Regulus — The global regulatory broadcast network

0:15

United States DOJ Criminal Division Financial Crime ✓ 10 claims 21 Oct 2026

Courier for Chinese money laundering network gets nine years, $23m forfeiture

A DOJ press release details the sentencing of Shu Jun Zhen for her role as a bulk cash courier in a Chinese money laundering organization tied to drug trafficking proceeds. The case, brought under the Homeland Security Task Force initiative, illustrates how such networks move cartel money through shell accounts and dual identities.

Shu Jun Zhen, 31, was sentenced to nine years in prison and ordered to forfeit nearly $23 million.
The CMLO she worked for laundered over $92 million in illicit funds in less than two years, according to prosecutors.
Zhen personally picked up and deposited approximately $23 million in illicit bulk cash using real and fake identities.
She pleaded guilty in July 2025 to three counts, including money laundering conspiracy and a monetary transaction count involving property over $10,000.
Approximately $670,000 in U.S. currency and 12 firearms were seized from a drug trafficking organization that used the CMLO's services.

Source document

0:15

Texas State Securities Board Source document ↗

United States Texas State Securities Board Conduct & Consumer ✓ 12 claims 21 Oct 2026

Texas secures guilty plea in Midland oil-and-gas investment fraud case

The Texas State Securities Board reports a criminal conviction in a Midland County securities fraud case involving fraudulent oil-and-gas investment solicitations. For enforcement and compliance leads, it illustrates how misrepresentations about escrow protection and undisclosed liabilities translate into criminal liability, and how the state securities regulator supplies a special prosecutor to local district attorneys to close these cases.

Teddlie pleaded guilty to securities fraud and theft in Cause No. DCR-26-00561 in Midland County's 238th Judicial District Court.
His 10-year sentence was suspended and replaced with eight years' community supervision, plus $75,000 in upfront restitution.
Teddlie falsely represented that investor funds would remain in an attorney escrow account during the sale.
He failed to disclose prior civil judgments, outstanding federal tax liens and pending criminal indictments at the time of solicitation.
The scheme was promoted through KCET Consulting Advisors LLC and Dakota Petroleum Group LLC.

Source document

0:15

FINRA Source document ↗

United States FINRA Governance & Accountability ✓ 27 claims 21 Oct 2026

FINRA 2026 customer data request adds elder-exploitation and beneficiary questions

FINRA has issued its 2026 Customer Information Request, a voluntary data collection that reached more than 2,400 firms. This year's form adds questions on registered persons named as customer beneficiaries and on temporary holds placed under the senior-exploitation rule. The FAQs clarify who counts as a customer, how to treat foreign and politically exposed relationships, and what to do if a firm cannot meet the deadline.

FINRA requested responses to the 2026 CIR by Nov. 18, 2026, covering customer data as of Sept. 30, 2026, from more than 2,400 firms contacted on Oct. 7, 2026.
New question 6b asks for the number of Non-Institutional accounts where the assigned registered person has been approved under Rule 3241 to be a beneficiary or hold a position of trust.
New questions let firms report the total number of temporary holds placed on Specified Adult accounts under Rule 2165 during the 12-month period ending Sept. 30, 2026, counting each hold separately.
Firms needing more time for their initial submission should notify their Risk Monitoring Analyst of the delay with an expected submission date and the reason, such as resource or technical constraints.
Amendments to an already submitted response may be filed at any time after Nov. 18, 2026, via the Create Amendment function in FINRA Gateway.

Source document

play

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Governance & Accountability ✓ 17 claims 21 Oct 2026

ABA names 11 winners of 2026 Emerging Leader Awards

A brief industry announcement rather than a regulatory development: the American Bankers Association has named its 2026 class of Emerging Leader Award winners. Readers in compliance or policy roles may skim this for personnel moves at member institutions rather than for any binding obligation.

ABA announced 11 winners of its 2026 Emerging Leader Awards on October 21, 2026.
Winners include a BSA, fraud and compliance vice president at Monson Savings Bank and a chief executive officer at Decatur County Bank.
Judging criteria included dedication to the profession, inventiveness, leadership skills, mentoring ability, personal integrity, tenure and academic training.
The winners will be recognized at the ABA Annual Convention, held October 25-27 in Salt Lake City.

Source document

play

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 25 claims 21 Oct 2026

DOJ fraud surge charges 40-plus defendants over nearly $42m in SNAP benefit fraud

The Justice Department's National Fraud Enforcement Division announced its first coordinated surge against SNAP and USDA program fraud, bringing actions against more than 40 defendants between September 1 and October 21, 2026. The cases centre on compromised EBT cards, stolen identities and authorised retailers trafficking benefits. For anyone tracking payments fraud and identity-theft typologies, the charging documents map how these schemes are run and monetised.

The surge ran from September 1 to October 21, 2026, producing actions against more than 40 defendants whose schemes caused nearly $45 million in intended losses, nearly $42 million of it against SNAP.
The largest case, United States v. Yaseen and Kanaan in the Southern District of Ohio, alleges $29.7 million in intended loss from thousands of fraudulent EBT transactions run through approved Chicago retail food stores using stolen state account data.
In the Oregon conspiracy, Ana Patricia Escalante was sentenced to 27 months and ordered to pay $2.4 million in restitution; 12 of 17 defendants have been sentenced to a combined 157 months.
Mark Frisbie pleaded guilty in the Middle District of Florida to false crop-insurance claims and agreed to pay $1,506,992.26 in restitution to the Farm Service Agency.
Schemes relied on skimming devices, stolen identities covering more than 650 victims in one Michigan case, and retailers exchanging cash and non-eligible goods for benefits at discounted rates.

Source document

0:15

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Digital Assets ✓ 20 claims 21 Oct 2026

OCC finalizes stablecoin rule, drops presumption against affiliate yield deals

The OCC has finalized its rule implementing the Genius Act's framework for payment stablecoins, settling how it will police the statutory ban on issuers paying yield. The agency narrowed that prohibition rather than tightening it, dropping a presumption against affiliate arrangements. For banks worried about deposit flight to crypto platforms, this is the detail that matters, and the ABA has said so plainly.

The OCC finalized the rule on 21 October 2026 with a narrower payment-of-interest prohibition than it originally proposed, and says it expects future rulemaking on the subject.
The final rule removed proposed language that would have presumed certain transactions with affiliates and related third parties violated the yield prohibition.
The OCC said it does not believe a rebuttable presumption on the yield prohibition is appropriate while the payment stablecoin market remains nascent.
The agency also finalized a rule letting bank subsidiaries and other issuers request waivers from certain Genius Act requirements, plus the reporting forms issuers must submit.
ABA President and CEO Rob Nichols said the rule preserves the status quo for crypto platforms despite Congress's intent to protect local lending.

Source document

0:15

BIS Press Releases Source document ↗

Global BIS Press Releases Sustainability ✓ 14 claims 21 Oct 2026

Bank of Italy's Panetta says climate damages topped $200bn in 2025, resilience lagging

A speech by Bank of Italy Governor Fabio Panetta opening the BIS-hosted Green Swan 2026 conference in Manila sets out why climate resilience, not just mitigation, now needs central bank and financial sector attention. Useful for risk and sustainability teams tracking how senior regulators are framing physical climate risk as a near-term financial stability issue rather than a distant threat.

Extreme weather events caused more than USD 200 billion in direct damages globally in 2025, Panetta said.
That figure is more than double the level of direct damages recorded in the early 2000s.
Panetta identified three priorities going forward: understanding climate risks better, sharing and absorbing them more effectively, and investing more decisively in reducing exposure and vulnerability.
The first Green Swan Conference was held in 2021, when climate change was already recognised as a major long-term risk.
The 2026 conference is jointly organised by the BIS, Bangko Sentral ng Pilipinas, Banca d'Italia and the NGFS.

Source document

0:15

BIS Press Releases Source document ↗

Global BIS Press Releases AI, Technology & Data ✓ 19 claims 21 Oct 2026

BIS official warns AI could amplify herding and cyber risk in finance

A BIS speech examines how artificial intelligence may reshape price formation, herding behaviour and cyber risk in the financial system, with implications for how central banks and regulators monitor and respond. Relevant for risk, compliance and technology teams assessing AI's systemic footprint and supervisory expectations.

Zhang identified three macro-financial implications of AI: faster price formation, herding, and heightened cyber risk.
A recent BIS analysis cited in the speech points to growing debt, including private credit, and circular financing among firms within the AI ecosystem.
The BIS's 2026 Annual Economic Report calls for better supervisory visibility into AI use to identify model-driven correlated exposures and herding.
The Financial Stability Institute's recent work points to strengthening existing cyber resilience frameworks as AI changes the threat environment.
Project Spectrum, a BIS Innovation Hub collaboration with the Deutsche Bundesbank and European Central Bank, explored using AI to structure daily product-price data for inflation analysis.

Source document

0:15

CISA Advisories Source document ↗

United States CISA Advisories AI, Technology & Data ✓ 16 claims 21 Oct 2026

CISA urges immediate patching of two critical PHP remote code flaws

CISA has issued an alert on two critical PHP vulnerabilities enabling unauthenticated remote code execution across all PHP installations serving web requests. The agency gives specific patched versions and tells organizations to inventory PHP usage, patch internet-facing systems first, and take unpatched systems offline if updates cannot be applied immediately.

CISA's alert covers two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, known collectively as php2shell.
The flaws allow unauthenticated remote code execution and affect all PHP installations serving web requests.
Organizations should update immediately to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35.
Systems still running PHP 8.1 or earlier unsupported versions should be taken offline until patched.
CISA says it has not observed exploitation of these vulnerabilities as of the time of publication.

Source document

0:15

AFM Netherlands Source document ↗

AFM Netherlands Governance & Accountability ✓ 14 claims 21 Oct 2026

AFM flags ESMA's 2026 reporting priorities plus cash flow and segment disclosure gaps

The AFM has set out what it will scrutinise in 2026 corporate reporting from listed companies, combining ESMA's newly published European supervisory priorities with two areas the AFM itself has flagged before. The note matters to finance directors, audit committees and auditors preparing year-end accounts and disclosures.

ESMA published its 2026 corporate reporting supervisory priorities on October 13, which the AFM says it will focus on during the coming year.
ESMA's priorities cover financial reporting on geopolitical risks and restructuring or debt restructuring provisions, sustainability reporting on double materiality assessment progress, and ESEF errors in the statement of changes in equity.
The AFM continues to ask companies to review cash flow statement quality against IAS 7, referencing its own previously published points of attention and self-assessment tool.
The AFM will keep focusing on compliance with IFRS 8 requirements to disclose specified amounts, including material income and expense items, for each reportable segment.
ESMA has published the 31st extract from the FRWG (EECS) enforcement decisions database covering IFRS Accounting Standards and the APM Guidelines.

Source document

play

CFTC Enforcement Source document ↗

United States CFTC Enforcement Financial Crime ✓ 18 claims 21 Oct 2026

CFTC wins $9.2m default judgment against Louisiana man over forex fraud scheme

A federal court in Louisiana has entered a default judgment closing out a CFTC retail forex fraud case that already produced a criminal conviction. The segment covers what the court found, the penalty and bans imposed, and how the civil judgment sits alongside the nine-year prison sentence DePetrillo is already serving. Short, but a clean illustration of parallel civil and criminal resolution.

The court ordered a $9,211,492 civil monetary penalty against DePetrillo, Meteor LLC and NOLA FX Capital Management LLC.
The court found the defendants misappropriated more than $3 million through false solicitations, false account statements and Ponzi-like payments to existing participants.
The default judgment imposes permanent trading and registration bans and resolves all claims in the CFTC's 2024 complaint.
In the related criminal case, DePetrillo was sentenced on July 23, 2025 to nine years in prison and ordered to pay $6,748,412 in restitution.

Source document

0:15

Federal Register — CFTC Source document ↗

United States Federal Register — CFTC Digital Assets ✓ 20 claims 21 Oct 2026

CFTC launches rulemaking to bring retail crypto trading onto regulated exchanges

The CFTC has issued an advanced notice of proposed rulemaking on section 2(c)(2)(D) of the Commodity Exchange Act, signaling intent to write fit-for-purpose rules for crypto asset transactions and markets. Compliance and legal teams at exchanges, intermediaries and crypto trading venues should read this to understand the direction of a framework that could require retail crypto transactions to move onto designated contract markets.

Comments on the ANPRM, filed under RIN 3038-AF80, must be received by the CFTC on or before December 14, 2026.
The notice proposes two new frameworks: Regulation Crypto Asset Transactions (Regulation CTX) and Regulation Crypto Asset Markets (Regulation CAM).
The Commission states the President's Working Group on Digital Asset Markets directed it to use existing rulemaking and exemptive authorities to enable crypto asset trading.
The notice states that in June 2016 the Commission charged BFXNA Inc. (Bitfinex) with violations of the on-exchange requirement, the first application of section 2(c)(2)(D) to a crypto exchange.
The Commission states that CME and Cboe self-certified cash-settled bitcoin futures in December 2017, the first regulated U.S. bitcoin derivatives products.

Source document

0:15

Federal Register — FinCEN Source document ↗

United States Federal Register — FinCEN Financial Crime ✓ 18 claims 21 Oct 2026

FinCEN withdraws 2023 finding that crypto mixing is a primary money laundering concern

FinCEN has withdrawn both its finding and the proposed rule that would have branded international convertible virtual currency mixing a class of transactions of primary money laundering concern. The reversal kills a reporting and recordkeeping regime that compliance teams had been preparing for since October 2023, and signals how the current Treasury weighs financial privacy against illicit finance risk on public blockchains.

FinCEN is withdrawing its finding and the proposed rule published at 88 FR 72701 (October 23, 2023) as of October 6, 2026.
The proposed rule would have imposed special measure one, requiring covered financial institutions to report and keep records on suspected CVC mixing, including wallet addresses, transaction hashes, IP addresses and customer identity data.
The withdrawal is informed by comments that the expansive definition of CVC mixing could chill legitimate activity and impose a large reporting burden.
FinCEN cites the July 2025 President's Working Group report under Executive Order 14178, which supports lawful users transacting privately on public blockchains.
FinCEN states it will continue to monitor CVC mixers for money laundering, terrorist financing or other illicit finance activity and may act in future.

Source document

0:15

Federal Register — SEC Source document ↗

United States Federal Register — SEC Governance & Accountability ✓ 21 claims 21 Oct 2026

SEC proposes reopening fixed-income cross trading shut off by 2022 valuation rule

The SEC has proposed amendments to rule 17a-7, the exemption letting affiliated funds trade securities directly with each other. The changes would restore eligibility for many fixed-income securities that became ineligible after a 2020 valuation rule took effect, while adding new pricing, oversight and reporting conditions. Comments close December 14, 2026.

Comments on the proposed rule are due on or before December 14, 2026, under File Number S7-2026-36.
Rule 2a-5's definition of readily available market quotations has made most fixed-income securities ineligible for cross trading since its compliance date of September 8, 2022.
Registered funds investing primarily in fixed-income instruments grew from around $1.5 trillion to approximately $7.9 trillion in assets over the last twenty years, according to the release.
An industry survey found registered funds engaged in more than $200 billion in cross trades of fixed-income securities in 2020, with estimated savings of over $300 million.
The proposal would require aggregated reporting of trading activity and cross trades on Form N-PORT and Form N-MFP.

Source document

0:15

Federal Register — SEC Source document ↗

United States Federal Register — SEC Conduct & Consumer ✓ 13 claims 21 Oct 2026

SEC proposes letting advisers charge performance fees on retail mutual funds

The SEC wants to rewrite rule 205-3 under the Advisers Act so that advisers to registered funds and BDCs can charge capital-gains-based performance fees, subject to a 20% cap and independent board sign-off, and so that the qualified client test tracks the accredited investor definition. This segment covers what changes, the conditions attached, the new disclosure obligations, and where the drafting leaves open questions.

Performance-based compensation to a regulated fund could not exceed 20% of the fund's net gains over a specified period.
The fund's board, including a majority of independent directors, must find the arrangement in the best interest of shareholders and make specific findings on its structure and investor protections.
The 'qualified client' definition would incorporate the Regulation D accredited investor test and remove the assets-under-management test.
Forms N-1A, N-2 and N-CSR would be amended to require separate disclosure of all performance-based compensation paid to the adviser.
Comments are due December 7, 2026 under File No. S7-2026-28; unit investment trusts and N-3 variable annuity separate accounts are excluded.

Source document

0:15

Federal Register — SEC Source document ↗

United States Federal Register — SEC Digital Assets ✓ 19 claims 21 Oct 2026

SEC proposes crypto custody rules for advisers and regulated funds

The SEC has published a proposed rulemaking addressing how registered investment advisers and regulated funds may custody crypto assets, creating new rules alongside amendments to the existing Advisers Act and Investment Company Act custody frameworks. This segment covers the scope of the proposal, its stated rationale, and the comment timeline that compliance and legal teams need to track.

Comments on the proposal must be received by the Commission no later than December 7, 2026, under File Number S7-2026-35.
The Advisers Act custody rule 206(4)-2 would be amended and redesignated as rule 223-1, with conforming changes to Form ADV and Form ADV-E.
The Commission proposes new rules 17f-8 and 17f-9 under the Investment Company Act while proposing to rescind rule 17f-3 and Form N-17f-1.
The proposal adds new questions to Form ADV and Form N-CEN specifically addressing tokenized private funds and tokenized regulated investment company shares.
The Commission cites a global crypto market capitalization of approximately $2.7 trillion in May 2026, up from $800 billion at the beginning of 2021.

Source document

0:15

Croatian Financial Services Supervisory Agency (HANFA) Source document ↗

European Union Croatian Financial Services Supervisory Agency (HANFA) Markets & Infrastructure ✓ 16 claims 21 Oct 2026

HANFA flags T+1 settlement switch as EU completes regulatory framework

Croatia's HANFA relays an ESMA notice marking completion of the regulatory framework for the EU's shift to T+1 securities settlement. It sets out an interim deadline in December 2026 and urges market participants to begin testing now, a year ahead of the full transition.

The EU will move to a T+1 settlement cycle on 11 October 2027.
Investment firms and their clients must align allocation and confirmation processes with new requirements by 7 December 2026.
From 7 December 2026, use of electronic and standardised communication channels and international messaging standards becomes mandatory.
Machine-readable communication methods are required except in cases of temporary technical difficulties.
ESMA's Regulatory Technical Standards and revised Guidelines on standardised procedures and communication protocols now complete the regulatory framework.

Source document

0:15

UK Competition and Markets Authority Source document ↗

United Kingdom UK Competition and Markets Authority Governance & Accountability ✓ 16 claims 21 Oct 2026

CMA subsidy unit reports on £350m chemicals resilience fund scheme

The CMA's Subsidy Advice Unit has completed its advisory report on a proposed £350 million government subsidy scheme for the UK chemicals sector. This item covers the scheme's structure, funding terms and the SAU's review timetable, relevant to firms in chemicals, critical infrastructure and supply chain sectors watching subsidy design precedent.

The SAU completed its report within 30 working days of accepting BIST's request on 10 September 2026, publishing its final advice on 21 October 2026.
The Critical Chemicals Resilience Fund has an overall budget of £350 million, available until the end of March 2030.
Successful applicants could receive up to 50% of eligible costs for projects that improve resilience and competitiveness.
Eligible companies have already been identified by BIST and ratified by a panel of industry experts, ahead of the fund opening to applications in autumn.
Applicants must submit a business case covering the resilience challenge, proposed investments, delivery arrangements and evidence of additionality and value for money.

Source document

0:15

FCA Publications Source document ↗

United Kingdom FCA Publications Digital Assets ✓ 15 claims 21 Oct 2026

FCA consults on DeFi guidance for operational resilience and financial crime risk

The FCA has opened a consultation on non-Handbook guidance for firms offering financial services via decentralised finance, covering operational resilience and financial crime risk including Money Laundering Regulations compliance. It sits alongside a separate cryptoasset perimeter consultation and should be read by any regulated firm already engaging with DeFi protocols or planning to.

The guidance consultation GC26/7 opened on 21 October 2026 and closes on 18 November 2026.
It applies to firms in scope of SYSC 15A on operational resilience, SYSC 6 on financial crime, or subject to the Money Laundering Regulations.
The FCA says it plans to publish final guidance in January 2027.
From 25 October 2027, the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 will bring new cryptoasset activities into the FCA's regulatory perimeter.
Firms are told to read the consultation alongside CP26/36 on Cryptoasset Perimeter Guidance and the FCA's wider cryptoasset and operational resilience publications.

Source document

0:15

FCA Source document ↗

United Kingdom FCA Governance & Accountability ✓ 24 claims 21 Oct 2026

FCA deputy chief says rulemaking has peaked but tokenisation and T+1 deadlines loom

A speech by FCA deputy chief executive Sarah Pritchard to the Investment Association sets out the regulator's claim to be past peak rulemaking while listing an active pipeline including a fund reporting consultation closing this week, a tokenisation roadmap with the Bank of England, and a warning on T+1 settlement readiness. Useful for compliance teams tracking where FCA attention and enforcement discretion are heading next.

UK investment fraud losses rose 40% in 2025, Pritchard said, despite the FCA securing more criminal convictions than ever before across fraud, money laundering and insider dealing.
The FCA's consultation on streamlining the asset manager rulebook, which it says could save firms £128m per year, is collecting responses until this Thursday.
A joint tokenisation roadmap with the Bank of England, setting the path from testing to lasting market infrastructure, is due next month.
T+1 settlement goes live in under a year and the FCA said it will act against firms found unprepared.
More than a dozen firms were authorised to deliver targeted support within six months of its introduction, with consumers receiving it said to invest up to 53% more than those who do not.

Source document

0:15

OCC Bulletins Source document ↗

United States OCC Bulletins Digital Assets ✓ 15 claims 21 Oct 2026

OCC signals it will waive stablecoin prior-approval bar for existing US issuers

The OCC has told national banks, federal savings associations and prospective stablecoin issuers how to file GENIUS Act applications and request waivers before the January 18, 2027 compliance date. The bulletin matters because issuing a payment stablecoin without approval carries criminal penalties, and the OCC is signalling where it will and will not grant relief during the application backlog.

Payment stablecoin issuers must comply with the GENIUS Act from January 18, 2027, and unapproved issuance carries criminal penalties.
Existing US issuers with a substantially complete application pending can request a waiver from the Prior Approval Requirement, which the OCC generally expects to grant unless more compelling reasons to deny emerge.
The OCC has identified no generally applicable reason to waive requirements other than the Prior Approval Requirement, citing the 18 months issuers have had to prepare since the act passed.
Section 5(f) limits any waiver to a period not exceeding 12 months from January 18, 2027, and the OCC expects to act on waiver requests generally by that date.
The OCC will begin accepting applications only after OMB approves the information collection for the application forms, and will announce the start by press release.

Source document

0:15

FCA Publications Source document ↗

United Kingdom FCA Publications Digital Assets ✓ 19 claims 21 Oct 2026

FCA consults on new crypto perimeter exclusions, offers forbearance to firms caught by late SI

The FCA is consulting on guidance clarifying a fresh set of exclusions from the UK's incoming cryptoasset regime. The additions arrived through a late statutory instrument, creating authorisation uncertainty for some firms. If your business model sits near settlement, stablecoin backing, proprietary trading or technical access services, this consultation determines whether you need FCA permission at all before 25 October 2027.

The consultation closes on 18 November 2026, with final guidance planned for January 2027 and the regime commencing 25 October 2027.
New exclusions cover temporary settlement arrangements, stablecoin backing assets, proprietary trading not provided as a service or market making on a QCATP, and technical services giving access to third-party or decentralised protocols.
Firms materially affected by uncertainty over the technical services provider exclusion will be given additional time to complete the arranging permission aspects of an otherwise complete application.
The application period for existing UK crypto firms seeking new regulated activities opened 30 September 2026 and closes 28 February 2027; firms must apply within this window to use the savings provision.
The guidance also addresses central securities depositaries, including third-country CSDs, with safeguarding arrangements involving cryptoassets.

Source document

0:15

OCC Bulletins Source document ↗

United States OCC Bulletins Digital Assets ✓ 16 claims 21 Oct 2026

OCC finalises GENIUS Act stablecoin rule, effective January 2027

The OCC has published its final rule implementing the GENIUS Act for payment stablecoin issuers under its jurisdiction. It sets out the standards banks, federal savings associations and qualified issuers will operate under from January 18, 2027, and signals which parts of the regime are still pending. Anyone with stablecoin issuance or custody ambitions should read this as the near-final shape of the federal framework.

The final rule becomes effective January 18, 2027, the same date as the GENIUS Act itself.
Most requirements are housed in a new 12 CFR 15 covering reserves, redemption, custody, risk management and issuer applications.
BSA, AML and OFAC sanctions rules are excluded and will come in a separate rulemaking coordinated with Treasury.
The rule revises existing capital adequacy (12 CFR 3), prompt corrective action (12 CFR 6), fee (12 CFR 8) and procedure (12 CFR 19) regulations.
It binds national banks, federal savings associations, federal branches, foreign issuers, and federal and state qualified payment stablecoin issuers under OCC authority.

Source document

play

OCC Bulletins Source document ↗

United States OCC Bulletins Digital Assets ✓ 19 claims 21 Oct 2026

OCC revises weekly and quarterly stablecoin reporting forms alongside GENIUS Act final rule

The OCC has put revised reporting forms for payment stablecoin issuers out for a further round of comment, issued the same day as its final rule implementing the GENIUS Act. This segment covers who must file, the PS-01 and PS-02 start dates, and the short comment window that compliance teams at any firm registering as an issuer need to track now.

The OCC issued a final rule implementing the GENIUS Act for payment stablecoin issuers on 21 October 2026, the same day as this bulletin.
Weekly form PS-01, covering payment stablecoin activity and reserves, would take effect from the 25 January 2027 report date, subject to OMB approval.
Quarterly form PS-02, covering reports of condition and income, would take effect from the 31 March 2027 report date.
The collection applies to permitted payment stablecoin issuers and foreign payment stablecoin issuers for which the OCC has authority under the GENIUS Act.
Comments on the revised forms are due within 30 days of publication of the information collection in the Federal Register.

Source document

play

European Commission Digital Strategy Source document ↗

European Union European Commission Digital Strategy Conduct & Consumer ✓ 14 claims 21 Oct 2026

EU opens DSA proceedings into Booking.com over fraudulent listings and phishing scams

The European Commission has opened formal proceedings against Booking.com under the Digital Services Act. It covers three questions: whether the platform diligently assessed and mitigated fraud risks, whether phishing scams exploited its reservation and guest data, and whether paid-for ranking boosts were disclosed as ads. This segment sets out exactly what the Commission is examining and where the exposure sits.

The European Commission opened formal DSA proceedings against Booking.com on 21 October 2026.
The Commission is examining whether Booking.com diligently assessed and effectively mitigated risks from fraudulent listings and phishing scams.
A separate strand concerns paid-for boosted listings allegedly not clearly labelled as advertisements to users.
The investigation covers phishing scams that exploit Booking.com's reservation and guest data.
Booking.com is supervised directly by the Commission as a designated very large online platform under the DSA.

Source document

play

FCA Source document ↗

United Kingdom FCA Conduct & Consumer ✓ 22 claims 21 Oct 2026

FCA bans ex-CEO who fronted for disqualified director in £4m mini-bond scheme

The FCA has banned two individuals connected to Vector Wealth Ltd after a disqualified director used the firm's authorised status to sell high-risk mini-bonds. This item sets out the fines, the restitution ordered, and how the regulator treated cooperation and financial hardship, useful reading for anyone weighing SMCR exposure where control of an authorised firm changes hands.

Jeffrey Dawkins was banned and fined nearly £270,000 for acting as a front for a disqualified director at Vector Wealth Ltd.
Dawkins was ordered to pay £57,298 plus interest (£68,257) of proceeds from selling the firm and continuing as its director and approved person.
Kadir Kanizi was banned from senior management roles; his £80,096 penalty was reduced to £20,000 for financial hardship and redirected to liquidators.
Investors are expected to lose about £4 million, having invested £105,000 on average with one investing £1.1 million.
There is a statutory obligation to report a change in control of authorised firms, which this case turned on.

Source document

0:15

Federal Register — SEC Source document ↗

United States Federal Register — SEC Conduct & Consumer ✓ 18 claims 21 Oct 2026

SEC reissues comment-filing details for CFA accredited-investor proposal

The SEC has published a technical correction to its request for comment on designating the Chartered Financial Analyst (CFA) designation as a qualifying credential for accredited natural persons. The correction restates how and where comments on File No. 4-933 must be submitted. It changes nothing in the underlying question but is the operative reference for anyone preparing to respond.

The correction (FR Doc. C1-2026-20311) amends the ADDRESSES section of notice 2026-20311, which began on page 63314 in the Federal Register issue of Monday, October 5, 2026.
The underlying notice, Release No. 33-11447; File No. 4-933, concerns designating the Chartered Financial Analyst designation as qualifying natural persons for accredited investor status.
Comments may be filed via the Commission's internet comment form, by email to rule-comments@sec.gov, or on paper to Vanessa A. Countryman, Secretary, SEC, 100 F Street NE, Washington, DC 20549-1090.
All submissions should refer to File Number 4-933, and commenters are asked to use only one method of submission.
The Commission will post all submitted comments on its website and will not accept personally identifiable information that commenters do not wish made public.

Source document

play

Federal Register — Treasury Source document ↗

United States Federal Register — Treasury Governance & Accountability ✓ 18 claims 21 Oct 2026

IRS withdraws proposed per se device test and anti-abuse rules for Section 355 spinoffs

Treasury and the IRS have partially withdrawn their 2016 proposed regulations under Section 355, removing a mechanical 'per se' device test and two anti-abuse rules that tax planners had criticised. This matters to any corporation contemplating a tax-free spinoff, and to the advisers who structure them, because the most prescriptive parts of the 2016 package are now off the table while the agencies keep studying the area.

The IRS withdrew proposed Sections 1.355-2(d)(2)(iv)(E) and (d)(5) and 1.355-9(d) as of October 21, 2026, from the notice of proposed rulemaking published on July 15, 2016 (81 FR 46004).
The withdrawn 'per se' device rule would have treated a distribution as a device whenever a corporation's Nonbusiness Asset Percentage exceeded designated thresholds, regardless of other nondevice factors such as a corporate business purpose.
Two anti-abuse rules are also withdrawn, including one tied to a minimum Five-Year-Active-Business Asset Percentage of at least five percent for both the distributing and controlled corporations.
Treasury and the IRS acted after receiving stakeholder feedback that was generally critical of the 'per se' device rule and the two anti-abuse rules.
The withdrawal does not affect the potential application of other rules or judicial doctrines, such as the substance-over-form or step-transaction doctrines.

Source document

0:15

European Central Bank Source document ↗

Global European Central Bank Prudential & Capital ✓ 20 claims 21 Oct 2026

ECB's Lane sets out widened EUREP repo facility ahead of Q4 2026 go-live

Executive Board member Philip Lane used a Shanghai speech to lay out how the ECB's enhanced Eurosystem repo facility for central banks, EUREP, and its swap lines fit together as tools for managing euro liquidity abroad. The speech matters for anyone tracking how central banks outside the euro area can access euro funding and what that means for sovereign and supranational bond markets.

The maximum EUREP line size per individual central bank is €50 billion, with transaction maturities ranging from one day to one week and extendable.
Loans under EUREP are priced at the main refinancing operations rate plus a spread set by the Governing Council to preserve the facility's backstop character.
More than thirty central banks have expressed interest in EUREP in the past six months, and onboarding of the first foreign central banks was completed at the beginning of October.
Onboarded central banks will be able to draw from the facility as of the fourth quarter of 2026.
Standing access applies in principle to all central banks unless excluded on grounds including money laundering, terrorist financing or international sanctions.

Source document

0:15

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 19 claims 21 Oct 2026

MIAX folds cPRIME Agency volume into complex-order rebate test on MIAX Options

MIAX has amended its MIAX Options Fee Schedule to change how members qualify for the alternative, higher rebates on Priority Customer non-paired Complex Orders. By adding cPRIME Agency volume to the qualifying calculation, more members should clear the 50% threshold that unlocks the higher per-contract credits. The filing is immediately effective and open for SEC comment until November 6, 2026.

The amendment adds Priority Customer cPRIME Agency order volume to the calculation used to determine alternative PCRP rebates on non-paired Complex Orders in MIAX Options Fee Schedule Section (1)(a)(iii).
Reaching 50% or more of a member's PCRP volume unlocks higher credits of $0.23 (tier 1), $0.27 (tier 2) and $0.28 (tiers 3, 4 and 5), with no threshold or credit amounts changed by this filing.
The rule change became effective October 1, 2026 and took effect immediately under Section 19(b)(3)(A)(ii) and Rule 19b-4(f)(2), subject to SEC summary suspension within 60 days.
Written comments on SR-MIAX-2026-40 must be submitted on or before November 6, 2026.
MIAX states it held roughly 10.22% of multiply-listed equity options volume in August 2026, and that no exchange among 19 registered options venues exceeded approximately 10-11%.

Source document

play

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 21 claims 21 Oct 2026

MIAX to accept inferior-priced PRIME auction responses rather than reject them on entry

MIAX has amended Rule 515A to stop rejecting Request for Response messages priced worse than the auction's initiating price. Instead the System accepts all responses and cancels the non-participating ones when the PRIME or cPRIME auction ends. The SEC waived the usual 30-day delay, so the change is already live. Comments run to November 6, 2026.

MIAX will no longer reject RFR auction responses priced worse than the initiating price, instead accepting all responses and cancelling non-participating ones at the auction's conclusion.
The change amends Exchange Rule 515A(a)(2)(i)(D) and applies to both PRIME and cPRIME price-improvement auctions.
The SEC waived the 30-day operative delay, making the rule change effective upon filing on September 30, 2026.
MIAX cites at least one other options exchange whose price-improvement auction does not reject inferior-priced responses before completion.
Written comments on file number SR-MIAX-2026-41 must be submitted on or before November 6, 2026.

Source document

0:15

Financial Stability Board Source document ↗

Global Financial Stability Board Prudential & Capital ✓ 20 claims 21 Oct 2026

FSB says just one in five members fully meet bank resolution funding rules

An FSB Secretary General speech to G20 context surveys AI adoption, stablecoin oversight and regulatory modernisation, but the hardest fact is a peer review finding on resolution funding. Compliance and resolution planning teams should note the implementation gap flagged and the parallel publications on AI practices and stablecoin monitoring referenced alongside it.

Only one in five FSB member jurisdictions is fully compliant with the FSB's policies on temporary public sector funding for banks in resolution.
Approximately half of FSB member jurisdictions have material gaps in implementing these backstop funding mechanisms, per the Peer Review Report on Public Sector Backstop Funding Mechanisms.
The FSB published its Sound Practices for Responsible Adoption of AI, comprising twelve practices described as a flexible toolkit rather than minimum standards.
A consultation report setting out eight principles for modernising regulatory and supervisory frameworks will be finalised in 2027 after further stakeholder engagement.
The FSB submitted a summary of its ongoing stablecoin cross-border vulnerability work to the G20, building on 2023 high-level recommendations and a 2025 thematic peer review.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 20 claims 21 Oct 2026

Fraudster pleads guilty to scheme stealing benefits from thousands of US veterans

A US citizen who operated from the Philippines has pleaded guilty to exploiting stolen personal data of servicemembers and veterans to drain bank accounts and benefits. The case, part of the Criminal Division's Cyber-Enabled Scam Initiative, illustrates how an insider data theft inside a US Army records office fed a cross-border fraud and money-mule network.

Boling pleaded guilty to conspiracy to commit wire fraud and conspiracy to commit money laundering, each carrying a maximum of 20 years.
The stolen data originated with Fredrick Brown, a civilian Army medical records administrator in South Korea who photographed PII of thousands of military-affiliated individuals.
Boling was deported from the Philippines to the US in May 2026 and is scheduled for sentencing on January 14, 2027.
Co-conspirators Brown and Trorice Crawford were sentenced to 151 and 46 months; Jongmin Seok and Allan Albert Kerr remain fugitives.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 18 claims 20 Oct 2026

Maryland lab owner convicted of $18.7M Medicare respiratory-testing fraud at nursing homes

A federal jury in Maryland has convicted Annapolis laboratory owner Patrick Britton-Harr of billing Medicare for respiratory pathogen panel tests that nursing home residents did not need, physicians did not order, and in many cases were never performed. The case shows how pandemic-era COVID-19 testing access was leveraged into a separate, high-value billing stream, and how the conduct was proven at trial.

The jury convicted Britton-Harr on five counts of health care fraud and one count of transactional money laundering, each carrying a maximum of 10 years in prison.
Through Provista Health he billed Medicare $18.7 million for RPP testing in roughly six months, of which Medicare paid more than $7.2 million.
Physicians never ordered the RPP tests, and several testified they had never ordered one for any patient in their entire careers.
He billed for tests after closing his Arizona laboratory and for tests on nursing home residents who were already deceased.
Britton-Harr was previously convicted in a separate investment fraud scheme, according to the FBI.

Source document

0:15

CISA Advisories Source document ↗

United States CISA Advisories Financial Crime ✓ 29 claims 20 Oct 2026

CISA and FBI Issue Joint Advisory on SafePay Ransomware After 600 Victims

This joint advisory from FBI, CISA, USSS and European law enforcement partners sets out the tactics, techniques and indicators of compromise used by SafePay ransomware actors, who have hit at least 600 victims across four continents. Security and incident response teams should use this to update detection rules and patch the specific CVEs named.

SafePay threat actors have affected at least 600 separate victims across multiple critical infrastructure sectors since August 2024.
The advisory names five CVEs exploited for initial access, including CVE-2024-40711 and CVE-2024-40766 affecting edge device products.
SafePay uses a hybrid ChaCha20 stream cipher and RSA public-key encryption scheme, appending encrypted files with the .SafePay extension.
Indicators of compromise listed were observed between November 2024 and August 2026, including IP addresses, malicious files and SHA-1 and SHA-256 hash values.
Authoring agencies include the FBI, CISA, USSS, Germany's Landeskriminalamt Rheinland-Pfalz, and two UK agencies, based on investigations as recently as August 2026.

Source document

play

CISA Advisories Source document ↗

United States CISA Advisories AI, Technology & Data ✓ 16 claims 20 Oct 2026

CISA warns of hard-coded crypto key flaw in Moxa AIG-302 edge gateway

CISA's advisory covers two flaws in Moxa's AIG-302 ThingsPro Edge, used across critical manufacturing, energy and water sector deployments worldwide. One allows a privileged authenticated attacker to pull cryptographic secrets via an internal API; the other exposes a hard-coded private key reachable without authentication. Moxa has shipped firmware v1.4.1 to fix both.

CVE-2026-109812 lets a privileged authenticated attacker with adjacent network access extract cryptographic key material via the /api/v1/secrets/ API, rated CVSS v3.1 6.8.
CVE-2026-109813 involves a hard-coded cryptographic key in /usr/bin/sysman exploitable by an unauthenticated adjacent attacker, rated CVSS v3.1 8.1 (v4.0: 8.6).
Both flaws affect Moxa AIG-302 ThingsPro Edge firmware versions 1.4.0 and earlier; Moxa has released fixed firmware v1.4.1.
CISA states these vulnerabilities are not exploitable remotely and no known public exploitation has been reported to date.
Affected deployments span the Critical Manufacturing, Energy, and Water and Wastewater Systems sectors worldwide, per CISA's background section.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 20 claims 20 Oct 2026

DOJ launches WHIP program paying whistleblowers up to $30,000 for fraud tips

The Justice Department and its National Fraud Enforcement Division have created the Fraud Whistleblower Incentive Program (WHIP), paying tipsters $10,000 to $30,000 at the charging stage for information on health care and government benefit fraud. This segment covers who it binds, which agencies' programs it targets, how it stacks with existing reward schemes, and the structural novelty of paying before a case is resolved.

WHIP pays whistleblowers $10,000 to $30,000 for information leading to criminal fraud charges, with awards made at DOJ's sole discretion after charges are filed.
The program pays at the charging stage rather than after final resolution, forfeiture and appeals, which DOJ says gives tipsters greater certainty and speed.
It covers federal health care offenses and fraud on programs run by USDA, Labor, HHS, HUD, Education, Veterans Affairs, the Department of War and the SBA, prioritizing hospice, home health, day care and special services fraud.
The Department of the Treasury is committing $25 million to the program, and reports can be filed at america.gov/fraud.
Participants remain eligible for additional awards through other schemes, including the Criminal Division's Corporate Whistleblower Awards Pilot Program.

Source document

0:15

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Governance & Accountability ✓ 16 claims 20 Oct 2026

ABA asks Treasury to soften trustee liability in Trump account rules

Treasury's August proposal sets eligibility limits for the new child retirement accounts created by last year's tax package. The American Bankers Association has written back with four specific drafting changes aimed at trustees who administer these accounts, covering retroactive status loss, monitoring burden, liquidation liability and successor transfers.

Treasury proposed regulations in August limiting Trump account investments to low expense ratio products without excessive fees or unnecessarily complex strategies.
ABA recommended preserving Trump account and IRA status when a trustee disposes of a disqualified investment and reinvests proceeds within 30 calendar days.
The proposal requires trustees to monitor eligible investments at least once every 12 months; ABA wants funds expressly approved by Treasury exempted from this requirement.
ABA recommended a safe harbor shielding trustees from liability for investment losses or market-related consequences of a required disposition, provided they act in good faith.
ABA proposed letting a successor trustee rely on a transferring trustee's documented eligibility determination until its next periodic review, no later than 12 months after the prior review, or until it has actual knowledge of ineligibility.

Source document

0:15

Washington State DFI Source document ↗

United States Washington State DFI Markets & Infrastructure ✓ 10 claims 20 Oct 2026

Washington regulator charges nurse-supply venture and two individuals over unregistered $200,000 offering

Washington State's Department of Financial Institutions has filed a Statement of Charges against Supplies for Traveling Nurses 1, MB Diversity LLC, and individuals Anthony Burnett and Cecille Nguyen. The case centres on a 2023 capital raise that regulators say involved unregistered securities, material misrepresentations, and misuse of investor funds. Listeners should note the penalties sought and the respondents' right to a hearing.

Regulators allege the respondents raised $200,000 from investors in May 2023 through an unregistered securities sale.
The Statement of Charges cites violations of RCW 21.20.010, RCW 21.20.040, and RCW 21.20.140.
MB Diversity LLC, Anthony Burnett, and Cecille Nguyen are alleged to have offered and sold securities without being registered as a salesperson or broker-dealer in Washington.
Sought remedies include a cease and desist order, denial of future registrations, revocation of exemptions, and fines and costs.
The respondents retain the right to request a hearing on the charges.

Source document

play

Washington State DFI Source document ↗

United States Washington State DFI Conduct & Consumer ✓ 12 claims 20 Oct 2026

Washington fines Cultivating Wealth $7,500 over unregistered adviser representative

Washington's Department of Financial Institutions has entered a consent order against The Stanich Group, LLC, doing business as Cultivating Wealth, over an employee who worked as an investment adviser representative in the state without being registered or exempt. The order sets out the fine, costs and cease and desist terms.

Washington DFI entered Consent Order S-25-4050-26-CO01 against The Stanich Group, LLC d/b/a Cultivating Wealth on October 12, 2026.
The order cites a violation of RCW 21.20.040 for acting as an unregistered investment adviser representative in Washington.
The firm must pay a $7,500 fine and $750 in investigative costs.
The order includes a cease and desist directive against further unregistered activity.

Source document

0:15

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Digital Assets ✓ 14 claims 20 Oct 2026

ABA presses Treasury to tighten Genius Act stablecoin licensing rule before it is finalised

The American Bankers Association filed comments on Treasury's August proposal implementing the Genius Act, which would require digital asset providers to hold a federal or state license before issuing payment stablecoins. The ABA wants key terms defined, foreign issuers held to equivalent standards, and clear lines so that banks serving issuers are not exposed to another party's criminal liability. For anyone tracking US stablecoin regulation, this previews the fault lines before finalisation.

The ABA filed comments on Treasury's August proposed rule implementing the Genius Act's stablecoin licensing requirement.
It wants key terms defined so issuers and intermediaries cannot evade the Act's protections and prohibitions.
It asks that foreign issuers be held to substantively equivalent standards and that agencies coordinate on Genius Act regulation.
It seeks clear lines so banks providing ordinary services are not exposed to criminal liability for another party's violation.
It wants holders protected when an issuer's status changes, with notice and a clear path to redemption or divestment.

Source document

0:15

CFTC — Commodity Futures Trading Commission Source document ↗

United States CFTC — Commodity Futures Trading Commission AI, Technology & Data ✓ 10 claims 20 Oct 2026

CFTC Innovation Task Force sets agenda for first forum on 'super intelligence' in markets

The CFTC's Innovation Task Force has released the agenda for its first Frontier Forum on super intelligence, convening technology and finance figures to discuss deployment, market impact and regulatory posture. This is a scene-setting event rather than a rulemaking, but it signals where the Commission wants the AI conversation to go and who it is listening to.

The CFTC's Innovation Task Force released the agenda for its inaugural Frontier Forum on Super Intelligence on October 20, 2026.
Panels will address how SI is being implemented on the frontier and its impact on U.S. markets.
Discussion will cover the Commission's role in fostering responsible SI adoption while protecting market participants from novel and emergent risks.
The meeting will be streamed live on CFTC.gov, with Michael J. Passalacqua leading the Innovation Task Force.

Source document

0:15

CISA Advisories Source document ↗

United States CISA Advisories AI, Technology & Data ✓ 16 claims 20 Oct 2026

CISA flags privilege-escalation flaws in WAGO industrial controller firmware

CISA's advisory ICSA-26-293-02 details two vulnerabilities affecting WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices running firmware below version 4.10.0. Operators in chemical, energy, water and other critical infrastructure sectors using these controllers should review the advisory to assess exposure and plan firmware updates.

CISA advisory ICSA-26-293-02, released October 20, 2026, covers two vulnerabilities tracked as CVE-2026-80466 and CVE-2026-88850.
The flaw in routing configuration (CVE-2026-80466) carries a CVSS v3 score of 8.8 and allows a low-privileged remote attacker to inject OS shell commands.
Affected firmware spans versions from 1.0.0 up to but excluding 4.10.0, installed on WAGO hardware including 0751-9x01, 0750-811x, 0762-420x and several other product lines.
WAGO recommends users update to firmware Version 4.10.0 (FW32) or higher and contact WAGO support for custom firmware builds.
Additional detail is available in WAGO's own security advisory VDE-2026-096, referenced in both HTML and CSAF formats.

Source document

0:15

Washington State DFI Source document ↗

United States Washington State DFI Conduct & Consumer ✓ 15 claims 20 Oct 2026

Washington DFI opens rulemaking to define dishonest franchise-broker conduct

Washington's Department of Financial Institutions has opened a rulemaking that could, for the first time, set out in rule which franchise-broker practices count as dishonest or unethical under state law. The filing is at its earliest stage, with no draft text attached. This segment covers what the Securities Division says it is considering and what franchise brokers operating in the state should watch for next.

Washington's DFI Securities Division has opened a rulemaking on Chapter 460-82 WAC, currently listed with status 'Open'.
The division is considering amendments that would define certain franchise-broker conduct as 'dishonest or unethical practices in the franchise industry' under RCW 19.100.252.
The published materials consist of a CR-101 document; no proposed rule text has been released at this stage.
The industry affected is franchise brokers operating in Washington State.

Source document

0:15

CISA Advisories Source document ↗

United States CISA Advisories AI, Technology & Data ✓ 26 claims 20 Oct 2026

CISA flags six flaws in HMS Networks PEAK-System PCAN Windows drivers

CISA has published an advisory covering six vulnerabilities in HMS Networks PEAK-System PCAN Windows CAN device drivers, used across transportation, healthcare, energy and critical manufacturing sectors worldwide. The flaws allow a local attacker to crash the Windows kernel. A patched version is available, and the item sets out what affected and what operators should do.

CISA's advisory ICSA-26-293-01, dated October 20, 2026, covers six CVEs affecting HMS Networks PEAK-System Device Driver Setup version 5.1.2.1151 and earlier and PCAN Windows CAN device drivers version 5.1.2 and earlier.
The highest-rated flaw, CVE-2026-103672, carries a CVSS v3.1 base score of 7.1 (high) for improper validation of an array index.
HMS Networks AB has addressed all six vulnerabilities in version 5.1.4 and recommends users upgrade via its software download page.
CISA states the vulnerabilities are not exploitable remotely and that no known public exploitation targeting them has been reported.
Affected critical infrastructure sectors deployed worldwide include transportation systems, healthcare and public health, energy, and critical manufacturing.

Source document

0:15

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Prudential & Capital ✓ 18 claims 20 Oct 2026

Dime Commercial to Buy ES Bancshares for $58 Million; TexasBank Parent Buys Haskell Bancshares

ABA Banking Journal reports two separate community bank acquisitions announced this week: Dime Commercial Bancshares' purchase of ES Bancshares in New York, and Texas Banc Financial's purchase of Haskell Bancshares in Texas. The item gives deal size, pricing and expected closing timelines for the New York transaction, with fewer details disclosed for the Texas deal.

Dime Commercial Bancshares will pay $58 million in cash and stock for ES Bancshares, parent of the $596 million-asset Empire State Bank.
The ES Bancshares deal prices the target at 109% of tangible book value and is expected to close in the first quarter.
Texas Banc Financial, the $2.5 billion-asset parent of TexasBank, has agreed to buy Haskell Bancshares, parent of the $72.6 million-asset Haskell National Bank.
The Texas Banc Financial deal is expected to close by early next year; the purchase price was not disclosed.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 22 claims 20 Oct 2026

Illinois lab COO charged over $66.2M COVID testing fraud on HRSA uninsured program

A federal grand jury in the Northern District of Illinois has indicted the co-owner of a Hillside clinical laboratory over a scheme to bill the HRSA Uninsured Program for COVID-19 PCR tests that were never run. The case turns on a staffing-vendor arrangement that supplied patient identities and specimens, many of them fictitious, and shows how pandemic-era federal reimbursement programs are now feeding criminal prosecutions.

Rajesh Patel, 52, of Schaumburg, Illinois, faces five counts of wire fraud, each carrying a maximum of 20 years in prison.
The laboratory submitted approximately $66.2 million in fraudulent claims to the HRSA Uninsured Program and was paid approximately $44.1 million.
Patel allegedly created fake negative results for at least 380,000 PCR tests between May 2021 and April 2022 that the laboratory never performed.
A March 2021 agreement saw the laboratory pay Meridian Medical Staffing Inc. tens of millions for specimens and patient information, many for patients who never existed.
DOJ says Patel personally obtained approximately $28 million in proceeds from the scheme.

Source document

0:15

Federal Register — CFTC Source document ↗

United States Federal Register — CFTC Markets & Infrastructure ✓ 19 claims 20 Oct 2026

CFTC carves casino-style gambling out of swap definition in immediate interim rule

The CFTC has moved to settle a jurisdictional fight over event contracts by amending the swap definition to exclude casino-style gambling. The rule took effect on publication without prior notice-and-comment, and the Commission has paired it with a separate proposal to define event contracts as swaps. This segment covers what the new paragraph (7) requires, the two-part test it imposes, and the litigation driving the urgency.

The interim final rule adds paragraph (7) to the swap definition in 17 CFR 1.3, excluding licensed casino-style gambling products including sports wagers and casino games.
The rule became effective on October 19, 2026 under the APA good-cause exception, with comments due by November 18, 2026.
Exclusion requires satisfying both a Provider Test (State- or Tribe-licensed operator, regulated as gaming under that law) and a Product Test (not traded multilaterally or subject to individual negotiation).
The Commission issued a separate Notice of Proposed Rulemaking the same day proposing to define event contracts as swaps.
The rule does not further define 'security-based swap' and does not presume that a product failing the exclusion is necessarily a swap.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Conduct & Consumer ✓ 17 claims 20 Oct 2026

Instacart to pay $5 million over hiring practices that favored visa holders

This item covers a joint DOJ Civil Rights Division and EEOC settlement with Instacart resolving citizenship-status and national-origin discrimination claims tied to the company's PERM visa sponsorship recruitment. It matters to employers running PERM processes, since the case turns on a narrow but common recruitment practice that regulators treated as discriminatory.

Instacart will establish a settlement fund of up to $4,000,000 for applicants and deterred applicants affected from December 2023 to February 2026.
Instacart will pay $1,000,000 in civil penalties to the United States, separate from the compensation fund.
Investigators found Instacart required physical mailing of applications for PERM-advertised positions, departing from its standard electronic application process.
Instacart must post PERM positions on its public career website, accept electronic applications, train staff and submit to monitoring and reporting requirements.
This is the fifteenth settlement under the Protecting U.S. Workers Initiative and EEOC's fourth public settlement under Project Firewall since 2025.

Source document

0:15

Federal Register — CFTC Source document ↗

United States Federal Register — CFTC Markets & Infrastructure ✓ 19 claims 20 Oct 2026

CFTC proposes defining sports and election event contracts as swaps

The CFTC has issued a notice of proposed rulemaking to write event contracts, including those on sports, politics, cultural events and weather, directly into the regulatory definition of swap. The move lands amid a three-way circuit split and active state criminal and civil actions against prediction-market exchanges. Comments close November 18, 2026. This segment covers what the Commission is asserting, the authority it invokes, and where the jurisdictional fight stands.

Comments on the proposal, referencing RIN 3038-AF82, must be received by November 18, 2026.
The rule would add paragraph (2)(i)(G) to the swap definition in 17 CFR 1.3, naming event contracts based on sports, politics, cultural and weather events.
Three appeals courts have split: the Third Circuit found sports event contracts are swaps, while the Ninth and Sixth Circuits concluded they are likely not.
As of September 1, 2026 at least seven CFTC-registered DCMs offered sports-related event contracts, with more than fifteen DCM applications pending since 2025.
August 2026 average monthly event-contract volume was about $1.5 billion, of which roughly $1.2 billion was sports-related.

Source document

Regulatory news and audio briefings from financial regulators worldwide — financial crime, AML, sanctions, fraud, digital assets and compliance

Regulatory heat map

Filtered