade body will focus its advocacy.

• Cathy Owen becomes ABA chair for 2026-27, serving as executive chair of Eagle Bank & Trust and chair and CEO of its holding company.
• She names digital assets as a top priority, citing goals to protect the marketplace, stay regulatorily compliant, grow thoughtfully and modernise.
• Fraud and cybersecurity are also on her agenda, with an emphasis on protecting both banks and their customers.
• Eagle Bank & Trust holds more than $500 million in assets and closed nearly 2,000 mortgage loans last year, all sold into the secondary market with servicing released.
• Owen was the first female chair of the Arkansas Bankers Association and chaired the board that hired its first female president and CEO.

Public support for CEO activism on social issues continues to slip, surveys show

A review of two new surveys on corporate and CEO activism, published in ABA Banking Journal, tracks shifting public attitudes toward companies speaking out on social and political issues. For bank leadership and communications teams, the data bears on reputational risk management around public statements.

• Approximately 55% of Americans believe CEOs should be outspoken on issues, down from 65% in 2018, per Stanford/Hoover research.
• The Bentley-Gallup survey found the share believing businesses should be more vocal on controversial issues ticked down to 47% in 2026.
• 76% of Americans said they would be less likely to purchase from a company whose CEO spoke out on a disagreeable issue, up 14 percentage points from 2018.
• 62% of respondents could name a product or service they use less because of disagreement with a CEO's public stance, versus 40% who use one more for that reason.
• Issues with lowest public support for business statements were religion (16%), abortion (22%), political endorsements (23%) and international conflicts (33%).

Outgoing ABA chairman urges bankers to advocate, innovate and partner

A short recap of the American Bankers Association's outgoing chairman's farewell speech, summarising a year of association priorities including bank regulation, digital assets, fraud and AI. Useful for tracking the trade group's stated advocacy agenda heading into the next leadership term.

• Kenneth Kelly, chairman and CEO of First Independence Bank in Detroit, delivered his final speech as ABA chairman on October 26, 2026.
• Kelly cited ABA-led efforts including a push to right-size bank regulation and advocacy for digital asset rules that maintain a level playing field between banks and crypto companies.
• He also highlighted ABA's work helping banks fight fraud, plus initiatives around artificial intelligence and workforce development.
• Kelly closed by urging bankers to 'advocate, innovate, and partner' in the months ahead.

SEC notices Nilsine Partners co-investment exemptive order application

A routine but consequential SEC notice covers an exemptive application from Nilsine Partners NP1X Fund and affiliates seeking permission to co-invest alongside related entities, relief otherwise barred under the Investment Company Act's affiliate transaction rules. Fund counsel and compliance teams tracking co-investment structures should note the filing timeline and the narrow hearing window before the order can be granted.

• The application was filed on February 18, 2026 and amended on July 15, 2026 and September 14, 2026.
• Applicants seek relief under sections 17(d) and 57(i) of the Investment Company Act of 1940 and rule 17d-1 to permit co-investment transactions otherwise barred by sections 17(d) and 57(a)(4).
• Hearing requests must be received by the Commission by 5:30 p.m. Eastern time on November 16, 2026, accompanied by proof of service on applicants.
• An order granting the requested relief will be issued unless the Commission orders a hearing, meaning no hearing request results in automatic approval.
• The full representations, legal analysis and conditions appear only in the applicants' second amended application dated September 14, 2026, available via EDGAR.

SEC schedules closed meeting on enforcement and litigation matters for October 29

A routine Sunshine Act notice confirms the SEC will hold a closed meeting on October 29, 2026, covering enforcement and litigation matters. The notice itself carries no policy content, but it signals the categories of action the Commission is actively working through this week.

• The SEC's closed meeting is scheduled for 2:00 p.m. on Thursday, October 29, 2026, at Commission headquarters or remotely.
• The General Counsel certified exemptions under 5 U.S.C. 552b(c)(3), (5), (6), (7), (8), 9(B) and (10) permit closing the meeting.
• Matters to be considered include institution and settlement of injunctive actions and administrative proceedings.
• The agenda also covers resolution of litigation claims and other examination and enforcement proceedings.
• The notice warns that scheduling changes may occur and will be posted on the SEC's website.

FDIC seeks comment on 2027 unbanked household survey questionnaire

A routine Paperwork Reduction Act notice covers the FDIC's tenth biennial Household Survey, which measures unbanked and underbanked rates nationwide. Compliance teams tracking financial inclusion data, CRA strategy or consumer access initiatives should note the comment window and the chance to influence survey content before the 2027 fielding.

• Comments on the proposed 2027 survey instrument must be submitted to the FDIC by December 28, 2026.
• The survey is estimated to cover 40,000 respondents at an average of 9 minutes per response, totaling 6,000 annual burden hours.
• The 2027 Household Survey will be conducted as a supplement to the Census Bureau's June 2027 Current Population Survey.
• The survey fulfils a mandate under section 7 of the Federal Deposit Insurance Reform Conforming Amendments Act of 2005 (Pub. L. 109-173) to study unbanked households.
• The survey has been administered every other year since January 2009 and is the only population-representative survey providing state-level unbanked estimates for all 50 states and DC.

FINRA to host webinar on large IPO underwriting readiness for member firms

FINRA is running a short webinar aimed at member firms that underwrite, or plan to underwrite, large IPOs on a firm commitment basis. The session is for compliance, capital planning and operations staff who need a structured checklist before taking on or scaling an underwriting business line.

• The webinar is scheduled for Thursday, Nov. 5, from 2 to 2:30 p.m. ET.
• FINRA lists six topic areas including capital planning and subordinated loans, and funding, liquidity and reserve computations.
• The session targets firms already engaged in, or considering, firm commitment underwritings.
• Registrants must complete a sign-up form and may need to look up their firm's CRD number via BrokerCheck.

Texas Stock Exchange sets $325,000 entry fee for new corporate listings

Texas Stock Exchange has filed a new fee schedule with the SEC covering entry fees, application fees and annual listing charges for corporate issuers. The filing took immediate effect under the Exchange Act's expedited process. Listings counsel and issuers evaluating TXSE should understand the fee mechanics, exemptions and how they compare to incumbent exchanges.

• Operating companies pay a one-time Entry Fee of $325,000 on the date of listing, while SPACs pay a flat $80,000 Entry Fee.
• Companies transferring a listing from another national securities exchange are exempt from both the Entry Fee and the Initial Application Fee.
• The primary-listing annual fee equals the greater of a minimum fee or shares outstanding multiplied by $0.001250 per share, subject to a $250,000 maximum, with a $70,000 minimum for common shares.
• Companies with Dually-Listed Securities pay a flat Company-wide All-Inclusive Annual Fee of $600,000, prorated in the year the dual listing becomes effective.
• The rule took effect immediately under Section 19(b)(3)(A) and Rule 19b-4(f)(2), with comments due on or before November 13, 2026.

CISA warns of critical EPICS Base flaw enabling remote code execution

CISA has published an ICS advisory covering four vulnerabilities in EPICS Base, open-source control system software used across the critical manufacturing sector worldwide. One flaw carries a critical CVSS score with potential for remote code execution. This briefing sets out the affected versions, the fixes available, and CISA's recommended interim mitigations for operators who cannot patch immediately.

• EPICS Base release 7.0.10 and earlier is affected by four vulnerabilities: CVE-2026-114595, CVE-2026-114596, CVE-2026-114597 and CVE-2026-114598.
• CVE-2026-114595 carries a CVSS v3.1 base score of 9.8 (critical) and could permit remote code execution via an integer overflow in network request processing.
• The EPICS Community has published remediations on GitHub and affected users should update to the 7.0.11 release.
• CISA states no known public exploitation specifically targeting these vulnerabilities has been reported to date.
• The vulnerabilities were reported to CISA by Shubham Raj of Cipher / Causal Security and affect the critical manufacturing sector worldwide.

PlayPower abandons bid for rival Burke after FTC merger lawsuit

The FTC's Bureau of Competition confirms PlayPower and owner Platinum Equity have dropped their proposed acquisition of BCI Burke, a week after the agency and a dozen states sued to block it. This brief statement sets out the FTC's view of market concentration and the deal's effect on school, church and municipal playground buyers.

• PlayPower and Platinum Equity abandoned the proposed acquisition of BCI Burke after the FTC and a dozen states sued to block the merger.
• The FTC says the top five manufacturers of commercial outdoor playground equipment, including PlayPower and Burke, control 85%-90% of the market.
• The proposed merger would have cut the number of major competitors from five to four.
• The deal would have given PlayPower's owners control over more than 30% of the relevant market.
• The FTC describes this as the latest in a series of acquisitions by PlayPower.

State Dept grants import protection for Madagascar textile exhibition

A brief but binding administrative notice: the State Department has determined that objects loaned for an exhibition on Malagasy Merina Kingdom textiles are culturally significant and that their display serves the national interest, triggering statutory protections for the loan period.

• The determination covers objects imported for the exhibition at The Cleveland Museum of Art, Cleveland, Ohio.
• The notice also contemplates possible additional exhibitions or venues yet to be determined.
• The determination was made under the Act of October 19, 1965 (22 U.S.C. 2459) and Executive Order 12047 of March 27, 1978.
• The notice cites Delegation of Authority No. 234 of October 1, 1999, No. 236-3 of August 28, 2000, and No. 523 of December 22, 2021.
• The notice is signed by Sherry C. Keneson-Hall, Principal Deputy Assistant Secretary for Educational and Cultural Affairs.

ABA podcast: how bankers can proactively manage core technology providers

The ABA Banking Journal Podcast features Steve Lewis, president and CEO of Thomaston Savings Bank and a member of ABA's Core Platforms Committee, on managing relationships with core technology providers. For compliance and operations leaders responsible for vendor oversight, it is a short, practical account of where a bank retains leverage even against a provider with significant market power.

• Steve Lewis recommends that bankers review and reconcile bills from their core providers.
• He advises monitoring for service-level agreements with the core provider.
• He recommends meeting regularly at executive level with the core provider to understand its strategic roadmap and how it corresponds to the bank's own roadmap.
• Lewis says technology is not the strategy and that banks should define what they want to deliver to clients before integrating the technology to do it.

NYSE moves to scrap 'approved person' category, align with FINRA definition

NYSE filed a rule change with the SEC on September 18, 2026 eliminating its longstanding approved person registration category and replacing it with an associated person definition modelled on FINRA Rule 1011(b). The filing matters to member organizations and control persons whose Form BD-based disclosures will now substitute for a separate Exchange-specific registration track.

• NYSE filed SR-NYSE-2026-47 with the SEC on September 18, 2026, published for comment on October 1, 2026 as release 34-106566.
• The filing deletes the 'approved person' category from Rule 2(c) and Rule 304 and replaces it with a new 'associated person' definition based on FINRA Rule 1011(b).
• NYSE states control relationships formerly tracked via approved person registration are already disclosed through Schedules A and B of Form BD in the CRD system.
• A new Supplementary Material .30 would define 'Control Persons' as both direct and indirect owners identified on Schedules A and B of Form BD.
• Conforming changes replace 'approved person' and related employee references with 'associated person' in Rule 2A and in Rules 5.2, 8.204(f)(2), 8.300(e)(2), 8.400(e)(2) and 8.700.

DOJ opens Second Amendment probe into firearm permitting in two Connecticut cities

The Justice Department has opened a civil rights investigation into firearm permitting practices in Middletown and Waterbury, Connecticut, citing possible unreasonable delays in processing concealed carry permits. The inquiry invokes the Supreme Court's Bruen decision and signals continued federal scrutiny of local permitting systems under the Second Amendment.

• The Justice Department opened an investigation on October 22, 2026 into the Middletown and Waterbury, Connecticut police departments' firearm permitting systems.
• The investigation will examine whether the departments unnecessarily delay issuance of concealed carry permits to residents.
• The announcement cites the Supreme Court's 2022 ruling in New York State Rifle and Pistol Association v. Bruen regarding lengthy wait times in license processing.
• The Civil Rights Division's Second Amendment Section is handling the inquiry and accepts complaints via an online portal at justice.gov/crt/second-amendment-section.
• Assistant Attorney General Harmeet K. Dhillon of the Civil Rights Division issued a statement on the investigation's announcement.

DOJ settles RLUIPA zoning claim against Atlantic Beach, New York

A village zoning code required religious and educational assemblies, but not secular ones, to obtain discretionary permits. This briefing covers the DOJ settlement that followed and the specific obligations it imposes on the Village of Atlantic Beach, relevant to any institution handling land-use disputes involving religious applicants.

• The settlement resolves claims that Atlantic Beach's zoning ordinance violated RLUIPA's equal terms provision by requiring religious and educational assemblies, but not secular ones, to obtain a special exception permit from the Board of Appeals.
• The Village agreed to revise its zoning ordinance to permit religious uses as of right in the Residential (A) district, removing the special exception requirement.
• The settlement requires the Village to train its officials and employees on RLUIPA's requirements.
• The Village must establish a procedure for receiving and resolving RLUIPA complaints.
• The settlement follows resolution of a private lawsuit brought by Chabad of the Beaches, an Orthodox Jewish organization, over denial of its application to use a vacant commercial property for a religious facility.

SEC notices co-investment exemption for Neostellar and Magnetar fund vehicles

A routine but consequential exemptive application: Neostellar Capital Corp, Magnetar Financial LLC and affiliated vehicles are asking the SEC to permit joint co-investment transactions normally barred under the Investment Company Act's affiliated-transaction rules. The notice sets a hearing-request deadline, giving interested parties a narrow window to object before the order issues.

• Applicants seek an order under sections 17(d) and 57(i) of the Investment Company Act of 1940 and rule 17d-1 to permit co-investment among BDCs, closed-end and open-end funds and affiliated entities.
• The application was originally filed on August 3, 2026 and amended on October 2, 2026.
• Hearing requests must be received by the Commission by 5:30 p.m. Eastern time on November 16, 2026, accompanied by proof of service on applicants.
• Absent a Commission-ordered hearing, an order granting the requested relief will be issued.
• Applicants include Neostellar Capital Corp, Neostellar Advisors LLC, Magnetar Financial LLC, Magnetar Financial (UK) LLP, MCP Investing LLC and vehicles identified in Schedule A and Schedule B.

Utah man indicted over alleged synagogue bomb plot, CSAM found

This briefing covers a federal indictment out of Utah charging a 22-year-old man with attempting a hate crime and explosives offenses after online threats against a synagogue led investigators to recover pipe bombs, rifles and alleged child sexual abuse material. Compliance and government affairs teams tracking DOJ Civil Rights Division enforcement priorities will want the charge detail and procedural timeline.

• A federal grand jury in Salt Lake City indicted Skyler AJ Rose, 22, of Ogden, Utah, on Oct. 21 on multiple federal charges.
• Charges include possession of an unregistered destructive device, threat to kill and injure persons and destroy a building with an explosive, and attempting to commit a hate crime.
• Law enforcement recovered six improvised explosive pipe bombs, one inert device, explosive precursors, two rifles and ammunition during a search of Rose's residence.
• A subsequent search of Rose's cellphone allegedly revealed he searched for a nearby synagogue in November 2025 and that the phone contained cached images depicting child sexual abuse material.
• Rose's initial appearance was scheduled for Oct. 23 at the Orrin G. Hatch U.S. Courthouse in Salt Lake City.

DOJ finds Ohio State medical school discriminated against white and Asian applicants

The Justice Department's Civil Rights Division has issued investigative findings against Ohio State University College of Medicine, alleging race discrimination in admissions to its 2023, 2024 and 2025 classes. The findings cite Title VI and the Supreme Court's SFFA decision, and set out the enforcement path: settlement negotiations first, litigation if those fail. Federally funded institutions should read this as the template.

• DOJ found OSU Med discriminated against white and Asian applicants for its 2023, 2024 and 2025 incoming classes in violation of Title VI and SFFA.
• Black applicants who were screened and interviewed were about 2.8 times as likely to be admitted as Asian applicants with equal credentials.
• A 'side door' pathway admitted some applicants without a screener score or interview; in 2024 and 2025 combined, black applicants were four times as likely to be admitted as white applicants, and no Asian applicants were admitted.
• The Department will pursue settlement negotiations where it finds a violation and will file suit if those efforts fail.

NCUA proposes dropping hard-copy mandate for share insurance notices

A proposed rule would rewrite 12 CFR 745.13, the NCUA regulation requiring federally insured credit unions to notify members about share insurance coverage. The change removes the prescribed hard-copy methods in favor of letting each credit union choose its own notification approach. Comments close December 21, 2026.

• The proposed rule would revise 12 CFR 745.13 to require only that each FICU 'provide notice to its members concerning NCUA insurance coverage,' removing the mandate to stock hard copies.
• NCUA intends to discontinue the 64-page 'Your Insured Funds' brochure and update its share insurance coverage website as the authoritative resource.
• Comments on docket NCUA-2026-1888 must be received by December 21, 2026, via regulations.gov, mail, or hand delivery to the Secretary of the Board.
• OIRA determined the proposal is not a 'significant regulatory action' under Executive Order 12866 and expects it to qualify as a deregulatory action under Executive Order 14192.
• NCUA certifies the rule will not have a significant economic impact on a substantial number of small credit unions, defined as those under $100 million in assets.

A clearing house with no members and a ban broken on a livestream

The lighter side this week is a comedy of timing rather than misconduct. A clearing house writes default rules before it has a single member, a banned pharmaceutical executive is accused of broadcasting the very trading he is forbidden to do, and a federal department finalises a paperwork estimate its own commenters say does not add up. None is a scandal; each misses its own target.

• CME Securities Clearing filed SR-CMESC-2026-011 to codify default-management procedures while stating it currently has no Members or Users and has received no comments, with the comment window closing 12 November 2026.
• The FTC and seven states moved on 13 October 2026 to hold Martin Shkreli in civil contempt of his 2022 lifetime pharmaceutical ban, citing his livestreamed claim that he was teaching viewers how to trade and invest in biotech.
• The FTC alleges Shkreli has traded in pharmaceutical stocks of at least 60 companies since his May 2022 release and seeks a fine equal to trading profits plus prejudgment interest with no offset for losses, on a Commission vote of 1-0.
• The State Department finalised a 600,000-hour recordkeeping collection and declined to withdraw it after the Council for Global Equality flagged a 52,500-hour gap and an $85 million cost-assumption discrepancy, with comments due 25 November 2026.

State Department finalizes 600,000-hour recordkeeping rule for aid recipients, pushes back on NGO group's cost objections

The State Department has submitted a new information collection, tied to its Protecting Human Flourishing in Foreign Assistance policy, for 30-day public comment before OMB approval. Two advocacy groups challenged the burden estimates and scope during the earlier 60-day comment period; this notice contains the Department's point-by-point response and final position on each objection.

• Comments on the proposed collection are due by November 25, 2026, under a 30-day notice following an earlier 60-day notice published April 6, 2026.
• The collection applies to an estimated 2,500 respondents, each facing an average 240-hour burden, for a total estimated 600,000 hours.
• The Council for Global Equality cited a 52,500-hour gap between the final rules' 652,500-hour estimate and the Notice's 600,000-hour figure, plus a cost assumption gap of $175/hour versus $50/hour.
• The Department confirmed that the physical and financial separation requirement applies only to U.S. NGOs, and only when they engage in otherwise prohibited activities funded from another source.
• Record retention will follow 2 CFR 200.334, generally three years from the date of the final expenditure report, subject to applicable exceptions.

Treasury seeks comment on garnishment-notice paperwork burden estimate

A routine Paperwork Reduction Act notice covering the disclosure financial institutions must give account holders when a garnishment order reaches an account receiving federal benefit payments. It extends an existing OMB control number rather than changing the underlying rule. Relevant to institutions that process garnishment orders against accounts with direct-deposited federal benefits.

• Written comments on the information collection must be received by Treasury on or before December 28, 2026.
• The collection governs notices required under 31 CFR 212.6 when a garnishment order affects an account with directly deposited federal benefit payments.
• Treasury estimates 487,750 respondents and 487,750 total annual responses, occurring on occasion upon qualifying garnishment events.
• Estimated time per response is 10 minutes per account-holder notice and 5 minutes per child support notice, totalling an estimated 76,688 annual burden hours.
• The 2023 supporting statement reports no program changes but describes a revised burden-estimation methodology.

FBI and USPIS probe suspicious powder letters sent to election officials, media

A joint FBI and US Postal Inspection Service advisory flags a wave of letters containing suspicious substances sent to election offices, Secretaries of State, media organisations and polling companies. The notice sets out immediate handling steps for mailrooms and reporting channels, relevant to any organisation in these sectors reviewing its physical mail intake procedures.

• The FBI and USPIS are investigating multiple letters containing suspicious substances mailed to election offices, Secretaries of State, media organisations and polling companies.
• No hazardous material has been identified to date, though laboratory testing remains ongoing and all substances should be treated as hazardous.
• Mail handlers at election-related locations should use PPE such as a smock or apron, mask, and nitrile gloves.
• If an unknown substance is found, personnel should call 911, avoid disturbing the powder, isolate the area, and avoid alcohol-based cleansers or hand sanitizer on exposed skin.
• Incidents should be reported to an FBI Election Crimes Coordinator or WMD Coordinator, the FBI tip line (1-800-225-5324), or USPIS at 1-877-876-2455.

WaFd applies to Fed to acquire EverBank Financial Corp

The Federal Reserve has published notice of WaFd, Inc.'s application to acquire EverBank Financial Corp under the Bank Holding Company Act. The notice opens a public comment window running to November 12, 2026, handled through the Federal Reserve Bank of San Francisco. This is the procedural gateway through which the transaction will be assessed against the statutory approval standards.

• WaFd, Inc. of Seattle has applied to the Federal Reserve to acquire EverBank Financial Corp and indirectly EverBank, National Association, both of Jacksonville, Florida.
• The application is made under the Bank Holding Company Act of 1956 and Regulation Y.
• Written comments must be received no later than November 12, 2026, at the Federal Reserve Bank of San Francisco or the Board of Governors.
• Comments received are subject to public disclosure and will generally be made available without change.

FTC asks court to hold Shkreli in contempt over lifetime pharma ban

The FTC and seven state co-plaintiffs have moved to hold Martin Shkreli in civil contempt of a 2022 court order permanently barring him from the pharmaceutical industry. They allege he traded in pharma stocks and broadcast views on drug companies online. The filing seeks divestment, disgorgement of trading profits without offsetting losses, and escalating future penalties including possible incarceration.

• The FTC and seven states filed a civil contempt motion against Martin Shkreli on October 13, 2026, in the U.S. District Court for the Southern District of New York.
• The motion alleges Shkreli publicly traded in pharmaceutical stocks of at least 60 companies and broadcast opinions about drug companies since his release from prison in May 2022.
• The 2022 injunction banned Shkreli from directly or indirectly participating in the pharmaceutical industry, including holding an ownership interest or influencing a pharmaceutical company's management.
• Sanctions sought include divestment of pharma stocks, a fine equal to trading profits plus prejudgment interest with no offset for losses, and potential incarceration for future violations.
• The Commission vote to authorise the filing was 1-0; Chairman Andrew N. Ferguson is recused and Commissioner Mark R. Meador issued a statement.

SEC notices exemptive application from RTW Biotech Growth Fund over share classes

A routine but consequential SEC notice: RTW Biotech Growth Fund and RTW Investments, LP have applied for exemptive relief that would let the closed-end fund adopt a multi-class share structure with early withdrawal charges and asset-based fees. The notice opens a window for interested parties to request a hearing before the order issues.

• RTW Biotech Growth Fund and RTW Investments, LP filed the exemptive application on August 28, 2026.
• The applicants seek exemptions from sections 18(a)(2), 18(c) and 18(i) and rule 23c-3 of the Investment Company Act of 1940, plus an order under section 17(d) and rule 17d-1.
• Relief sought would permit multiple share classes, early withdrawal charges, and asset-based distribution and/or service fees.
• Hearing requests must be received by the Commission by 5:30 p.m. Eastern time on November 2, 2026, accompanied by proof of service on applicants.
• Absent a hearing order, the SEC will issue the requested exemptive order without further notice.

State Dept seeks comment on citizenship-abroad forms, 275,000 respondents

A routine but binding Paperwork Reduction Act notice from State's Bureau of Consular Affairs opens comment on two forms used to document U.S. citizenship acquired abroad. Compliance teams handling expat or cross-border family services should note the comment window and burden estimates before the collections go to OMB.

• Comments on both collections are due by December 22, 2026, submitted through Regulations.gov under Docket Number DOS-2026-1123.
• DS-2029, the Application for Consular Report of Birth Abroad, carries an estimated 113,212 respondents at 60 minutes average response time, for 113,212 total burden hours.
• DS-5507, the Affidavit of Physical Presence or Residence, Parentage, and Support, carries an estimated 162,161 respondents at 30 minutes average response time, for 81,081 total burden hours.
• Both collections are listed as required to obtain or retain a benefit, meaning respondents must complete them to secure the underlying citizenship or nationality determination.
• Email and regular mail comment options have been suspended, with all submissions centralized through Regulations.gov or a dedicated comment email address.

SEC seeks OMB renewal of municipal advisor registration rules and forms

This is a routine Paperwork Reduction Act notice in which the SEC asks OMB to extend approval of the information-collection rules underpinning municipal advisor registration. It matters to compliance teams at municipal advisory firms because it quantifies, in granular detail, the ongoing filing burden they carry under Forms MA, MA-I, MA-W and MA-NR.

• As of December 31, 2025, approximately 419 municipal advisors were registered with the Commission.
• The Commission estimates 15 new Form MA applicants annually for each of the next three years, totalling 45 over the period.
• The average internal cost of compliance per hour for completing Forms MA and MA-I is estimated at approximately $271.
• Rule 15Ba1-8 requires municipal advisory firms to obtain and retain, for not less than five years, written consent to service of process from each associated person engaged in municipal advisory activities.
• The Commission estimates it will receive an average of 21 Form MA-W withdrawals and enter orders cancelling or revoking registration of 4 municipal advisors annually over the next three years.

DOJ opens Second Amendment probe into Pennsauken, New Jersey permit delays

The Justice Department has opened an investigation into whether Pennsauken, New Jersey unconstitutionally delays firearm permits. The inquiry is run by the Civil Rights Division's Second Amendment Section and rests on the Supreme Court's reasoning in Bruen. This item covers what the department is examining, the legal theory it is using, and how the Division is now deploying its gun-rights enforcement arm against local permitting systems.

• The investigation, opened October 14, 2026 under press release 26-1200, targets delays in issuing firearm licenses in Pennsauken, New Jersey.
• The inquiry focuses specifically on the Pennsauken Township Police Department's permitting system.
• The department relies on Bruen (2022), which it reads as treating lengthy processing wait times as an abusive use of a permitting scheme.
• AAG Harmeet K. Dhillon directed the Civil Rights Division's Second Amendment Section to run the investigation.
• The release states the investigation does not support any armed obstruction of federal or local law enforcement.

IRS proposes rules tightening ACA premium tax credit eligibility under OBBBA

The IRS has issued proposed regulations under section 36B of the tax code to implement changes made by the One, Big, Beautiful Bill Act to the Affordable Care Act premium tax credit. Compliance, tax and benefits teams advising on health exchange enrollment or administering Form 1095-A reporting should review the comment and hearing timeline now.

• Written or electronic comments on REG-101576-26 must be received by November 30, 2026, via the Federal eRulemaking Portal or by mail.
• A telephonic public hearing is scheduled for December 8, 2026 at 10 a.m. ET, contingent on topic outlines being received by November 30, 2026.
• Requests to attend the public hearing must reach the IRS by 5 p.m. ET on December 4, 2026.
• For taxable years beginning after December 31, 2025, section 71305 of the OBBBA removes the excess APTC repayment limitation, requiring full repayment of any excess advance credit.
• Section 71302(a) of the OBBBA removes PTC eligibility for lawfully present aliens with household income below 100% of the Federal Poverty Level who are ineligible for Medicaid due to immigration status, effective for taxable years beginning after December 31, 2025.

CFPB seeks renewal of consumer complaint response survey, comments due Dec 14

A routine Paperwork Reduction Act notice from the CFPB seeking OMB extension of an existing information collection: the Consumer Response Company Response Survey. Relevant to firms that respond to CFPB consumer complaints, since survey results feed back to companies and inform CFPB's assessment of complaint handling.

• Comments on the extension request must be received by December 14, 2026 to be assured of consideration.
• The survey is approved under OMB Control Number 3170-0069 and docketed as CFPB-2026-0022.
• CFPB estimates 66,700 respondents and 4,669 total annual burden hours for the collection.
• The survey asks three questions about a company's complaint handling plus a narrative description supporting each answer.
• Survey results are shared with the responding company and used by CFPB as one of several inputs to assess response accuracy, completeness and timeliness.

SEC notices Clearlake, Pathway co-investment exemptive order application

The SEC has published notice of an exemptive application from Clearlake Private Markets Fund, Clearlake Capital RIC Management and Pathway Capital Management seeking relief to co-invest across affiliated business development companies and closed-end funds. This brief covers the filing's scope, deadlines and how interested parties can request a hearing before the order is granted.

• Applicants Clearlake Private Markets Fund, Clearlake Capital RIC Management, LLC and Pathway Capital Management, L.P. filed the application on August 10, 2026 and amended it on August 13, 2026.
• The requested order would permit certain BDCs and closed-end management investment companies to co-invest in portfolio companies with each other and with affiliated investment entities.
• The relief sought covers joint transactions otherwise prohibited by sections 17(d) and 57(a)(4) of the Investment Company Act and rule 17d-1.
• Hearing requests must reach the Commission by 5:30 p.m. Eastern time on November 3, 2026, accompanied by proof of service on the applicants.
• The order will be issued without a hearing unless the Commission orders one, per the standard exemptive application process.

CISA flags nine flaws in Kiloview E3 encoder, three giving root on the device

CISA's ICS advisory ICSA-26-295-01 documents nine vulnerabilities in the Kiloview E3 NDI encoder, a video appliance used across the communications and information technology sectors worldwide. Several combine to turn authenticated web access, or in one case none at all, into full root compromise. The only remedy on offer is a firmware update. This runs through what the flaws allow and what network owners should do now.

• All nine vulnerabilities affect Kiloview E3 firmware below 1.30, and the vendor's sole remedy is an update to V1.30.
• CVE-2026-107861 and CVE-2026-110243, both OS command injection flaws, each score 9.9 under CVSS v3.1 and 9.4 under CVSS v4.0, allowing an authenticated web user to execute commands as root.
• CVE-2026-109122, a third command injection flaw, scores 9.1 under CVSS v3.1 and 9.4 under CVSS v4.0, and its malicious configuration persists across reboots.
• CVE-2026-92450 uses an HMAC-SHA256 secret hardcoded identically across all devices, letting an attacker with the public firmware forge administrative session tokens without credentials.
• CISA states no known public exploitation specifically targeting these vulnerabilities has been reported at this time.

CISA flags five vulnerabilities in Siemens RUGGEDCOM APE1808 with Nozomi software

CISA has republished a Siemens ProductCERT advisory covering five vulnerabilities in RUGGEDCOM APE1808 devices running Nozomi Networks' Guardian/CMC software. The flaws range from low to high severity and touch dashboard, credential management, polling and login functions used across critical infrastructure deployments worldwide.

• Five CVEs affect all versions of RUGGEDCOM APE1808 running Nozomi Guardian/CMC: CVE-2026-33387, -33388, -33389, -33391 and -33920.
• CVE-2026-33389, an improper certificate validation flaw in Smart Polling, carries the highest individual CVSS 3.1 score of 7.5.
• CVE-2026-33388 scores 7.4 and allows a limited-privilege authenticated user to delete or edit Credentials Manager entries, potentially disrupting authentication.
• Siemens directs affected organizations to contact customer support directly to receive patch and update information rather than publishing a fix in the advisory.
• The advisory was initially released on 2026-10-13 and republished by CISA on 2026-10-22 as SSA-911336.

CISA flags 11 vulnerabilities in Siemens RUGGEDCOM CROSSBOW software

CISA has republished a Siemens ProductCERT advisory covering eleven vulnerabilities in RUGGEDCOM CROSSBOW, a substation management tool used across energy, transportation, manufacturing, healthcare and government sectors worldwide. The flaws range from SQL injection to authorization bypass. Operators running versions below 6.0 should review exposure and plan remediation.

• Siemens has released RUGGEDCOM CROSSBOW V6.0 as the vendor fix for all eleven listed vulnerabilities affecting versions below 6.0.
• CVE-2026-89196 through CVE-2026-89206 cover flaws including SQL injection, authorization bypass, sensitive data exposure and client-side security enforcement.
• The highest CVSS v3.1 base score among the eleven vulnerabilities is 8.8, rated HIGH, for CVE-2026-89196.
• CVE-2026-89199 could allow an authenticated attacker to retrieve administrative credentials for various internal systems.
• Siemens ProductCERT reported the vulnerabilities to CISA, which republished the advisory verbatim as SSA-508506.

CISA flags high-severity flaw in InterSystems IRIS for Health, TLS off by default

CISA has published an ICS Medical Advisory covering a cleartext transmission vulnerability in InterSystems IRIS for Health, a platform used across the healthcare sector worldwide. The flaw stems from TLS/SSL being disabled by default. Compliance and security teams running affected versions should review this briefing before deciding how urgently to act.

CFPB updates FOIA and Privacy Act records system, adds NARA inspection disclosure

A routine but mandatory Privacy Act notice from the CFPB updating its primary FOIA/Privacy Act records system. The segment covers what the modification actually changes: scope of records, system manager, retention schedule, and a new disclosure pathway to NARA. Useful for privacy and records officers tracking agency practice.

• Comments on the modified system of records notice must be received no later than November 20, 2026, the same date the new system becomes effective absent a contrary determination.
• A new routine use permits disclosure of records to the National Archives and Records Administration or other federal agencies conducting records management inspections under 44 U.S.C. 2904 and 2906.
• The Chief Privacy Officer is clarified as the system manager for records related to Privacy Act amendment requests under 12 CFR 1070.56.
• The authority for maintaining the system is broadened to explicitly include the Freedom of Information Act, the Privacy Act of 1974, and the Federal Records Act, 44 U.S.C. 3101.
• Categories of records and individuals covered are expanded to clearly include those requesting amendment of records, including initial appeals and statements of disagreement.

IRS seeks comments on paperwork burden for ABLE disability savings accounts

A routine Paperwork Reduction Act notice covering the recordkeeping and reporting tied to qualified ABLE programs, the tax-favored savings accounts for eligible disabled individuals. The filing matters mainly to state agencies administering these programs and to compliance teams tracking OMB-approved collections rather than substantive tax changes.

• Comments on the information collection are due on or before December 14, 2026.
• The collection operates under OMB Control No. 1545-2293 and Regulatory Number TD 9923.
• The IRS states there is no change to the previously approved information collection, which is an extension of a currently approved collection.
• The estimated number of annual responses is 28,987, with an estimated time per response of 22 minutes.
• Estimated total annual burden hours are 10,729, covering individuals, households and states as the affected public.

DOJ sues St. Paul and Portland over mask and ID rules for federal officers

The Justice Department has filed complaints against two cities challenging local ordinances that regulate how federal law enforcement officers identify themselves and whether they may wear masks. The filings extend a wider Civil Division campaign against state and local measures it views as obstructing federal operations, a pattern compliance and government affairs teams tracking federal-local friction should note.

• DOJ filed lawsuits against St. Paul, Minnesota and Portland, Oregon on October 15, 2026, press release number 26-1209.
• The challenged laws are Saint Paul Code of Ordinances §§ 268A-268B and Portland City Code §§ 23.30.030 and 23.30.100.
• The complaints invoke the Supremacy Clause, arguing local governments cannot regulate equipment worn by federal officers on duty.
• Attorney General Blanche has directed the Civil Division to identify state and local laws impeding federal law enforcement operations nationwide.
• The department describes these filings as part of a series that has previously targeted New York, Virginia, Connecticut, New Jersey, California, Maryland, Philadelphia, Denver and Milwaukee.