Regulus — The global regulatory broadcast network

0:15

United States DOJ Criminal Division Financial Crime ✓ 22 claims 27 Oct 2026

DOJ strikes first 'near miss' NPA under corporate enforcement policy over Russia sales

The National Security Division has resolved its first 'near miss' non-prosecution agreement under the 2026 Corporate Enforcement and Voluntary Self-Disclosure Policy. Extreme Networks avoided prosecution despite disclosing only under threat of a news report, because it cooperated fully and remediated. The case shows how the Policy treats disclosures that fall short of 'timely' but still earn credit, and what penalty level that produces.

Extreme Networks agreed to pay criminal penalties totaling $975,721.84, comprising $487,860.92 in forfeiture and a $487,860.92 criminal fine.
This is the Department's first 'near miss' non-prosecution agreement under the 2026 Corporate Enforcement and Voluntary Self-Disclosure Policy.
The disclosure was deemed untimely because it came under imminent threat of disclosure by a news publication, but cooperation and remediation still earned NPA treatment.
Between March 2018 and March 2022, the company's Russia subsidiary filled 11 purchase orders for MMZA, a producer of S-300 and S-400 systems owned by SDN-listed Almaz Antey.
Remediation included terminating the third-party distributor, improving screening, hiring compliance staff and adding M&A diligence procedures; a parallel OFAC action will also be resolved.

Source document

0:15

SEC Speeches and Statements Source document ↗

United States SEC Speeches and Statements Markets & Infrastructure ✓ 19 claims 27 Oct 2026

Atkins directs SEC staff to redraw gun-jumping rules in IPO overhaul

SEC Chairman Paul Atkins used remarks to the Small Business Capital Formation Advisory Committee to set out where his IPO Modernization initiative is heading next: a staff review of the Securities Act gun-jumping prohibitions, the first comprehensive look at the Commission's communication rules since 2005. He also flagged pending work on accredited-investor qualification and Regulation Crowdfunding reform.

Atkins has directed SEC staff to explore re-evaluating content and audience limits on offering communications and brighter lines on when a communication is an 'offer'.
Staff are also to consider cure provisions to reduce 'foot fault' gun-jumping violations by issuers.
The Commission has not completed a comprehensive review of its communication rules since 2005.
Last month the Commission issued notices of potential additional accredited-investor designations, including qualification by passing a FINRA-developed exam.
More than 9,800 Regulation Crowdfunding offerings have raised an average of $364,000 over the last decade, and Atkins has asked staff to evaluate amendments to the rules.

Source document

0:15

CISA Advisories Source document ↗

United States CISA Advisories Governance & Accountability ✓ 18 claims 27 Oct 2026

CISA warns of critical EPICS Base flaw enabling remote code execution

CISA has published an ICS advisory covering four vulnerabilities in EPICS Base, open-source control system software used across the critical manufacturing sector worldwide. One flaw carries a critical CVSS score with potential for remote code execution. This briefing sets out the affected versions, the fixes available, and CISA's recommended interim mitigations for operators who cannot patch immediately.

EPICS Base release 7.0.10 and earlier is affected by four vulnerabilities: CVE-2026-114595, CVE-2026-114596, CVE-2026-114597 and CVE-2026-114598.
CVE-2026-114595 carries a CVSS v3.1 base score of 9.8 (critical) and could permit remote code execution via an integer overflow in network request processing.
The EPICS Community has published remediations on GitHub and affected users should update to the 7.0.11 release.
CISA states no known public exploitation specifically targeting these vulnerabilities has been reported to date.
The vulnerabilities were reported to CISA by Shubham Raj of Cipher / Causal Security and affect the critical manufacturing sector worldwide.

Source document

0:15

CFTC — Commodity Futures Trading Commission Source document ↗

United States CFTC — Commodity Futures Trading Commission Markets & Infrastructure ✓ 13 claims 27 Oct 2026

CFTC sues Utah to block state enforcement against prediction markets

The CFTC has gone to court against Utah over the state's attempt to shut down CFTC-registered prediction markets. The dispute turns on federal preemption and the Commission's claim to exclusive jurisdiction over event contracts. This item matters to any venue listing event contracts and to firms tracking where the state-federal line on prediction markets is being drawn.

The CFTC filed a lawsuit against Utah to stop the state using its own laws to shut down CFTC-registered contract markets.
The suit follows Utah's civil enforcement actions in state court against CFTC-regulated markets and other businesses.
The Commission asserts exclusive federal jurisdiction over commodity derivatives and prediction markets under congressional preemption.
The CFTC says it has initiated legal proceedings against nine other states and filed briefs in four federal courts of appeal and one state supreme court.

Source document

0:15

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom AI, Technology & Data ✓ 18 claims 27 Oct 2026

ABA survey finds most U.S. consumers wary of letting AI agents move their money

The American Bankers Association released Morning Consult polling at its 2026 Annual Convention gauging consumer attitudes to agentic AI in banking and to pending digital asset legislation. The numbers arrive as banks weigh how to handle AI agents seeking account access, and as Congress revisits the stalled Clarity Act. For compliance and policy teams, it signals where the ABA will press lawmakers and supervisors next.

The survey reports 79% of adults say consumers should not be required to share online banking usernames and passwords with an AI tool, and 80% think a bank should be able to tell whether it is dealing with a customer or the customer's AI agent.
Seventy-seven percent are concerned about giving an AI tool permission to move money or make payments, and only 27% say they are likely to use an AI agent to autonomously manage cash balances in the next 12 months.
Nineteen percent say an AI agent has already asked them for login credentials or card numbers, and 74% say they care whether the business handling their finances is held to the same legal requirements as a bank.
On digital assets, consumers by a five-to-one margin (66% vs 14%) want Congress to be cautious, and 61% support prohibiting crypto firms from offering interest-like rewards on stablecoins if they could draw deposits from local banks.
Consumer digital asset adoption remains low in the survey: 17% currently own digital assets, 30% have ever owned them, and 59% say they are not relevant to daily financial life.

Source document

0:15

FINRA Source document ↗

United States FINRA Markets & Infrastructure ✓ 16 claims 27 Oct 2026

FINRA interpretation lets portfolio-margin firms margin hedging swaps with dealers on a PM basis

FINRA has added an interpretation to Rule 4240, its margin regime for security-based swaps carried by members that are not registered SBS dealers. Published October 27, 2026, it narrows one computation: how a portfolio-margin-approved firm sets initial margin on an Uncleared Basic SBS entered with a dealer counterparty to hedge its own commercial risk. The change is technical but affects capital and collateral for firms running SBS books under portfolio margin.

The interpretation, dated October 27, 2026, sits under Rule 4240(b)(2)(A)(ii), which governs the Initial Margin Requirement on an Uncleared Basic SBS by reference to Rule 4210 margin on the Equivalent Margin Account.
It applies only where the member is approved to offer portfolio margin and the counterparty is a registered security-based swap dealer under Exchange Act section 15F.
The swap must be entered to hedge or mitigate the member's commercial risk as defined in SEA Rule 3a67-4.
The portfolio-margin treatment is available only if expressly permitted under the member's written risk analysis methodology submitted to FINRA under Rule 4210(g).
Rule 4240 itself does not apply to members registered as security-based swap dealers, which instead comply with SEA Rule 18a-3.

Source document

0:15

US Federal Trade Commission — press releases Source document ↗

United States US Federal Trade Commission — press releases Governance & Accountability ✓ 15 claims 27 Oct 2026

PlayPower abandons bid for rival Burke after FTC merger lawsuit

The FTC's Bureau of Competition confirms PlayPower and owner Platinum Equity have dropped their proposed acquisition of BCI Burke, a week after the agency and a dozen states sued to block it. This brief statement sets out the FTC's view of market concentration and the deal's effect on school, church and municipal playground buyers.

PlayPower and Platinum Equity abandoned the proposed acquisition of BCI Burke after the FTC and a dozen states sued to block the merger.
The FTC says the top five manufacturers of commercial outdoor playground equipment, including PlayPower and Burke, control 85%-90% of the market.
The proposed merger would have cut the number of major competitors from five to four.
The deal would have given PlayPower's owners control over more than 30% of the relevant market.
The FTC describes this as the latest in a series of acquisitions by PlayPower.

Source document

3:44

NIST Source document ↗

United States NIST AI, Technology & Data ✓ 15 claims 27 Oct 2026

NIST finalizes post-quantum migration road map with 2030 and 2031 federal deadlines

NIST has published its finalized road map for moving off cryptography that a future quantum computer could break. The report identifies which existing standards are vulnerable, which 2024 post-quantum standards replace them, and the federal deadlines that bind agencies and the vendors and contractors working with them.

NISTIR 8547 is the finalized transition plan mapping NIST's quantum-vulnerable standards to the post-quantum replacements published in August 2024.
Executive Order 14412 requires federal high-value assets and high-impact systems to migrate by 2030 for key establishment and 2031 for digital signatures.
National Security Memorandum 10 set 2035 as the primary target for completing PQC migration across federal systems.
NIST advises prioritizing migration to the key establishment standard FIPS 203 for sensitive, long-lived data because of the harvest now, decrypt later threat.
The report covers the full cryptographic supply chain and accommodates a hybrid approach combining conventional and post-quantum encryption.

Source document

play

Federal Register — State Department Source document ↗

United States Federal Register — State Department Governance & Accountability ✓ 15 claims 27 Oct 2026

State Dept grants import protection for Madagascar textile exhibition

A brief but binding administrative notice: the State Department has determined that objects loaned for an exhibition on Malagasy Merina Kingdom textiles are culturally significant and that their display serves the national interest, triggering statutory protections for the loan period.

The determination covers objects imported for the exhibition at The Cleveland Museum of Art, Cleveland, Ohio.
The notice also contemplates possible additional exhibitions or venues yet to be determined.
The determination was made under the Act of October 19, 1965 (22 U.S.C. 2459) and Executive Order 12047 of March 27, 1978.
The notice cites Delegation of Authority No. 234 of October 1, 1999, No. 236-3 of August 28, 2000, and No. 523 of December 22, 2021.
The notice is signed by Sherry C. Keneson-Hall, Principal Deputy Assistant Secretary for Educational and Cultural Affairs.

Source document

play

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 17 claims 27 Oct 2026

SEC grants Cboe Clear U.S. temporary registration as securities clearing agency

The SEC has approved temporary clearing agency registration for Cboe Clear U.S., a Cboe subsidiary seeking to act as central counterparty for binary options including options tied to issuer KPIs. The order covers governance, risk management and one public comment on vertical integration risk.

CCUS filed its Form CA-1 application on June 30, 2026, and amended it on July 7, July 17, August 18, September 4 and October 1, 2026.
The Commission's order grants temporary registration for 18 months from October 22, 2026, with an exemption from certain Section 17A(b)(3)(B) and (F) determinations.
CCUS acknowledges its Rules do not yet reference all participant categories enumerated in Section 17A(b)(3)(B) of the Exchange Act.
CCUS may assess non-defaulting clearing members up to 300% of their Guaranty Fund Deposit for a single default, or up to 600% for multiple defaults.
The sole comment letter supported temporary registration as a stopgap but raised concerns about the risk of vertically integrated clearing solutions ahead of any permanent registration.

Source document

0:15

Washington State DFI Source document ↗

United States Washington State DFI Financial Crime ✓ 22 claims 27 Oct 2026

Washington DFI flags impersonation scam using Rockland Securities and Bank of Singapore names

Washington's Department of Financial Institutions has published an Investment Scam Tracker alert describing a cryptocurrency-linked fraud that impersonated a licensed broker-dealer and a private bank. The alert details the recruitment channel, payment rails and advance-fee tactic used, and sets out how residents can verify licensing and report losses. It is a public-education notice, not an enforcement action.

A firm calling itself Rockland Securities allegedly impersonated the legitimate Rockland Securities, LLC, with contact made via a Facebook work-from-home advert and WhatsApp.
The investor reported losing approximately $23,505 sent via Cash App and Western Union into a platform called Skysphere promising high returns.
An entity impersonating the Bank of Singapore demanded a $3,038 tax fee before withdrawal, a classic advance-fee tactic; the investor did not pay and could not recover funds.
DFI states the allegations and reported losses are unverified and that it cannot assist in recovering lost cryptocurrency funds.

Source document

0:15

CFTC — Commodity Futures Trading Commission Source document ↗

United States CFTC — Commodity Futures Trading Commission Markets & Infrastructure ✓ 10 claims 27 Oct 2026

CFTC staff extend Brexit-related no-action relief for UK derivatives entities

The CFTC's Market Participants Division and Division of Market Oversight have extended temporary no-action positions tied to Brexit, first put in place to preserve continuity in UK-US derivatives trading and clearing. This item covers what changed, which prior letters it builds on, and why the relief remains in force.

CFTC Staff Letter No. 26-28, issued October 1, 2026, extends Brexit-related no-action positions announced in Letter No. 24-11 as amended by Letter No. 26-10.
The relief traces to a February 25, 2019 joint statement by the CFTC, the Bank of England, the Prudential Regulation Authority and the Financial Conduct Authority (CFTC Press Release No. 7876-19).
The positions aim to maintain the regulatory certainty established when the CFTC originally issued EU comparability determinations and exemptive orders for certain EU entities.
MPD and DMO say the extension remains appropriate while the CFTC works with UK authorities to analyze UK law and, where appropriate, issue UK comparability determinations and exemptive orders for certain UK entities.

Source document

play

Federal Reserve Speeches Source document ↗

United States Federal Reserve Speeches AI, Technology & Data ✓ 20 claims 27 Oct 2026

Fed's Waller says FRED will route Board data users to its platform as AI traffic surges

Governor Christopher Waller addressed FRED Con 2026 on how artificial intelligence is reshaping use of the Federal Reserve Economic Data platform. The speech covers FRED's history, new AI-related traffic patterns and risks, and a new tool for connecting AI agents to FRED data. Relevant for compliance and data governance teams tracking how central bank data infrastructure adapts to AI-driven retrieval.

Governor Waller announced users seeking certain Federal Reserve Board data will soon be routed to FRED and its tools.
FRED traffic is presently growing 150 percent a year, with most growth from AI agents and bots.
About half of visits to FRED currently come from AI agents retrieving data rather than human users.
The Fed has introduced the FRED MCP Connector, using the Model Context Protocol, to let users link AI agents of their choice to FRED data.
FRED staff are working to link FRED with the FRASER archival library and the ALFRED historical data repository for AI inquiries.

Source document

0:15

Federal Register — SEC Source document ↗

United States Federal Register — SEC Conduct & Consumer ✓ 24 claims 27 Oct 2026

NYSE raises gift limit to $300, matching FINRA rule

NYSE has filed a rule change to align its gift and gratuity rule with FINRA's recently amended Rule 3220, raising the per-recipient annual limit from $100 to $300 and adding nine new supplementary provisions covering valuation, aggregation, personal and bereavement gifts, and recordkeeping. This affects every member and member organization, including those only registered with NYSE.

The gift and gratuity limit under NYSE Rule 3220 rises from $100 to $300 per individual per year, matching FINRA Rule 3220.
NYSE adopts Supplementary Material .01 through .09, codifying FINRA's provisions on valuation, aggregation, personal gifts, bereavement gifts, de minimis items and disaster donations.
Supplementary Material .02 requires gifts other than event tickets to be valued at cost, and tickets at the higher of cost or face value.
Supplementary Material .03 requires aggregation of all gifts to a recipient across a calendar year, fiscal year, or rolling basis as stated in firm procedures.
The filing took effect under Rule 19b-4(f)(6)(iii) on October 9, 2026, and the SEC may summarily suspend it within 60 days of filing.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 16 claims 27 Oct 2026

Florida CPA sentenced to 18 months for evading more than $2.2m in taxes

A Florida certified public accountant has been sentenced for tax evasion after concealing income and property from the IRS over several years. The case, prosecuted under the Justice Department's newly created Fraud Division, illustrates how federal prosecutors treat asset concealment by a credentialed finance professional and the restitution exposure that follows a guilty plea.

St. Clair was sentenced to 18 months in prison for evading payment of more than $2.2 million in income taxes for tax years 2011 through 2017.
After the IRS signalled in 2020 that it would levy his assets, he sold real property and transferred the proceeds into an account in a third party's name.
He concealed his control of funds by holding money in others' names and placing real estate in businesses not held in his name, layering entities.
He pleaded guilty to one count of tax evasion and was ordered to pay $2,343,615.01 in restitution.
IRS Criminal Investigation handled the case, prosecuted by the DOJ National Fraud Enforcement Division and the Middle District of Florida.

Source document

3:44

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 16 claims 27 Oct 2026

DOJ indicts construction firm owner and three staff over $13m tax fraud scheme

The Justice Department's National Fraud Enforcement Division unsealed an indictment against a New York construction subcontracting owner and three employees. The charges run from off-books cash payroll and falsified corporate returns to foreign account reporting failures and a scheme to obtain loans, mortgages and surety bonds with false financials. For compliance teams, it maps how payroll tax evasion feeds into wider financial fraud exposure.

The indictment alleges at least approximately $5 million in wages were paid from April 2017 to May 2024 with no federal employment tax withheld.
Nelson allegedly underreported his business gross receipts by approximately $13 million and failed to file required FBARs.
From July 2019 to March 2025 Nelson, Devocion and Vasquez allegedly used false financial documents to obtain loans, mortgages, lines of credit, credit cards and surety bonding contracts.
Charges carry maximum penalties of 20 years for wire fraud conspiracy and obstruction, and five years for conspiracy to defraud the United States, employment tax, evasion and FBAR counts.

Source document

0:15

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 22 claims 26 Oct 2026

SEC lets LTSE codify dual-listing requirement effective immediately

A short SEC filing notice covering a technical rule change at the Long-Term Stock Exchange. Useful for listings and market structure counsel tracking how niche exchanges formalise dual-listing models, and for anyone benchmarking SRO rule filings that proceed on an immediately effective, non-controversial basis.

LTSE filed the proposed rule change with the SEC on October 5, 2026, as File No. SR-LTSE-2026-23.
The new Supplementary Material .02 to Rule 14.210 requires all LTSE-listed companies to also be listed on another registered national securities exchange.
LTSE states the rule text is identical in substance to Nasdaq Texas, LLC's IM-5220-1.
The SEC waived the standard 30-day operative delay, making the rule change effective upon filing rather than after 30 days.
Public comments on the filing must be submitted by November 12, 2026, referencing file number SR-LTSE-2026-23.

Source document

0:15

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 16 claims 26 Oct 2026

MIAX files minor cross-reference fix to CAT reporting rule

MIAX has filed a proposed rule change with the SEC to clean up drafting errors in Exchange Rule 1703, its Consolidated Audit Trail Compliance Rule for Industry Member Data Reporting. The filing is effective immediately under the SEC's expedited process. This brief covers what changed, why the Exchange says it is non-substantive, and the comment deadline.

MIAX filed SR-MIAX-2026-42 with the SEC on October 9, 2026 to amend Exchange Rule 1703.
The filing corrects references in Rules 1703(a)(1) and 1703(a)(2) from 'paragraph (3)' to 'paragraph (a)(3)'.
A closing parenthesis is added after 'Industry Member Data' in Rule 1703(a)(2) for grammatical accuracy.
The rule change became effective under Section 19(b)(3)(A) and Rule 19b-4(f)(6), with the SEC able to suspend it within 60 days.
Public comments on file number SR-MIAX-2026-42 are due on or before November 12, 2026.

Source document

play

US Federal Trade Commission — press releases Source document ↗

United States US Federal Trade Commission — press releases Conduct & Consumer ✓ 16 claims 26 Oct 2026

FTC and 20 states sue Dollar General over register overcharging

The FTC, joined by 20 state attorneys general, has filed suit against Dollar General Corporation alleging a long-running pattern of charging customers more at the register than the prices displayed on shelves, tags and ads. This briefing covers the allegations, the legal basis and the court where the case will be decided.

Twenty states joined the FTC in filing the complaint, including California, Florida, Michigan, Ohio and Tennessee among others.
Dollar General operates more than 21,000 stores nationwide, according to the complaint.
The complaint alleges Dollar General received tens of thousands of consumer complaints about prices not matching advertised amounts.
The FTC and states allege the conduct violates the FTC Act, the Gramm-Leach-Bliley Act and state laws.
The Commission vote to authorize filing the complaint was 2-0, and the case was filed in the U.S. District Court for the Middle District of Tennessee.

Source document

play

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 12 claims 26 Oct 2026

DOJ charges 48 non-citizens in five states with illegal voting

The Justice Department has announced a consolidated set of charges against 48 non-citizens accused of voting in U.S. elections or lying about citizenship status to register or naturalize. The release groups cases from seven federal districts with varying charge severity, from single-count misdemeanors to multi-count felony indictments.

The Justice Department charged 48 aliens across nine federal judicial districts in Pennsylvania, California, Florida, New York and Nevada.
Thirteen defendants in the Central District of California face felony charges including false statements in naturalization applications.
Six defendants in the Eastern District of California face misdemeanor voting-by-alien charges carrying a statutory maximum of one year in federal prison.
Several defendants in the Eastern District of New York admitted in voluntary interviews with federal agents that they knew they were not U.S. citizens when they voted.
The release states that a complaint, indictment or information merely contains accusations and all defendants are presumed innocent until proven guilty.

Source document

play

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 20 claims 26 Oct 2026

MIAX Pearl files to fix typo in minor rule violation fine table

MIAX Pearl has filed an immediately effective rule change with the SEC to fix a typographical error in its minor rule violation fine schedule. The correction touches one cell in the sanctions table for violations of Rule 520(b). It changes nothing operationally, but it is on the public comment docket until November 12, 2026, and is the kind of filing compliance teams tracking the exchange's rulebook should log.

MIAX Pearl is correcting the fourth row of Rule 1014(d)(5) to read '16 to 20' instead of the current '16 or 20'.
The table sets sanctions for violations of Rule 520(b), ranging from a Letter of Caution for 1 to 5 violations to a $500 fine for 6 to 10 violations within one calendar year.
The filing, SR-PEARL-2026-42, became effective on filing under Section 19(b)(3)(A) and Rule 19b-4(f)(6), with no comments solicited or received.
The SEC may summarily suspend the change within 60 days of the October 9, 2026 filing, and comments are open until November 12, 2026.

Source document

3:06

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Conduct & Consumer ✓ 19 claims 26 Oct 2026

FCC narrows TCPA 'revoke all' rule, easing bank fraud and alert messaging

The FCC has set a Nov. 25, 2026 effective date for two changes to its Telephone Consumer Protection Act rules that bear directly on how banks contact customers by phone and text. The revisions narrow the 2024 'revoke all' interpretation and loosen a 2015 condition limiting fraud and security alerts to customer-provided numbers. This item covers what changes, the conditions attached and what compliance teams should adjust.

The revised 'revoke all' rule and 'provided number' condition take effect Nov. 25, 2026, based on publication in the Federal Register.
Callers may now interpret a revocation as applying only to the message category it targeted, but must give notice of how revocation will be construed and may designate an exclusive means of revocation.
The 'provided number' condition is loosened so exempted fraud and security alerts can go to numbers obtained from a 'reliable source,' including a spouse or authorized family member, the customer calling the bank, or records from another financial institution.
The FCC voted 3-0 last month to adopt the revisions, which the ABA, the National Consumer Law Center and ACA International jointly proposed in June.

Source document

0:15

CFTC — Commodity Futures Trading Commission Source document ↗

United States CFTC — Commodity Futures Trading Commission Markets & Infrastructure ✓ 15 claims 26 Oct 2026

CFTC signs integrity MOU with NBA on prediction markets

The CFTC has formalised an information-sharing arrangement with the NBA aimed at policing prediction markets tied to professional basketball. The announcement is brief but signals where the regulator is focusing attention as sports-linked prediction markets grow, and compliance teams at designated contract markets should note the pattern forming across leagues.

The CFTC and the NBA signed a Memorandum of Understanding announced on October 26, 2026.
The MOU covers regular communication and information sharing on integrity matters and on maintaining fair and transparent prediction markets.
The NBA is the third professional sports league to sign such an MOU with the CFTC, following the MLB and NHL.
CFTC Chairman Michael S. Selig cited insider trading and fraud as abuses the arrangement is meant to guard against.
The release does not disclose specific data-sharing protocols, timelines, or enforcement powers under the MOU.

Source document

play

FINRA Source document ↗

United States FINRA Markets & Infrastructure ✓ 15 claims 26 Oct 2026

FINRA extends options rulebook to binary options and non-OCC clearing

FINRA has pulled binary options, including the new 'binary metric options' tied to an issuer's reported financials and those cleared outside OCC, squarely inside its existing listed options rules. The changes touch options communications, trading, suitability, supervision and margin, and took effect immediately. This segment covers what the amendments define, which rules they reach and what members must now apply.

Amendments to Rules 2220, 2360 and 4210 apply FINRA's listed options framework to binary options, metric options and options cleared outside OCC, effective October 22, 2026.
Rule 2360 adds definitions of 'binary option' (Rule 2360(a)(2)) and 'underlying metric' (Rule 2360(a)(38)) and revises existing definitions to cover options overlying a metric.
Four updated Rule 4210 interpretations address binary option requirements, spreads, straddles or similar combinations, and margin under 4210(f)(2)(N)(ii).
The changes respond to exchange proposals filed with the SEC to list 'binary metric options' whose settlement amount is fixed at creation and payout depends on an issuer's reported metrics.
Conforming updates were also made to Rules 2351 and 2357 covering index warrants, currency index warrants and currency warrants.

Source document

0:15

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Financial Crime ✓ 23 claims 26 Oct 2026

ABA survey finds Americans trust banks most to fight fraud, back action on telecoms

The American Bankers Association released a Morning Consult survey at its 2026 Annual Convention showing consumers trust banks over government, fintechs and crypto firms to protect them from fraud. The headline numbers serve a policy argument: large majorities back legislation and regulatory action aimed at social media platforms and telecom carriers. Useful for anyone tracking where scam liability pressure is heading.

By a five-to-one margin over the next sector, 44% of U.S. adults chose banks as most trusted to protect against fraud, ahead of government at 8% and cryptocurrency companies at 1%.
79% support federal legislation requiring social media companies to identify and remove fake accounts and fraudulent ads, which the ABA links to the bipartisan SCAM Act in Congress.
82% support regulatory action requiring telecoms to authenticate caller identity and prevent spoofed caller IDs, and 76% back more FCC funding for enforcement against carriers that allow fraudulent calls.
83% of bank customers said their bank takes proactive steps against fraud, and of the 52% who received a fraud alert, 95% found it valuable.
85% of Americans with a bank account say they are satisfied with their primary bank and 73% call banks a source of strength for the U.S. economy.

Source document

play

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 19 claims 26 Oct 2026

Cboe BZX scraps $4,000 legacy fee for pre-2019 ETP listings from 2027

Cboe BZX has filed an immediately effective rule change removing the discounted annual listing fee it has preserved since 2019 for older exchange-traded products. The change reprices a cohort of legacy ETP issuers onto the exchange's standard fee grid from calendar year 2027, and the SEC is taking comment until mid-November while the rule is already in force.

BZX will delete the Legacy Listing category from Rule 14.13(b)(2)(E), ending the $4,000 annual fee for ETPs listed before January 1, 2019.
Former legacy products will be charged the lowest applicable fee they otherwise qualify for, including CADV-based fees of $5,000 to $7,000.
The $4,000 fee survives for Transfer Listings, which BZX frames as an incentive to attract listings from rival exchanges.
The change applies from annual listing fees assessed for calendar year 2027 and does not affect any 2026 assessment.
The rule is immediately effective, but comments on file number SR-CboeBZX-2026-085 are due by November 16, 2026.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 14 claims 26 Oct 2026

US violent crime victimization fell 25% in 2025, BJS preliminary survey finds

The Bureau of Justice Statistics released preliminary 2025 estimates from the National Crime Victimization Survey, reporting sharp declines across violent and property crime. The figures are the first drawn from the fully transitioned redesigned survey instrument. For compliance and risk teams, the numbers feed threat and fraud-loss baselines, but the methodological change sits underneath every comparison.

Serious violent victimization fell 25%, from 9.9 to 7.4 per 1,000 persons age 12 or older, between 2024 and 2025.
Aggravated assault declined 31%, from 4.5 to 3.1 per 1,000, and property victimization fell 19%, from 138.0 to 111.2 per 1,000 households.
Motor vehicle theft dropped 30%, burglary or trespassing 25% and other household theft 19% over the same period.
The estimates are the first from the fully transitioned redesigned survey instrument (NCVS-R), adopted in January 2025.
A separate BJS report issued the previous week recorded homicide down 17% in 2025 over 2024.

Source document

play

CFTC — Commodity Futures Trading Commission Source document ↗

United States CFTC — Commodity Futures Trading Commission Markets & Infrastructure ✓ 10 claims 26 Oct 2026

CFTC lets DCMs convert perpetual-style index futures into true perpetuals

The CFTC's Division of Market Oversight has issued no-action relief allowing designated contract markets to convert perpetual-style broad-based security index futures into true perpetual contracts. The letter sets out customer protection and procedural conditions exchanges must meet, and carries a short expiry date that market infrastructure teams should note.

The CFTC's Division of Market Oversight issued no-action relief for DCMs converting perpetual-style broad-based security index futures into true perpetual futures.
Conditions include soliciting feedback from market participants with open positions and providing advance notice with an opportunity to exit positions.
DCMs must offer appropriate risk disclosures and ensure no other material contract terms are modified.
DCMs must file the amendments under CFTC Regulations 40.5 or 40.6 and certify compliance with all conditions in the letter.
The no-action positions expire on October 20, 2026.

Source document

0:15

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Governance & Accountability ✓ 12 claims 26 Oct 2026

ABA podcast: how bankers can proactively manage core technology providers

The ABA Banking Journal Podcast features Steve Lewis, president and CEO of Thomaston Savings Bank and a member of ABA's Core Platforms Committee, on managing relationships with core technology providers. For compliance and operations leaders responsible for vendor oversight, it is a short, practical account of where a bank retains leverage even against a provider with significant market power.

Steve Lewis recommends that bankers review and reconcile bills from their core providers.
He advises monitoring for service-level agreements with the core provider.
He recommends meeting regularly at executive level with the core provider to understand its strategic roadmap and how it corresponds to the bank's own roadmap.
Lewis says technology is not the strategy and that banks should define what they want to deliver to clients before integrating the technology to do it.

Source document

play

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Digital Assets ✓ 16 claims 26 Oct 2026

ABA economists warn yield-only view of deposits understates their bundled value

The American Bankers Association's Office of the Chief Economist makes the funding-stability case against competing for deposits on yield alone. The essay matters because it frames how the ABA will argue to policymakers as stablecoins, crypto platforms and AI agents lower switching costs and reduce deposits to a single comparable number: the interest rate.

The essay argues a bank deposit is a bundled service contract combining interest with payments access, deposit insurance, fraud monitoring, dispute resolution and guaranteed par convertibility, not a pure yield product.
It states stablecoin products do not provide the same combination of federal deposit insurance, supervision, customer protection and credit intermediation as an insured deposit, and that higher crypto yields may reflect higher risk.
The authors warn that raising deposit rates to compete solely on yield could raise the cost of credit, reduce credit supply and, per empirical research cited, materially raise default probabilities during stress.
It cautions that AI agents optimized for yield may treat deposits, stablecoins and other cash-like instruments as interchangeable despite differing protections and functions.
The essay says deposits migrating to stablecoins would be invested primarily in short-dated Treasury bills, removing funds from direct support of bank lending.

Source document

play

Federal Register — CFTC Source document ↗

United States Federal Register — CFTC Markets & Infrastructure ✓ 20 claims 26 Oct 2026

CFTC keeps swap data reporting burden estimate despite data accuracy challenge

A routine Paperwork Reduction Act notice turns substantive: two commenters challenged whether swap data reported under CFTC part 45 is even truthful, and whether the Commission's burden estimates hold up. The CFTC rejected both without changing its numbers. This is a quick read for anyone whose firm reports under 3038-0096.

Comments on the renewed collection must be submitted to OIRA by November 5, 2026.
The Commission estimates 1,732 respondents with an average of 839 burden hours each, totalling 1,452,730 annual burden hours as stated in the notice.
Two commenters during the prior 60-day review period challenged the accuracy of reported swap data and the Commission's cost estimates, but the CFTC found neither provided supporting evidence.
The collection applies to swap dealers, major swap participants, SEFs, DCMs, DCOs and non-SD/MSP/DCO counterparties under part 45, adopted in 2012 and amended by final rule in 2020.
The Commission states there are no capital costs or operating and maintenance costs associated with this collection.

Source document

play

Federal Register — SEC Source document ↗

United States Federal Register — SEC Governance & Accountability ✓ 15 claims 26 Oct 2026

NYSE moves to scrap 'approved person' category, align with FINRA definition

NYSE filed a rule change with the SEC on September 18, 2026 eliminating its longstanding approved person registration category and replacing it with an associated person definition modelled on FINRA Rule 1011(b). The filing matters to member organizations and control persons whose Form BD-based disclosures will now substitute for a separate Exchange-specific registration track.

NYSE filed SR-NYSE-2026-47 with the SEC on September 18, 2026, published for comment on October 1, 2026 as release 34-106566.
The filing deletes the 'approved person' category from Rule 2(c) and Rule 304 and replaces it with a new 'associated person' definition based on FINRA Rule 1011(b).
NYSE states control relationships formerly tracked via approved person registration are already disclosed through Schedules A and B of Form BD in the CRD system.
A new Supplementary Material .30 would define 'Control Persons' as both direct and indirect owners identified on Schedules A and B of Form BD.
Conforming changes replace 'approved person' and related employee references with 'associated person' in Rule 2A and in Rules 5.2, 8.204(f)(2), 8.300(e)(2), 8.400(e)(2) and 8.700.

Source document

play

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 17 claims 26 Oct 2026

SEC opens disapproval review of NYSE American FLEX equity option plan

NYSE American filed to extend cash settlement, currently available for ETF FLEX equity options, to as many as 50 non-ETF FLEX equity options, and to change how qualifying securities are selected. The SEC has instituted proceedings under Section 19(b)(2)(B) to decide whether to approve or disapprove the change, and is asking for further comment before acting.

NYSE American filed the proposal on June 29, 2026, and it was published for comment on July 7, 2026.
The change would permit cash settlement for up to 50 non-ETF FLEX Equity Options under Rule 903G.
Selection of qualifying securities would shift to highest average daily notional value instead of highest average daily share volume.
The SEC must decide whether the proposal is consistent with Section 6(b)(5) of the Exchange Act.
Written comments are due by October 27, 2026, and rebuttal comments by November 10, 2026.

Source document

play

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 12 claims 26 Oct 2026

DOJ indicts CJNG regional commander on cocaine, meth trafficking and firearm charges

A grand jury in the District of Columbia has indicted a man described as a regional commander of the Cartel de Jalisco Nueva Generacion, a group the State Department designated a foreign terrorist organization in February 2025. The case, brought under the Homeland Security Task Force initiative, illustrates how US prosecutors are now charging cartel leadership structures rather than only couriers or distributors.

A federal grand jury in the District of Columbia indicted Ivan Cazarin Molina, 42, on Oct. 22, 2026.
DOJ alleges he was a regional commander for CJNG in Veracruz, Mexico, known as "Tanque."
The charged conspiracy covers cocaine and methamphetamine distribution for importation into the US from 2005 through 2025.
If convicted, he faces a minimum of 40 years and a maximum of two consecutive life prison terms.
He was arrested by Mexican law enforcement on Oct. 5, 2026, in Jalisco, Mexico.

Source document

play

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Governance & Accountability ✓ 15 claims 26 Oct 2026

DOJ opens Second Amendment probe into firearm permitting in two Connecticut cities

The Justice Department has opened a civil rights investigation into firearm permitting practices in Middletown and Waterbury, Connecticut, citing possible unreasonable delays in processing concealed carry permits. The inquiry invokes the Supreme Court's Bruen decision and signals continued federal scrutiny of local permitting systems under the Second Amendment.

The Justice Department opened an investigation on October 22, 2026 into the Middletown and Waterbury, Connecticut police departments' firearm permitting systems.
The investigation will examine whether the departments unnecessarily delay issuance of concealed carry permits to residents.
The announcement cites the Supreme Court's 2022 ruling in New York State Rifle and Pistol Association v. Bruen regarding lengthy wait times in license processing.
The Civil Rights Division's Second Amendment Section is handling the inquiry and accepts complaints via an online portal at justice.gov/crt/second-amendment-section.
Assistant Attorney General Harmeet K. Dhillon of the Civil Rights Division issued a statement on the investigation's announcement.

Source document

play

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Digital Assets ✓ 19 claims 26 Oct 2026

ABA to livestream parts of 2026 annual convention from Salt Lake City

The American Bankers Association is livestreaming selected general sessions from its 2026 Annual Convention, running Oct. 26-27 in Salt Lake City. Compliance and policy teams tracking the association's stance on tokenized deposits, bank hiring data, the 2027 economic outlook and fraud prevention may want the schedule rather than the recap.

ABA will livestream portions of its 2026 Annual Convention general sessions on Monday, Oct. 26 and Tuesday, Oct. 27, in Salt Lake City via its X handle @ABABankers.
Monday's 10:25-11:05 a.m. block covers ABA's approach to tokenized money, the BankChain Alliance's tokenized deposits work, and The Clearing House CEO David Watson on lessons from real-time payments.
Tuesday's annual business meeting at 10-10:15 a.m. will elect the 2026-2027 officers and board, followed by incoming chair Cathy Owen's address.
U.S. Bank chief economist Beth Ann Bovino will discuss the 2027 economic outlook, including inflation, interest rates, labor markets and the AI investment boom, from 10:30-11 a.m. Tuesday.
The closing Tuesday session, 11-11:30 a.m., pairs ABA's Paul Benda with Google's Keerat Sharma on combating online scams, fraudulent advertising and bank impersonation.

Source document

play

American Bankers Association — newsroom Source document ↗

United States American Bankers Association — newsroom Markets & Infrastructure ✓ 13 claims 26 Oct 2026

ABA DataBank reports home purchase cancellations near record highs

The ABA's DataBank item records that home purchase cancellations are running near record highs. The note appears on the ABA Banking Journal newsroom alongside a cluster of federal housing actions and rate data, giving mortgage lenders and economists a snapshot of deteriorating conditions in the single-family purchase market.

The ABA DataBank note, dated October 23, 2026, reports that home purchase cancellations are near record highs.
The item is tagged to affordable housing and carries no cancellation figures in its published text.
Separately on the same newsroom, the 15-year fixed-rate mortgage declined to 6.68% from 6.71% the prior week, after seven weeks of gains.
A Treasury proposed rule would bar investors controlling at least 350 homes from single-family housing, with penalties from $1 million to three times the purchase price.

Source document

0:15

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 25 claims 26 Oct 2026

IEX tightens options risk control settings before Oct 2 launch of IEX Options

Days before IEX begins trading options, the exchange filed changes to three calibration variables in the risk control that lets market makers cancel or reprice quotes ahead of adverse moves in the underlying. The filing took effect immediately. We cover what moved, why IEX says the settings are more conservative, and the narrow window the SEC has to intervene.

The Delta Bound Band changes from an initial value of 0-1 to a proposed 0.30-1.00, the Quote Instability Threshold from 0.1% to 0.5%, and implied volatility calculation frequency from each half hour to each one minute.
The changes amend Supplementary Materials .04 and .05 to IEX Rule 23.150(h) and sit within ranges the Commission previously approved.
The filing became effective immediately under Rule 19b-4(f)(1) as an interpretation of an existing rule, requiring no prior SEC approval.
IEX Options is scheduled to begin trading on October 2, 2026, and IEX will issue a Trading Alert on effectiveness.
Written comments were neither solicited nor received; the SEC may summarily suspend the change within 60 days of filing, and comments are due by October 27, 2026.

Source document

play

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 17 claims 26 Oct 2026

SEC overrules own staff, approves OCC clearing fund shift Fidelity opposed

The SEC has issued a de novo order on OCC's proposal to reweight how Clearing Members fund the mutualized Clearing Fund, shifting the formula toward stress-loss shortfall rather than open interest. Fidelity petitioned against the staff-level approval, arguing it disadvantages agency brokers. This covers the Commission's reasoning for overriding that objection and approving the change.

OCC filed the proposed rule change SR-OCC-2025-018 with the SEC on September 26, 2025.
The new weighting scheme is 70% shortfall, 15% margin and 15% volume, replacing 70% total risk, 15% open interest and 15% volume.
OCC's lookback period for allocation-related measures moves from one month to three months of data.
New Rule 1003(c) gives OCC sole discretion to hold Clearing Fund allocation weights constant month-over-month during volatile conditions.
For the top 15 Clearing Fund allocations in June 2026, nine members would have seen increases of +8.69% to +104.78% and six would have seen decreases of -4.79% to -39.97% under the proposal.

Source document

play

Federal Register — SEC Source document ↗

United States Federal Register — SEC Markets & Infrastructure ✓ 12 claims 26 Oct 2026

SEC acknowledges ICE Futures U.S. notice of national exchange registration

A short Federal Register notice confirms the SEC's receipt of a Form 1-N from ICE Futures U.S., the mechanism by which a CFTC-designated contract market registers as a national securities exchange solely for security futures trading. It matters chiefly as a procedural marker for firms tracking venue status and registration effective dates under Exchange Act Section 6(g).

ICE Futures U.S., Inc. filed a Form 1-N with the SEC on September 30, 2026.
The Commission acknowledged receipt of the Form 1-N under Exchange Act Section 6(g)(3) in Release No. 34-106567, File No. 10-256, dated October 1, 2026.
Under Section 6(g)(2)(B) of the Exchange Act, registration as a national securities exchange becomes effective contemporaneously with the written notice's submission.
The Division of Trading and Markets examines the Form 1-N under Rule 202.3(b)(3) to determine whether all necessary information and required documents have been properly furnished.
Copies of the Form 1-N and all exhibits are available on the SEC's website.

Source document

play

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Governance & Accountability ✓ 13 claims 26 Oct 2026

DOJ settles RLUIPA zoning claim against Atlantic Beach, New York

A village zoning code required religious and educational assemblies, but not secular ones, to obtain discretionary permits. This briefing covers the DOJ settlement that followed and the specific obligations it imposes on the Village of Atlantic Beach, relevant to any institution handling land-use disputes involving religious applicants.

The settlement resolves claims that Atlantic Beach's zoning ordinance violated RLUIPA's equal terms provision by requiring religious and educational assemblies, but not secular ones, to obtain a special exception permit from the Board of Appeals.
The Village agreed to revise its zoning ordinance to permit religious uses as of right in the Residential (A) district, removing the special exception requirement.
The settlement requires the Village to train its officials and employees on RLUIPA's requirements.
The Village must establish a procedure for receiving and resolving RLUIPA complaints.
The settlement follows resolution of a private lawsuit brought by Chabad of the Beaches, an Orthodox Jewish organization, over denial of its application to use a vacant commercial property for a religious facility.

Source document

play

Washington State DFI Source document ↗

United States Washington State DFI Conduct & Consumer ✓ 14 claims 26 Oct 2026

Washington regulator warns consumers on hidden costs of BNPL and card rewards

Washington's Department of Financial Institutions published consumer guidance examining three common payment structures, credit card rewards, promotional 0% financing and buy now, pay later installments, and the costs each can obscure. Compliance teams marketing these products should note the regulator's framing of what adequate disclosure looks like from a consumer-protection standpoint.

DFI states that a 3% credit card surcharge would more than offset 2% cash back earned on the same purchase.
The post notes that unpaid promotional financing balances begin accruing interest at the regular APR once the promotional period ends.
DFI describes BNPL plans that automatically withdraw payments from a debit card or bank account, risking overdraft fees if funds are unavailable.
The guidance advises consumers to ask four questions before accepting any offer: what they get, what fees or interest apply, when payments are due, and what happens if they cannot pay on schedule.
DFI notes that adding an authorized user, opening a joint account or asking someone to cosign can create financial consequences for both parties involved.

Source document

play

Federal Register — SEC Source document ↗

United States Federal Register — SEC Governance & Accountability ✓ 17 claims 26 Oct 2026

SEC notices co-investment exemption for Neostellar and Magnetar fund vehicles

A routine but consequential exemptive application: Neostellar Capital Corp, Magnetar Financial LLC and affiliated vehicles are asking the SEC to permit joint co-investment transactions normally barred under the Investment Company Act's affiliated-transaction rules. The notice sets a hearing-request deadline, giving interested parties a narrow window to object before the order issues.

Applicants seek an order under sections 17(d) and 57(i) of the Investment Company Act of 1940 and rule 17d-1 to permit co-investment among BDCs, closed-end and open-end funds and affiliated entities.
The application was originally filed on August 3, 2026 and amended on October 2, 2026.
Hearing requests must be received by the Commission by 5:30 p.m. Eastern time on November 16, 2026, accompanied by proof of service on applicants.
Absent a Commission-ordered hearing, an order granting the requested relief will be issued.
Applicants include Neostellar Capital Corp, Neostellar Advisors LLC, Magnetar Financial LLC, Magnetar Financial (UK) LLP, MCP Investing LLC and vehicles identified in Schedule A and Schedule B.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 13 claims 26 Oct 2026

Former Eminem studio employee pleads guilty to criminal copyright infringement

A Justice Department release details the guilty plea of a former employee of musician Marshall Mathers who copied and sold unreleased studio recordings. The case illustrates how insider access to proprietary digital assets, not just financial data, falls within federal computer crime and intellectual property enforcement.

Joseph Strange, 48, of Holly, Michigan, pleaded guilty to criminal infringement of copyright in the Eastern District of Michigan.
Court documents say Strange sold and transmitted 10 or more unauthorized music files between July and August 2024 for approximately $50,000.
Streaming provider data showed the infringing files had been accessed more than eight million times as of November 2025.
The government estimates the infringement amount of the stolen files at at least $750,000.
Strange is scheduled to be sentenced on Jan. 27, 2027, and faces a maximum penalty of five years in prison.

Source document

play

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Governance & Accountability ✓ 13 claims 26 Oct 2026

Utah man indicted over alleged synagogue bomb plot, CSAM found

This briefing covers a federal indictment out of Utah charging a 22-year-old man with attempting a hate crime and explosives offenses after online threats against a synagogue led investigators to recover pipe bombs, rifles and alleged child sexual abuse material. Compliance and government affairs teams tracking DOJ Civil Rights Division enforcement priorities will want the charge detail and procedural timeline.

A federal grand jury in Salt Lake City indicted Skyler AJ Rose, 22, of Ogden, Utah, on Oct. 21 on multiple federal charges.
Charges include possession of an unregistered destructive device, threat to kill and injure persons and destroy a building with an explosive, and attempting to commit a hate crime.
Law enforcement recovered six improvised explosive pipe bombs, one inert device, explosive precursors, two rifles and ammunition during a search of Rose's residence.
A subsequent search of Rose's cellphone allegedly revealed he searched for a nearby synagogue in November 2025 and that the phone contained cached images depicting child sexual abuse material.
Rose's initial appearance was scheduled for Oct. 23 at the Orrin G. Hatch U.S. Courthouse in Salt Lake City.

Source document

0:15

CISA Advisories Source document ↗

United States CISA Advisories AI, Technology & Data ✓ 22 claims 26 Oct 2026

CISA flags hard-coded credentials in end-of-life Johnson Controls EasyIO FG

CISA republished a Johnson Controls advisory covering two vulnerabilities in the EasyIO FG building-automation controller that could hand an attacker full control of the device. Because the product line is end-of-life, no patch is coming. For anyone running these controllers in operational-technology estates, the only remedy is network isolation now and replacement later.

Two vulnerabilities, CVE-2026-27872 and CVE-2026-27873, affect EasyIO FG firmware version 2.0b52 and earlier, each scored CVSS v3.1 7.7 and CVSS v4 7.2.
Johnson Controls will issue no firmware patch because the EasyIO FG Series is end-of-life and end-of-support and the source code is no longer available.
Users are advised to migrate to a supported current-generation product such as the EasyIO Neo R1 Series.
CISA lists extensive interim mitigations including network isolation, VLAN segmentation, no internet exposure and disabling insecure services such as Telnet.
CISA reports no known public exploitation targeting these vulnerabilities, which have high attack complexity and are not exploitable remotely.

Source document

play

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 16 claims 26 Oct 2026

Virginia senator indicted over alleged marijuana enterprise and bribery scheme

The Justice Department has indicted a sitting Virginia state senator and six co-defendants, alleging she led a family-run marijuana distribution and money laundering operation while using her legislative position to shield it from scrutiny. This item sets out what the indictment alleges, who is charged, and the scale and duration of the conduct described.

An eight-count indictment charges seven defendants, including Senator Lillie Louise Lucas, 82, of Portsmouth, Virginia.
FBI Director Kash Patel described the alleged scheme as spanning five years and worth an estimated $4.5 million.
The indictment alleges acquisition and distribution of 100 kilograms or more of marijuana and supervision of laundering proceeds.
Lucas allegedly paid $750,000 in August 2022 for a 100% stake in a shell holding company tied to a co-conspirator's expected recreational marijuana license.
On May 6, FBI agents executed search warrants at The Cannabis Outlet and The CBD Shoppe, recovering marijuana and firearms at both locations.

Source document

play

CISA Advisories Source document ↗

United States CISA Advisories AI, Technology & Data ✓ 23 claims 26 Oct 2026

CISA warns of critical buffer overflow in Savannah lwIP SMTP client

CISA has published an advisory for a critical vulnerability in the Savannah lwIP SMTP client used in industrial control systems across the energy and water sectors. The item covers the flaw's severity, affected version, and the patch now available for remediation.

CVE-2026-15340 affects Savannah lwIP SMTP client version 2.2.1 and carries a CVSS v3.1 base score of 9.8, rated critical.
The flaw is a classic buffer overflow (CWE-120) caused by the SMTP client not checking the size of inputs.
The product is deployed worldwide across the energy and water and wastewater systems sectors, per CISA's background notes.
A fix is available as patch_125_smtp_txbuf.diff and as git commit 614420f82c8729d070e01464c0dddb3c9525c772.
Reporter xchglabs disclosed the vulnerability directly to Savannah and published only after the patch was released.

Source document

0:15

DOJ Criminal Division Source document ↗

United States DOJ Criminal Division Financial Crime ✓ 16 claims 26 Oct 2026

Former US official pleads guilty to $194 million fraud using fake spy program

A federal employee with top-level security clearance has admitted to one of the larger insider fraud cases against the US government in recent memory, using a fictitious classified program to extract funds later converted into gold and luxury assets. This briefing covers the plea, the forfeiture terms and what remains unresolved as sentencing approaches.

Rush fraudulently obtained approximately $193,590,400 in US government funds by creating fictitious government authorities, including a fabricated Special Access Program.
An FBI search of Rush's residence on May 19, 2026 recovered 298 gold bars, approximately $2,106,550 in cash and €104,795.
The gold bars had cost the government approximately $46 million to acquire, and Rush directed approximately $145 million in wire transfers toward luxury purchases.
Under the plea agreement, Rush will forfeit the gold bars, cash, fraudulently obtained properties, 30 watches and two 2026 BMW Alpina vehicles, one valued at approximately $172,000.
Rush is scheduled for sentencing on January 28, 2027 and faces a maximum of 20 years in prison, three years of supervised release, forfeiture, restitution and a fine.

Source document

play

Federal Register — NCUA Source document ↗

United States Federal Register — NCUA Prudential & Capital ✓ 30 claims 26 Oct 2026

NCUA proposes removing outdated share insurance rule for state charter conversions

NCUA has proposed deleting a regulatory provision it describes as outdated and duplicative, covering how a federal credit union keeps federal share insurance after converting to a state charter. The agency says the actual process is now governed by its Chartering and Field of Membership Manual, not the regulation it wants to remove. Comments close December 21, 2026.

NCUA proposes to remove and reserve 12 CFR 741.7, which requires regional director approval for continued federal share insurance after an FCU converts to a state charter.
The agency says it inadvertently failed to make conforming changes to section 741.7 when it transferred approval authority to the Office of Consumer Financial Protection and Access in 2016 and then to the Office of Credit Union Resources and Expansion in 2017.
Converting credit unions must now submit requests to CURE rather than the regional director, per chapter 4 of NCUA's Chartering and Field of Membership Manual.
Comments on the proposal, docketed as NCUA-2026-1887, must be received by December 21, 2026.
OIRA has determined the proposal is not a significant regulatory action under Executive Order 12866, and NCUA certifies it would not significantly affect small credit unions.

Source document

Regulatory news and audio briefings from financial regulators worldwide — financial crime, AML, sanctions, fraud, digital assets and compliance

Regulatory heat map

Filtered