Live 262 sources monitored São Paulo Washington London Frankfurt Dubai Hong Kong Sydney 7 regions
✦ RegulusGlobal regulatory broadcast network

Regulatory news and audio briefings from financial regulators worldwide — financial crime, AML, sanctions, fraud, digital assets and compliance

Regulatory heat map

Where it's moving right now · select a region to filter
Category
Country
Regulator
DOJ Criminal Division 99 Federal Register — SEC 56 American Bankers Association — newsroom 47 CISA Advisories 37 BIS Press Releases 36 FCA 29 European Central Bank 26 HM Revenue & Customs 20 SEC Press Releases 16 Bank of England 15 Washington State DFI 14 Regulus Weekend Edition 14 US Federal Trade Commission — press releases 14 Financial Stability Board 14 FCA Publications 12 SFC Hong Kong 11 OCC Bulletins 11 FINRA 10 Federal Register — Treasury 10 CFTC — Commodity Futures Trading Commission 10 Federal Register — State Department 9 Securities and Exchange Commission 8 ISDA 8 Federal Reserve 8 ECB Banking Supervision 8 CSSF Luxembourg 8 SEC Speeches and Statements 7 HKMA — Hong Kong Monetary Authority 7 European Commission Digital Strategy 7 Deutsche Bundesbank — speeches 7 ADGM Abu Dhabi — announcements 7 Federal Register — NCUA 6 Federal Register — CFTC 6 ESMA 6 Bank of England Publications 6 Bank Negara Malaysia 6 Single Resolution Board 5 International Criminal Court 5 UK Competition and Markets Authority 5 NIST 4 IC3 — FBI Internet Crime Complaint Center 4 FMA Austria 4 Federal Register — Federal Reserve 4 Deutsche Bundesbank 4 Brdr.Hkma 4 Bank Policy Institute 4 Amlcft.Bnm 4 AFM Netherlands 4 FCDO — sanctions announcements 3 HM Treasury 3 Financial Services and the Treasury Bureau 3 Federal Reserve Speeches 3 UK DSIT 3 CFTC Enforcement 3 ASEANAPOL 3 AMF France 3 Alliance for Financial Inclusion 3 US Treasury — press releases 2 UN — press releases 2 Department for Business and Trade — export control 2 NIST — cybersecurity and identity updates 2 National Crime Agency UK 2 Hong Kong Exchanges and Clearing Limited 2 HM Treasury Consultations 2 Federal Register — FDIC 2 Federal Register — CFPB 2 Press Releases | FDIC.gov 2 European Data Protection Board 2 CFPB 2 Bank of Ghana 2 ACPR 2 UN News — global perspective 1 UK Finance — news 1 Texas State Securities Board 1 Singapore Police Force 1 Sveriges Riksbank 1 Osaka Exchange 1 OFSI 1 NCSC UK 1 MAS — Monetary Authority of Singapore 1 Euronext 1 International Association for Trusted Blockchain Applications 1 European Commission — Migration and Home Affairs 1 Govinfo 1 GFMA — Global Financial Markets Association 1 Finanstilsynet Norway 1 Federal Register — OCC 1 Federal Register — FinCEN 1 Federal Register — Industry and Security Bureau 1 Eurex 1 European Payments Council 1 EDB Singapore — Economic Development Board 1 CSSF / Banque centrale du Luxembourg 1 Cyber Security Agency of Singapore 1 Croatian Financial Services Supervisory Agency (HANFA) 1 Companies House 1 Commerce Commission New Zealand 1 Bank for International Settlements 1 Banco de España 1 Bank of Russia 1 Banco de la República 1 Banco Central de Bolivia (BCB) 1
Showing
region: NORTH_AMERICA × since: all × Clear all

Filtered

Cards Wire 301–350 of 403
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom Digital Assets ✓ 14 claims 20 Oct 2026

ABA presses Treasury to tighten Genius Act stablecoin licensing rule before it is finalised

The American Bankers Association filed comments on Treasury's August proposal implementing the Genius Act, which would require digital asset providers to hold a federal or state license before issuing payment stablecoins. The ABA wants key terms defined, foreign issuers held to equivalent standards, and clear lines so that banks serving issuers are not exposed to another party's criminal liability. For anyone tracking US stablecoin regulation, this previews the fault lines before finalisation.

  • The ABA filed comments on Treasury's August proposed rule implementing the Genius Act's stablecoin licensing requirement.
  • It wants key terms defined so issuers and intermediaries cannot evade the Act's protections and prohibitions.
  • It asks that foreign issuers be held to substantively equivalent standards and that agencies coordinate on Genius Act regulation.
  • It seeks clear lines so banks providing ordinary services are not exposed to criminal liability for another party's violation.
  • It wants holders protected when an issuer's status changes, with notice and a clear path to redemption or divestment.
Source document
CFTC CFTC — Commodity Futures Trading Commission Source document ↗
United States CFTC — Commodity Futures Trading Commission AI, Technology & Data ✓ 10 claims 20 Oct 2026

CFTC Innovation Task Force sets agenda for first forum on 'super intelligence' in markets

The CFTC's Innovation Task Force has released the agenda for its first Frontier Forum on super intelligence, convening technology and finance figures to discuss deployment, market impact and regulatory posture. This is a scene-setting event rather than a rulemaking, but it signals where the Commission wants the AI conversation to go and who it is listening to.

  • The CFTC's Innovation Task Force released the agenda for its inaugural Frontier Forum on Super Intelligence on October 20, 2026.
  • Panels will address how SI is being implemented on the frontier and its impact on U.S. markets.
  • Discussion will cover the Commission's role in fostering responsible SI adoption while protecting market participants from novel and emergent risks.
  • The meeting will be streamed live on CFTC.gov, with Michael J. Passalacqua leading the Innovation Task Force.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 16 claims 20 Oct 2026

CISA flags privilege-escalation flaws in WAGO industrial controller firmware

CISA's advisory ICSA-26-293-02 details two vulnerabilities affecting WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices running firmware below version 4.10.0. Operators in chemical, energy, water and other critical infrastructure sectors using these controllers should review the advisory to assess exposure and plan firmware updates.

  • CISA advisory ICSA-26-293-02, released October 20, 2026, covers two vulnerabilities tracked as CVE-2026-80466 and CVE-2026-88850.
  • The flaw in routing configuration (CVE-2026-80466) carries a CVSS v3 score of 8.8 and allows a low-privileged remote attacker to inject OS shell commands.
  • Affected firmware spans versions from 1.0.0 up to but excluding 4.10.0, installed on WAGO hardware including 0751-9x01, 0750-811x, 0762-420x and several other product lines.
  • WAGO recommends users update to firmware Version 4.10.0 (FW32) or higher and contact WAGO support for custom firmware builds.
  • Additional detail is available in WAGO's own security advisory VDE-2026-096, referenced in both HTML and CSAF formats.
Source document
DFI Washington State DFI Source document ↗
United States Washington State DFI Conduct & Consumer ✓ 15 claims 20 Oct 2026

Washington DFI opens rulemaking to define dishonest franchise-broker conduct

Washington's Department of Financial Institutions has opened a rulemaking that could, for the first time, set out in rule which franchise-broker practices count as dishonest or unethical under state law. The filing is at its earliest stage, with no draft text attached. This segment covers what the Securities Division says it is considering and what franchise brokers operating in the state should watch for next.

  • Washington's DFI Securities Division has opened a rulemaking on Chapter 460-82 WAC, currently listed with status 'Open'.
  • The division is considering amendments that would define certain franchise-broker conduct as 'dishonest or unethical practices in the franchise industry' under RCW 19.100.252.
  • The published materials consist of a CR-101 document; no proposed rule text has been released at this stage.
  • The industry affected is franchise brokers operating in Washington State.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 26 claims 20 Oct 2026

CISA flags six flaws in HMS Networks PEAK-System PCAN Windows drivers

CISA has published an advisory covering six vulnerabilities in HMS Networks PEAK-System PCAN Windows CAN device drivers, used across transportation, healthcare, energy and critical manufacturing sectors worldwide. The flaws allow a local attacker to crash the Windows kernel. A patched version is available, and the item sets out what affected and what operators should do.

  • CISA's advisory ICSA-26-293-01, dated October 20, 2026, covers six CVEs affecting HMS Networks PEAK-System Device Driver Setup version 5.1.2.1151 and earlier and PCAN Windows CAN device drivers version 5.1.2 and earlier.
  • The highest-rated flaw, CVE-2026-103672, carries a CVSS v3.1 base score of 7.1 (high) for improper validation of an array index.
  • HMS Networks AB has addressed all six vulnerabilities in version 5.1.4 and recommends users upgrade via its software download page.
  • CISA states the vulnerabilities are not exploitable remotely and that no known public exploitation targeting them has been reported.
  • Affected critical infrastructure sectors deployed worldwide include transportation systems, healthcare and public health, energy, and critical manufacturing.
Source document
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom Prudential & Capital ✓ 18 claims 20 Oct 2026

Dime Commercial to Buy ES Bancshares for $58 Million; TexasBank Parent Buys Haskell Bancshares

ABA Banking Journal reports two separate community bank acquisitions announced this week: Dime Commercial Bancshares' purchase of ES Bancshares in New York, and Texas Banc Financial's purchase of Haskell Bancshares in Texas. The item gives deal size, pricing and expected closing timelines for the New York transaction, with fewer details disclosed for the Texas deal.

  • Dime Commercial Bancshares will pay $58 million in cash and stock for ES Bancshares, parent of the $596 million-asset Empire State Bank.
  • The ES Bancshares deal prices the target at 109% of tangible book value and is expected to close in the first quarter.
  • Texas Banc Financial, the $2.5 billion-asset parent of TexasBank, has agreed to buy Haskell Bancshares, parent of the $72.6 million-asset Haskell National Bank.
  • The Texas Banc Financial deal is expected to close by early next year; the purchase price was not disclosed.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 22 claims 20 Oct 2026

Illinois lab COO charged over $66.2M COVID testing fraud on HRSA uninsured program

A federal grand jury in the Northern District of Illinois has indicted the co-owner of a Hillside clinical laboratory over a scheme to bill the HRSA Uninsured Program for COVID-19 PCR tests that were never run. The case turns on a staffing-vendor arrangement that supplied patient identities and specimens, many of them fictitious, and shows how pandemic-era federal reimbursement programs are now feeding criminal prosecutions.

  • Rajesh Patel, 52, of Schaumburg, Illinois, faces five counts of wire fraud, each carrying a maximum of 20 years in prison.
  • The laboratory submitted approximately $66.2 million in fraudulent claims to the HRSA Uninsured Program and was paid approximately $44.1 million.
  • Patel allegedly created fake negative results for at least 380,000 PCR tests between May 2021 and April 2022 that the laboratory never performed.
  • A March 2021 agreement saw the laboratory pay Meridian Medical Staffing Inc. tens of millions for specimens and patient information, many for patients who never existed.
  • DOJ says Patel personally obtained approximately $28 million in proceeds from the scheme.
Source document
CFTC Federal Register — CFTC Source document ↗
United States Federal Register — CFTC Markets & Infrastructure ✓ 19 claims 20 Oct 2026

CFTC carves casino-style gambling out of swap definition in immediate interim rule

The CFTC has moved to settle a jurisdictional fight over event contracts by amending the swap definition to exclude casino-style gambling. The rule took effect on publication without prior notice-and-comment, and the Commission has paired it with a separate proposal to define event contracts as swaps. This segment covers what the new paragraph (7) requires, the two-part test it imposes, and the litigation driving the urgency.

  • The interim final rule adds paragraph (7) to the swap definition in 17 CFR 1.3, excluding licensed casino-style gambling products including sports wagers and casino games.
  • The rule became effective on October 19, 2026 under the APA good-cause exception, with comments due by November 18, 2026.
  • Exclusion requires satisfying both a Provider Test (State- or Tribe-licensed operator, regulated as gaming under that law) and a Product Test (not traded multilaterally or subject to individual negotiation).
  • The Commission issued a separate Notice of Proposed Rulemaking the same day proposing to define event contracts as swaps.
  • The rule does not further define 'security-based swap' and does not presume that a product failing the exclusion is necessarily a swap.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Conduct & Consumer ✓ 17 claims 20 Oct 2026

Instacart to pay $5 million over hiring practices that favored visa holders

This item covers a joint DOJ Civil Rights Division and EEOC settlement with Instacart resolving citizenship-status and national-origin discrimination claims tied to the company's PERM visa sponsorship recruitment. It matters to employers running PERM processes, since the case turns on a narrow but common recruitment practice that regulators treated as discriminatory.

  • Instacart will establish a settlement fund of up to $4,000,000 for applicants and deterred applicants affected from December 2023 to February 2026.
  • Instacart will pay $1,000,000 in civil penalties to the United States, separate from the compensation fund.
  • Investigators found Instacart required physical mailing of applications for PERM-advertised positions, departing from its standard electronic application process.
  • Instacart must post PERM positions on its public career website, accept electronic applications, train staff and submit to monitoring and reporting requirements.
  • This is the fifteenth settlement under the Protecting U.S. Workers Initiative and EEOC's fourth public settlement under Project Firewall since 2025.
Source document
CFTC Federal Register — CFTC Source document ↗
United States Federal Register — CFTC Markets & Infrastructure ✓ 19 claims 20 Oct 2026

CFTC proposes defining sports and election event contracts as swaps

The CFTC has issued a notice of proposed rulemaking to write event contracts, including those on sports, politics, cultural events and weather, directly into the regulatory definition of swap. The move lands amid a three-way circuit split and active state criminal and civil actions against prediction-market exchanges. Comments close November 18, 2026. This segment covers what the Commission is asserting, the authority it invokes, and where the jurisdictional fight stands.

  • Comments on the proposal, referencing RIN 3038-AF82, must be received by November 18, 2026.
  • The rule would add paragraph (2)(i)(G) to the swap definition in 17 CFR 1.3, naming event contracts based on sports, politics, cultural and weather events.
  • Three appeals courts have split: the Third Circuit found sports event contracts are swaps, while the Ninth and Sixth Circuits concluded they are likely not.
  • As of September 1, 2026 at least seven CFTC-registered DCMs offered sports-related event contracts, with more than fifteen DCM applications pending since 2025.
  • August 2026 average monthly event-contract volume was about $1.5 billion, of which roughly $1.2 billion was sports-related.
Source document
FED Federal Reserve Source document ↗
United States Federal Reserve Financial Crime ✓ 9 claims 20 Oct 2026

Federal Reserve takes enforcement action against American Express over AML failures

The Federal Reserve Board announced an enforcement action against American Express Company on October 8, 2026, over failures to detect and report suspicious activity tied to money laundering and deficiencies in how its enterprise-wide AML program was implemented. The OCC issued a separate action against the firm's national bank. This briefing covers what the release states and what it leaves unresolved.

  • The Federal Reserve Board announced an enforcement action against American Express Company on October 8, 2026.
  • The action addresses, among other things, the firm's failure to sufficiently detect and report certain suspicious activity related to money laundering.
  • The Board identified significant deficiencies in how the firm's enterprise-wide anti-money laundering program was implemented, in particular at its subsidiary national bank.
  • The Office of the Comptroller of the Currency issued a separate enforcement action against the national bank.
  • The Board stated its action will help ensure the firm operates in compliance with all U.S. laws and regulations.
Source document
SEC SEC Press Releases Source document ↗
United States SEC Press Releases AI, Technology & Data ✓ 12 claims 20 Oct 2026

SEC to host November 9 roundtable on machine-understandable data and Super Intelligence

The SEC has scheduled a public roundtable for November 9, 2026, on the use of machine-understandable data and Super Intelligence. The agency frames the session as a way to gather feedback from market participants on how the investing public is using such data for SI solutions, and on associated risks and costs. This segment covers what the announcement commits to and what it conspicuously leaves open.

  • The SEC will hold the roundtable on November 9, 2026, from 9 a.m. to 3:30 p.m. EST at its Washington, D.C. headquarters.
  • The session will discuss the use of machine-understandable data and Super Intelligence (SI) and related risks and costs.
  • Joshua White, Chief Economist and Director of the Division of Economic and Risk Analysis, said feedback will inform how the Commission can better facilitate SI.
  • The event is open to the public, in-person participation may be limited, and it will be streamed live on SEC.gov with a recording available later.
  • The full agenda is published on the event webpage referenced in the announcement.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 16 claims 20 Oct 2026

DOJ charges 16 non-citizens with illegal voting across North Carolina, New York, Idaho

The Justice Department announced criminal charges against 16 non-citizens in three federal districts for illegal voting, false claims of U.S. citizenship and related election crimes. For compliance and government affairs teams, the item signals the pace and breadth of a coordinated federal enforcement push on non-citizen voting now visible across multiple states in the same week.

  • Ten non-citizens were charged in the Eastern District of North Carolina for illegally voting in the 2024 elections, most facing counts of both falsely claiming citizenship to vote and voting by an alien.
  • Five non-citizens were arrested in the Northern District of New York for voter fraud, each charged with voting by an alien in a federal election.
  • Canadian national Taralynn Bosco, 48, was charged in the District of Idaho with illegal voting by an alien in the 2022 general election.
  • Several North Carolina defendants are alleged to have voted across multiple cycles, with one record of general-election voting cited back to 1998.
  • The release carries number 26-1214 and states all defendants are presumed innocent until proven guilty.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 27 claims 20 Oct 2026

US arrests Pulido Vargas over two indictments tied to $2bn Venezuela laundering

The DOJ Criminal Division has announced the arrest of Alvaro Pulido Vargas, who faces a Southern District of Florida initial appearance on October 13 to answer two federal indictments from 2019 and 2021. Both allege laundering of bribery and fraud proceeds tied to Venezuelan government programs through the US financial system. For compliance leads, the case is a study in how US jurisdiction attaches to foreign corruption.

  • Pulido Vargas makes his initial appearance on October 13 in the Southern District of Florida to face two indictments returned in 2019 and 2021.
  • The 2021 indictment alleges roughly $1.6 billion in CLAP food and medicine contracts secured through bribes, with approximately $180 million transferred through or to the United States; it carries conspiracy and four money laundering counts, each with a 20-year maximum.
  • The 2019 indictment alleges laundering of approximately $350 million tied to Venezuela's government-controlled currency exchange, charging conspiracy and seven money laundering counts.
  • Co-defendant Alex Nain Saab Moran, named in the 2019 case, pleaded guilty to a money laundering scheme on September 15, 2026, per related DOJ content.
  • DEA Miami, FBI Miami and HSI Miami are investigating, with the prosecution forming part of the Homeland Security Task Force established by Executive Order 14159.
Source document
CFTC CFTC — Commodity Futures Trading Commission Source document ↗
United States CFTC — Commodity Futures Trading Commission Markets & Infrastructure ✓ 11 claims 20 Oct 2026

CFTC proposes to define event contracts including sports and politics as swaps

The CFTC has opened a short comment window on a proposal to write event contracts into the definition of swap under the Commodity Exchange Act. The move stakes out exclusive federal jurisdiction over contracts based on sports, politics, cultural and weather events. Anyone offering or trading these products, or watching the jurisdictional line between federal and other oversight, should read how the agency frames them.

  • The NPRM proposes to expressly define "swap" to include event contracts based on sports, politics, cultural and weather-related events.
  • The CFTC states these contracts are commodity derivatives within its exclusive jurisdiction under the Commodity Exchange Act.
  • Written comments must be received via Regulations.gov within 30 days of the NPRM's publication in the Federal Register.
  • Chairman Michael S. Selig said Americans use event contracts to hedge risks, speculate and provide information about future outcomes.
Source document
US US Federal Trade Commission — press releases Source document ↗
United States US Federal Trade Commission — press releases Governance & Accountability ✓ 14 claims 20 Oct 2026

FTC clears Publicis-LiveRamp deal on condition of five-year data firewalls

The FTC has approved, subject to conditions, Publicis Groupe's $2.2 billion acquisition of LiveRamp, the data connectivity provider used across the digital advertising industry. The order imposes five years of nondiscrimination, firewall and audit obligations to stop Publicis using its ownership of LiveRamp to disadvantage rival media agencies or misuse competitors' customer data. The public comment period runs 30 days.

  • Publicis Groupe S.A. is acquiring 100% of LiveRamp Holdings Inc. in a $2.2 billion deal.
  • The FTC alleged the deal would violate Section 7 of the Clayton Act by harming competition in media agency services and audience data services markets.
  • For five years, Publicis and LiveRamp must provide non-discriminatory access to LiveRamp's standalone products and are barred from denying, degrading, delaying or impairing that access.
  • An independent auditor must review compliance every six months for the first two years post-closing, then annually for three more years.
  • The Commission vote to issue the complaint and accept the consent agreement was 2-0, with a 30-day public comment period now open.
Source document
OCC OCC Bulletins Source document ↗
United States OCC Bulletins Prudential & Capital ✓ 17 claims 20 Oct 2026

US bank regulators lift 18-month exam-cycle threshold to $6 billion under ROAD to Housing Act

The OCC, Federal Reserve and FDIC have jointly amended the rules governing eligibility for the extended 18-month on-site examination cycle. The change roughly doubles the asset threshold, moving a larger band of well-rated community banks onto a lighter examination schedule. This segment covers who now qualifies, the conditions attached, and the supervisory discretion the agencies have kept.

  • Qualifying 1- and 2-rated banks with less than $6 billion in total assets are now eligible for an 18-month, rather than 12-month, examination cycle.
  • The prior threshold limited the 18-month cycle to qualifying banks with less than $3 billion in total assets.
  • To qualify, a bank must be well capitalized, not subject to a formal enforcement proceeding or order, and not have experienced a change of control in the preceding 12-month period.
  • National banks and federal savings associations must have a management rating of 1 or 2 to qualify.
  • The OCC retains authority to maintain a 12-month schedule or adopt a more frequent one if it deems it necessary.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 20 claims 20 Oct 2026

DOJ Fraud Division orders prosecutors to use early, pre-indictment asset seizures

Assistant Attorney General Colin M. McDonald has issued Directive 26-13, setting out how the National Fraud Enforcement Division will investigate and prosecute fraud. The memo pushes prosecutors toward early, pre-indictment asset seizures, digital-infrastructure takedowns and the combined use of multiple enforcement authorities. For firms exposed to US fraud enforcement, it signals a more aggressive, disruption-focused posture worth a few minutes.

  • Directive 26-13 requires Division prosecutors to deploy early, pre-indictment asset seizures and digital-infrastructure takedowns to freeze assets in real time.
  • Prosecutors are directed to combine the Division's tax, securities fraud, consumer fraud and cybercrime authorities against fraud schemes.
  • The directive urges developing cooperators, prosecuting corporate bad actors, seeking arrest and detention in appropriate cases, and fulsome advocacy at sentencing.
  • The Division cites a GAO estimate that the federal government loses between $233 billion and $521 billion annually to fraud.
  • The public may report corporate fraud to the Corporate Enforcement Section at corporate.enforcement@usdoj.gov.
Source document
US US Federal Trade Commission — press releases Source document ↗
United States US Federal Trade Commission — press releases Governance & Accountability ✓ 15 claims 20 Oct 2026

FTC Sues to Stop PlayPower's Takeover of Rival Playground Maker Burke

The FTC and a coalition of twelve states have sued in federal court to block Platinum Equity's PlayPower from acquiring BCI Burke, a close rival in commercial outdoor playground manufacturing. This briefing covers the agency's core allegations, the market structure cited, and the procedural posture of the case ahead of litigation in California.

  • The FTC filed a federal complaint in the U.S. District Court for the Northern District of California seeking a permanent injunction against PlayPower's acquisition of BCI Burke.
  • Twelve state attorneys general — Arizona, California, Colorado, Illinois, Nevada, North Carolina, Ohio, Pennsylvania, Tennessee, Texas, Washington and Wisconsin — joined the complaint.
  • The complaint alleges five companies, including PlayPower and Burke, hold 85% to 90% market share in the U.S. commercial outdoor playground equipment market.
  • PlayPower already owns Miracle Recreation Equipment Company, Little Tikes Commercial and Playworld Systems from prior acquisitions.
  • The Commission voted 2-0 to authorize staff to pursue the permanent injunction.
Source document
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom AI, Technology & Data ✓ 12 claims 20 Oct 2026

ABA Banking Journal publishes special report on bank innovation and AI governance

This segment surveys an ABA Banking Journal special report compiling six articles on bank technology trends, including core system modernization, AI adoption in wealth management, identity fraud defenses and a proposed governance framework for boards overseeing AI. It covers what the report addresses rather than new regulatory obligations.

  • ABA Banking Journal published the special report 'Future minded' on October 19, 2026, with a stated one-minute reading time.
  • The report includes an article on 'progressive modernization' for bank core systems, describing a path of continuous upgrades rather than infrequent large releases.
  • One article, by John Hintze, states that wealth management units are pursuing AI adoption 'carefully,' citing junior employees as a source of strong analytical ideas.
  • An article by Ravi Nemalikanti proposes a governance framework intended to transform AI from a risk-management concern into an institutional capability for bank boards.
  • A separate article by Walt Williams covers collaboration among banking, technology and government sectors to counter new technologies that lower barriers to creating false identities.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 20 claims 20 Oct 2026

DOJ Charges 28 Green Card Holders With Voter Fraud Across California

The Justice Department unsealed criminal complaints against 28 lawful permanent residents across California's four federal districts, alleging they falsely claimed U.S. citizenship to register and vote, then lied about it on naturalization applications. The action follows a federal lawsuit against California over its refusal to set aside ballots from a list of flagged registrants.

  • DOJ charged 28 lawful permanent residents across California's Central, Eastern, Northern and Southern Districts with election-related federal crimes, arresting 11 on October 19, 2026.
  • False statements on a naturalization application and fraudulent voter registration are both felonies carrying a maximum five-year federal prison sentence; some defendants instead face a misdemeanor voting-by-an-alien charge with a one-year maximum.
  • On October 13, the federal government gave California a list of more than 20,000 likely noncitizen registrants and asked it to set aside their vote-by-mail ballots; California declined.
  • DOJ says all 28 defendants charged appear on that list of more than 20,000 names, and has filed a separate lawsuit against California seeking a court order to prevent counting of ballots from unverified registrants.
  • Court documents allege the defendants claimed U.S. citizenship to register and vote, then later denied under oath on naturalization paperwork that they had ever claimed citizenship, registered, or voted.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 13 claims 20 Oct 2026

US seeks over $280M from kitchen-products importer and CEO over China duty evasion

The Justice Department has filed a civil fraud suit tied to a criminal case already charged in December 2025, seeking to recover unpaid customs duties and fraud penalties from an importer and its chief executive personally. For compliance and GC teams tracking trade-fraud enforcement, the filing shows how civil recovery under the Tariff Act now runs in parallel with criminal prosecution of the same alleged conduct.

  • The government seeks $67.9 million in unpaid customs duties and $222.5 million in fraud penalties from Uni-Tile & Marble Inc. and CEO Xin Mian Pan, jointly and severally.
  • The alleged scheme ran from September 2018 to August 2023 using multiple shell companies to transship, undervalue and misdescribe goods imported from China.
  • The conduct spanned 503 declared shipments of wooden cabinets, vanities, quartz surface products, ceramic tiles and other merchandise.
  • The civil complaint enforces a CBP demand under 19 U.S.C. § 1592(a) of the Tariff Act of 1930, based on conduct also charged criminally on December 18, 2025 in the Northern District of California.
  • The Justice Department's Trade Fraud Task Force, created to combat avoidance of import duties, partners with CBP on the matter.
Source document
SEC SEC Press Releases Source document ↗
United States SEC Press Releases Conduct & Consumer ✓ 12 claims 20 Oct 2026

SEC and IOSCO regulators issue joint fraud bulletin for World Investor Week's tenth year

The SEC has issued a joint investor bulletin with domestic and international regulators to mark World Investor Week. This is an awareness exercise, not a rule change, but it signals where securities regulators collectively see retail fraud risk concentrating — relationship investment and impersonation scams — and is worth a few minutes for anyone tracking supervisory priorities on investor protection.

  • The SEC issued the joint Investor Bulletin on October 5, 2026 as part of World Investor Week.
  • US efforts were coordinated with the CFTC, FINRA, SIPC, NFA and NASAA.
  • World Investor Week is an IOSCO-led global effort spanning six continents, now marking its tenth anniversary.
  • The bulletin highlights rising relationship investment and impersonation scams and directs investors to Investor.gov.
Source document
FED Federal Reserve Source document ↗
United States Federal Reserve Prudential & Capital ✓ 21 claims 20 Oct 2026

Fed finalizes stress-test transparency rules, will average results to cut capital volatility

The Federal Reserve has finalized two rules reshaping how its supervisory stress test feeds into bank capital requirements, adding annual public comment on scenarios and models and introducing two-year averaging of the stress capital buffer. A third proposal on noninterest-income modeling is out for comment. The Board estimates the package cuts year-over-year volatility in capital requirements by roughly 50 percent.

  • The first final rule requires the Board to invite public input annually on stress test scenarios and any material model changes, and adopts the models to be used for the 2027 stress test.
  • Banks with large trading books will be tested against two global market shock components each year, with the Board using the shock that produces the largest losses for each firm.
  • The second final rule averages the two most recent annual supervisory stress test results when calculating stress capital buffer requirements, with averaging beginning in 2028.
  • A separate proposal would revise the noninterest income model to better capture business model diversity; comments are due 60 days after Federal Register publication.
  • The Board estimates the changes will reduce year-over-year volatility in capital requirements by approximately 50 percent and not materially affect aggregate capital requirements.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Governance & Accountability ✓ 19 claims 20 Oct 2026

UNC Chapel Hill Settles Title VI Antisemitism and Race Discrimination Probe With DOJ, ED-OCR

The Justice Department and Education Department have reached a university-wide settlement with UNC Chapel Hill over Title VI compliance, covering antisemitism policy, admissions and student benefits. The agreement sets concrete obligations with deadlines and a fixed term, making it a template worth reading for any federally funded institution facing similar scrutiny.

  • UNC must select a Merit & Civil Rights Administrator within 30 days to implement the settlement agreement.
  • UNC will send quarterly reports of antisemitism and race discrimination complaints to ED-OCR and the Civil Rights Division.
  • The settlement bars UNC from using race in admissions, analyzing racial data, or partnering with bridge or pipeline programs that consider protected characteristics.
  • ED-OCR will close 18 active investigations and DOJ will close its 18-month compliance review opened April 18, 2025.
  • The agreement remains in effect until December 31, 2028.
Source document
CFTC CFTC Enforcement Source document ↗
United States CFTC Enforcement Financial Crime ✓ 17 claims 20 Oct 2026

CFTC wins $288m EminiFX judgment against Eddy Alexandre over crypto Ponzi scheme

The CFTC has obtained summary judgment against Eddy Alexandre and his firm EminiFX over a commodity pool Ponzi scheme that drew more than $262 million from tens of thousands of investors in eight months. The segment covers the court's findings, the monetary relief ordered, and how much has actually been clawed back to victims so far.

  • The court ordered $228,576,962 in restitution, $15,049,500 in disgorgement and a $45,148,500 civil penalty.
  • EminiFX took in more than $262 million from tens of thousands of investors over eight months while promising weekly returns of 5% to 9.99%.
  • The firm suffered net losses exceeding $49 million, including at least $15 million Alexandre misappropriated for personal use.
  • A court-appointed receiver had returned over $98 million to more than 28,000 investors as of July 2026.
  • Alexandre is serving a nine-year prison sentence in a parallel action brought by the U.S. Attorney for the Southern District of New York.
Source document
SEC SEC Press Releases Source document ↗
United States SEC Press Releases Conduct & Consumer ✓ 21 claims 20 Oct 2026

SEC fines adviser Zoe Financial $450,000 over undisclosed referral conflict

The SEC has settled with Zoe Financial Inc. over how its referral service matched clients with third-party advisers. The case turns on human salespeople overriding an algorithm to suggest advisers Zoe had a financial incentive to favour, and on a disclosure gap that ran until December 2024. For compliance teams running referral or matching platforms, it is a short, pointed read on where fiduciary disclosure attaches.

  • Zoe Financial agreed to a cease-and-desist order, a censure and a $450,000 civil monetary penalty without admitting the SEC's findings.
  • The SEC found the conflict was not adequately disclosed in Zoe's Form ADV Brochure until December 2024.
  • Although the matching algorithm ignored whether an adviser used Zoe Wealth, salespeople often suggested advisers the algorithm had not recommended.
  • Zoe also disclosed that certain advisory firms held indirect minority interests presenting a conflict, but did not accurately describe how it mitigated that conflict.
  • The order acknowledges remedial steps including compliance manual revisions and the hiring of an in-house chief compliance officer.
Source document
SEC SEC Press Releases Source document ↗
United States SEC Press Releases Financial Crime ✓ 12 claims 20 Oct 2026

SEC proposes scrapping its pay-to-play rule for investment advisers

The SEC has opened a consultation to rescind the pay-to-play rule that bars advisers from taking fees from government clients for two years after a covered political contribution, along with its recordkeeping provisions. For compliance teams that have built contribution pre-clearance programmes since 2010, this reopens a long-settled constraint. Comment runs 60 days after Federal Register publication.

  • The proposal would rescind Advisers Act Rule 206(4)-5 and strike the corresponding provisions from the Advisers Act recordkeeping rule.
  • The rule currently bars advisers from compensated advisory services to a government client for two years after a covered political contribution.
  • Antifraud prohibitions, fiduciary duty requirements, the compliance rule and the code of ethics rule would all remain in force.
  • The Commission cites a de facto strict liability standard under which small donations or 'foot faults' can trigger substantial prohibitions and fines.
  • The public comment period remains open for 60 days after the proposing release is published in the Federal Register.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 21 claims 20 Oct 2026

Falmouth man pleads guilty to laundering proceeds of $6M Medicare DME fraud scheme

A money laundering conspiracy plea that turns on a straw ownership arrangement and bank secrecy. Anzivino fronted a durable medical equipment company whose true owners billed Medicare for braces nobody ordered. The case is short but detailed on how the laundering actually worked, including the moment a bank balked and the funds moved anyway. Useful for anyone building out nominee-ownership and beneficial-ownership controls.

  • Anzivino acted as the nominee owner of Advanced Medical Supply Corp. while co-conspirators were the actual beneficial owners and managers.
  • Advanced submitted more than $6 million in Medicare claims for unneeded, unprescribed knee and back braces, and Medicare paid more than $3 million.
  • After a New Hampshire bank declined to confirm the recipient companies were legitimate, Anzivino opened an account at another bank and wired $1,494,938.09 across three transactions, each over $10,000.
  • The government seized approximately $353,768.29 in assets tied to the scheme from Advanced's bank account in 2024.
  • Anzivino is scheduled to be sentenced on January 21, 2027 and faces a maximum penalty of 10 years in prison.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 18 claims 19 Oct 2026

CISA flags critical hard-coded credential flaw in EseeCloud IP cameras; vendor unresponsive

CISA has published an advisory on three vulnerabilities in Guangzhou Juan IoT Technology's EseeCloud IP camera app and firmware, one rated 9.8 critical. The flaws allow full device takeover, unauthorised rebinding and large-scale device enumeration. The vendor did not respond to CISA's coordination attempts, so no fix exists and the only remedy is network isolation.

  • CVE-2026-107617 lets an attacker use a hard-coded credential to log in to EseeCloud devices, rated CVSS v3.1 9.8 critical.
  • CVE-2026-97858 allows the server to unbind a device from its owner and rebind it to an attacker's account, exposing the device's full serial ID.
  • CVE-2026-105664 creates an enumeration oracle, letting an attacker with a valid token discover registered devices across a 10-digit search space absent rate limiting.
  • Guangzhou Juan IoT Technology did not respond to CISA's coordination attempts, so no patch is available and CISA advises network isolation.
  • Affected equipment is deployed worldwide across energy, communications, transportation, financial services and government sectors.
Source document
DFI Washington State DFI Source document ↗
United States Washington State DFI Conduct & Consumer ✓ 12 claims 19 Oct 2026

Washington DFI charges Pacific Watercraft and Robin Lynn Sells over $5m unregistered offer

Washington's Division of Securities has issued a Statement of Charges against Pacific Watercraft Group and its principal Robin Lynn Sells, alleging an unregistered $5 million offering made without disclosure of the principal's bankruptcy and enforcement history. The action seeks a cease and desist order plus fines and costs. This item sets out what the charges contain and what happens next.

  • The Statement of Charges was entered on October 6, 2026 under file S-26-4197-26-SC01.
  • The respondents allegedly offered up to $5 million in unregistered debt and equity securities to a potential investor in 2026.
  • The undisclosed material information allegedly included four bankruptcy filings by Sells, three previous Securities Division actions, and a 2020 bankruptcy filing by Pacific Watercraft Group.
  • The order cites RCW 21.20.010, RCW 21.20.140 and RCW 21.20.040 and seeks a cease and desist order plus fines and costs.
  • The respondents have a right to request a hearing on the Statement of Charges.
Source document
ABN American Bankers Association — newsroom Source document ↗
Global American Bankers Association — newsroom AI, Technology & Data ✓ 12 claims 19 Oct 2026

FSB finalizes 12 sound practices for AI adoption at banks and other financial firms

The Financial Stability Board has finalized 12 'sound practices' to guide how banks and other financial institutions adopt artificial intelligence. Framed as a practical toolkit for boards and senior management, the list covers organization-wide governance and risk management across the AI lifecycle. This segment walks through what the FSB finalized, how it maps to existing cyber and third-party frameworks, and where the ABA pushed for changes.

  • The FSB finalized 12 sound practices for AI adoption by banks and other financial institutions on October 15, 2026.
  • The practices split into two groups: organization-wide AI governance, and risk management across the AI lifecycle from development to deployment.
  • The FSB frames the practices as a toolkit firms can tailor to their context and integrate into existing cyber and third-party risk frameworks.
  • The ABA in July recommended improving the machine-learning definition and reorganizing and consolidating the list to aid application at banks of all sizes.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 23 claims 19 Oct 2026

Miami man gets 36 months for $4.2 million trust tax-refund fraud scheme

The DOJ's National Fraud Enforcement Division secured a 36-month sentence against a Miami man who filed false tax returns for trusts he controlled, seeking more than $4.2 million in refunds. The case shows how the newly created Fraud Division is pursuing refund schemes, and sets out the restitution and supervised-release terms imposed.

  • Preval was sentenced on October 6, 2026 to 36 months in prison for filing a false tax return on behalf of a trust he controlled.
  • The false returns filed for trusts and himself collectively sought refunds totaling more than $4.2 million from the Treasury.
  • Preval obtained more than $580,000, used to pay off his home mortgage and other personal expenses, and was ordered to pay $580,647 in restitution to the IRS.
  • He also filed 2023 returns that omitted income from his employment, and received one year of supervised release.
  • The case was investigated by IRS Criminal Investigation and prosecuted by the National Fraud Enforcement Division's Tax Section.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 14 claims 19 Oct 2026

CISA and FBI warn election and campaign officials of phishing ahead of 2026 midterms

CISA and the FBI have issued a joint Public Service Announcement warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. The notice describes phishing and smishing campaigns that mimic legitimate communications to steal credentials and deploy malware. For anyone handling voter data or sensitive campaign information, it sets out who is being targeted and why, and points to recommended practices.

  • CISA and the FBI released a joint Public Service Announcement on October 16, 2026 warning of cyber threats to the 2026 U.S. midterm elections.
  • The agencies say actors may use phishing and smishing to steal login credentials and sensitive information or to install malware on targeted devices.
  • Election officials, candidates and political organisations are named as targets because of access to voter registration data, government officials and sensitive campaign information.
  • The notice warns that campaigns increasingly use convincing emails, text messages, audio and video to manipulate recipients into disclosing information or interacting with malicious links and attachments.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 20 claims 19 Oct 2026

DOJ charges three over sex trafficking of minors, partly directed from a prison

The Justice Department's Criminal Division unsealed an indictment in the District of Delaware charging three defendants with conspiracy to commit sex trafficking of minors by force, fraud and coercion, plus related CSAM counts. The case is notable for its allegation that one defendant continued directing the scheme from behind bars using contraband phones. This segment sets out who is charged, the alleged conduct and the penalties at stake.

  • All three defendants are charged with conspiracy to traffic a minor by force, fraud and coercion and face a minimum of 15 years and a maximum of life in prison on those counts.
  • Geeter is currently serving a 97-year California state sentence and allegedly used contraband cell phones to engage in some of the conduct while incarcerated.
  • Geeter and Hasty are additionally charged with producing child sexual abuse material, with Geeter facing 25 to 50 years and Hasty 15 to 30 years on the CSAM charges.
  • The scheme allegedly compelled three minors and one adult to engage in commercial sex acts in Delaware and elsewhere using force, threats, fraud or coercion.
  • The FBI's Delaware Violent Crime and Safe Streets Task Force and Delaware State Police are investigating; the indictment remains an allegation and all defendants are presumed innocent.
Source document
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom Conduct & Consumer ✓ 17 claims 19 Oct 2026

ABA Guidance Clarifies Business-Purpose Loans Are Not Exempt Across All Lending Rules

ABA's October compliance column answers a recurring examiner question: does a business-purpose loan secured by a home automatically fall outside consumer protection rules? The answer, drawn directly from Regulation Z, X, C and B text and commentary, is no — each regulation must be checked separately, and the same loan can be exempt from some and covered by others.

  • Regulation Z, §1026.3(a)(1), excludes an extension of credit made primarily for a business, commercial, or agricultural purpose, and comment 3(a)-3.ii.A confirms this covers loans secured by a borrower's residence.
  • Regulation X, §1024.5(b)(2), exempts business-purpose loans from RESPA coverage and allows lenders to rely on the Regulation Z determination.
  • Regulation C requires a separate analysis under §1003.3(c)(10): a business-purpose mortgage is excluded from HMDA reporting unless it qualifies as a home improvement loan, home purchase loan, or refinancing.
  • Regulation B, §1002.2(g), defines business credit but contains no general exemption comparable to Regulations Z or X, meaning ECOA generally continues to apply, including the notification requirements in §1002.9(a)(3).
Source document
BPIU Bank Policy Institute Source document ↗
United States Bank Policy Institute Governance & Accountability ✓ 17 claims 19 Oct 2026

FDIC and OCC propose easing rules on sharing confidential supervisory information

The FDIC and OCC have proposed reworking the rules that govern how banks handle confidential supervisory information. BPI, which supports much of the direction, sets out where the proposals fall short: imprecise definitions, prescriptive confidentiality agreements, limited third-party disclosure categories and no notice before discretionary agency disclosures. This explainer is the fastest route to what is on the table and what BPI wants changed.

  • The FDIC and OCC proposals would expand when banks may share their own CSI without obtaining prior regulatory approval.
  • BPI wants CSI defined precisely so institution-generated materials do not become CSI merely because they are shared with or reviewed by the FDIC or OCC.
  • BPI recommends notice and an opportunity to object before an agency makes a discretionary disclosure of institution-specific CSI.
  • BPI asks that prescriptive confidentiality-agreement requirements be replaced with a principles-based framework.
  • BPI urges the FDIC and OCC to work with the Federal Reserve to align the banking agencies' CSI regulations.
Source document
FED Federal Reserve Source document ↗
United States Federal Reserve Prudential & Capital ✓ 13 claims 18 Oct 2026

Fed clears Isabella Bank Corporation to acquire Grand River Commerce in Michigan

The Federal Reserve Board approved Isabella Bank Corporation's application to acquire Grand River Commerce and its subsidiary Grand River Bank, both of Grandville, Michigan. The approval also covers the merger of the two banks and the operation of Grand River's branches. For anyone tracking community-bank consolidation in the Midwest, this is the clean grant and the issued order that follow it.

  • The Federal Reserve Board approved Isabella Bank Corporation's acquisition of Grand River Commerce, Inc., announced October 5, 2026.
  • The approval lets Isabella Bank Corporation indirectly acquire Grand River Bank of Grandville, Michigan.
  • The Board also approved Isabella Bank's merger with Grand River Bank and the operation of branches at Grand River Bank's locations.
  • The approval is accompanied by an order published as a PDF and recorded in the Board's votes.
Source document
SEC SEC Press Releases Source document ↗
United States SEC Press Releases Governance & Accountability ✓ 15 claims 18 Oct 2026

SEC proposes to rescind Rule 14a-8 and modernise proxy solicitation process

The SEC has issued two proposing releases on its proxy rules under the Securities Exchange Act of 1934. One would rescind Rule 14a-8 and amend Rule 14a-4(c); the other modernises the proxy solicitation process. Comment periods run 60 days from Federal Register publication. This segment covers what each release changes and the statutory-authority argument driving the first.

  • The SEC proposed to rescind Rule 14a-8 under the Securities Exchange Act of 1934, citing statutory authority limits and intrusion into state law.
  • Rescission would leave the role of shareholder proposals to state law and company governing documents.
  • The Commission proposed amendments to Rule 14a-4(c) on discretionary proxy voting authority.
  • Solicitation amendments would eliminate the annual-report delivery requirement, drop the incorporation-by-reference delivery deadline, remove Notices of Exempt Solicitation, and cut the broker search period from 20 to five business days.
  • Both comment periods remain open for 60 days after Federal Register publication.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 21 claims 18 Oct 2026

CISA flags six Eclipse Milo flaws exposing OPC UA servers to credential theft and denial of service

CISA's October 15 industrial-control advisory covers multiple vulnerabilities in Eclipse Foundation's Eclipse Milo OPC UA server software. The flaws range from authorization bypasses to a password-recovery padding oracle and several denial-of-service conditions. For operators in chemical, critical manufacturing, energy and water sectors, the practical sting is that affected 0.6.x deployments cannot be patched in place and must be migrated to 1.1.5 or later.

  • CISA advisory ICSA-26-288-01, released October 15, 2026, covers vulnerabilities in Eclipse Milo versions 0.6.0 through 1.1.4.
  • CVE-2026-60007, a padding-oracle flaw enabling password recovery, carries a CVSS v4 base score of 9.1, rated critical.
  • The Eclipse Foundation recommends upgrading to Eclipse Milo 1.1.5; there are no 0.6.x releases with the fixes, requiring migration.
  • Successful exploitation could delete protected data, recover credentials and impersonate users, or stop the server responding to all clients.
  • Affected deployments span the chemical, critical manufacturing, energy, and water and wastewater sectors worldwide.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 21 claims 18 Oct 2026

CISA flags seven flaws in its own Malcolm network-monitoring tool, top score 8.1

CISA has published advisory ICSA-26-280-01 covering seven CVEs in Malcolm, its own network traffic analysis platform, deployed worldwide across energy, IT and water sectors. The defects range from unauthenticated access to the Arkime backend to a CSRF route that can permanently delete captured traffic. This segment walks through what each flaw allows, which versions are affected, and where the fixes landed.

  • Advisory ICSA-26-280-01 covers seven CVEs in CISA Malcolm, affecting versions up to and including v26.08.0.
  • CVE-2026-107333, an RBAC path-normalization bypass, carries the highest score at CVSS v3 8.1 HIGH and was patched in v26.09.0.
  • CVE-2026-107362, a server-side request forgery in the FilePond upload component, was also patched in v26.09.0.
  • CVE-2026-107337 lets an attacker use CSRF against the kiosk Flask endpoint to run control.py --wipe, permanently deleting captured traffic; it was fixed in v26.08.0.
  • CISA states no known public exploitation specifically targeting these vulnerabilities has been reported to date.
Source document
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom Financial Crime ✓ 15 claims 18 Oct 2026

ABA names Robertson and Boyer for Distinguished Service Awards in AML/CFT and fraud

The American Bankers Association has announced its Distinguished Service Awards for AML/CFT and fraud management. The recognitions went to two senior financial-crime practitioners for contributions to professional education and industry collaboration. This is a professional-recognition item rather than a rule change, but it signals where the industry's trade body places weight in its financial-crime training and community-building work.

  • Rebecca Schauer Robertson of Blue Ridge Bank received the ABA Distinguished Service Award for AML/CFT, recognizing a 30-year career in financial services.
  • Karen Boyer of M&T Bank received the ABA Distinguished Service Award for Fraud Management, cited for work on payment threats, social engineering, scams and account takeover.
  • Both were honored on October 14, 2026 at the ABA AML and Fraud Conference in Arlington, Virginia.
  • Robertson served on the founding boards of the Certified AML and Fraud Professional certification and the ABA AML and Fraud School, and helped design the school's curriculum.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 26 claims 18 Oct 2026

CISA flags seven flaws in Red Lion N-Tron 700 switches, including hard-coded credentials

CISA has updated its advisory on Red Lion Controls N-Tron 700 Series industrial switches, detailing seven vulnerabilities that range from default factory credentials to unauthenticated firmware uploads and a scriptable reboot loop. The devices are deployed worldwide across commercial facilities, communications, critical manufacturing and IT sectors. This segment sets out what is affected, the remediation path, and where the operational risk concentrates.

  • Affected versions are N-Tron 700 Series firmware 3.11.0 and earlier and bootloader 2.0.6.1 and earlier; Red Lion recommends upgrading to version 3.11.1 or greater.
  • CVE-2026-32645 concerns default factory administrative credentials that persist even after other administrator accounts are configured.
  • CVE-2026-33367 allows SNMP to retrieve configuration files, modify accounts and settings, and initiate firmware or bootloader changes without any authentication.
  • CVE-2026-28745, scored CVSS v4 9.3 (critical), involves passwords stored in the configuration file using weak encryption.
  • CISA states no known public exploitation specifically targeting these vulnerabilities has been reported to it at this time.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Conduct & Consumer ✓ 17 claims 18 Oct 2026

Cloudera barred from PERM program two years, pays $1.4m back pay over US-worker bias

The Justice Department's Civil Rights Division and the Department of Labor announced a coordinated resolution with Cloudera Inc. over alleged discrimination against qualified US workers during PERM recruitment. The settlement pairs a two-year debarment from the labor certification program with a back-pay fund, civil penalties and ongoing compliance obligations. For any employer running PERM sponsorship, this item signals how the two agencies are now working the same case in tandem.

  • Cloudera will be barred from participating in the PERM program for two years, following DOL's earlier suspension of its PERM processing.
  • The company will establish a $1.4 million back-pay fund for qualified US workers who tried to apply for the jobs at issue but were not given fair consideration.
  • Cloudera will pay $600,000 in civil penalties and resolves a DOJ lawsuit filed in April alleging INA violations across seven PERM positions.
  • Cloudera accepts compliance obligations including enhanced monitoring, revised PERM procedures and reporting requirements.
  • DOJ said this is the fourteenth settlement since it relaunched its Protecting U.S. Workers Initiative in 2025.
Source document
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 10 claims 16 Oct 2026

NIST, NSA and CISA issue voluntary incident response guide for super intelligence training

Three US agencies have published joint guidance addressing what happens when advanced AI systems take actions that conflict with human oversight controls during training or evaluation. The document sets out voluntary practices for detecting, containing and recovering from such incidents, aimed at organisations developing cutting-edge, non-public systems.

  • NIST, the NSA's Super Intelligence Security Center and CISA jointly published the guidance on October 16, 2026.
  • The practices are voluntary and aimed particularly at pre-deployment, cutting-edge SI agents with reduced safeguards or other high-risk, non-public systems.
  • An SI control incident is defined as uninstructed agent actions that conflict with or compromise policies, controls or security measures scoping the task and human oversight.
  • The document outlines ten core practices covering access limitation, activity monitoring, evidence preservation and shutdown of undesired behavior, rebuilding from verified baselines, and reporting incidents and near-misses to relevant government agencies and affected parties.
  • The guidance states organisations should test controls and validate containment before resuming SI agent activities.
Source document
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom Digital Assets ✓ 13 claims 16 Oct 2026

Banking groups ask Fed for 60 more days to comment on stablecoin rules

Four bank trade groups have asked the Federal Reserve to extend comment on its two Genius Act stablecoin proposals, arguing the Fed's prudential framework is explicitly benchmarked to an OCC rule that is about to change. The request bears on timing, not substance, but shapes how much scrutiny the final rules receive before they bind issuers.

  • The Fed issued two companion proposed rules implementing its Genius Act responsibilities in late September 2026.
  • One proposal covers approval procedures for a subsidiary to become a board-supervised permitted payment stablecoin issuer (PPSI); the other sets reserves, capital, redemption, risk management, custody and reporting requirements.
  • ABA, BPI, CBA and ICBA have requested a 60-day extension, moving the comment deadline from November 30 to January 29.
  • OCC Comptroller Gould has stated the OCC intends to finalize its own stablecoin rule by November 2026, which the groups say would change the benchmark the Fed's proposal is tied to.
  • The associations also urged the Fed to coordinate timing and effective dates with other agencies and keep PPSI requirements consistent across regulators.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Governance & Accountability ✓ 10 claims 16 Oct 2026

DOJ settles with Lexington, Mississippi over policing practices found unlawful in 2024

The Justice Department has reached a settlement with the City of Lexington, Mississippi and its police department following a 2024 federal findings report that identified a pattern of civil rights violations. The agreement covers fines and fees, bail practices, conflicts of interest, and use-of-force policies, and follows an investigation opened in March 2023.

  • The settlement follows the Department's September 26, 2024 findings report identifying a pattern or practice of civil rights violations by the Lexington Police Department.
  • The City and LPD will amend policies regarding fines and fees, bail and release criteria, and potential conflicts of interest.
  • LPD will revise its policies on stops, searches, arrests, and use of force, and update reporting and review procedures for such officer activity.
  • The investigation was initiated in March 2023 under 34 U.S.C. 12601 by the Civil Rights Division's Special Litigation Section and the U.S. Attorney's Office for the Southern District of Mississippi.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 10 claims 16 Oct 2026

Puerto Rico bank chairman gets 62 months for $23.6 million fraud scheme

The former board chairman and co-owner of Nodus International Bank, a Puerto Rican International Banking Entity, was sentenced to 62 months in prison for a wire fraud conspiracy that drained the bank of more than $23.6 million and contributed to its collapse. The DOJ account details the mechanics of the scheme and its regulatory concealment.

  • Ramirez was sentenced to 62 months in prison, three years of supervised release, and forfeiture of approximately $13.6 million.
  • From 2017 to 2023 Ramirez conspired to invest more than $11 million of Nodus Bank's funds in a Miami-based lender for his own and a co-conspirator's benefit.
  • Between January 2018 and September 2021 Ramirez induced the bank's board to purchase at least 47 promissory notes totaling approximately $25.3 million from a company he jointly owned.
  • On April 28, 2023, without OCIF authorization, Ramirez caused Nodus Bank to purchase a loan portfolio totaling approximately $26 million, most of it delinquent or nonperforming.
  • The DOJ states Ramirez's actions caused Nodus Bank to lose at least $23,613,371.
Source document
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 17 claims 16 Oct 2026

Ransomware Remediation Firm Owner Charged With Secretly Paying Hackers, Overbilling Clients

DOJ charged MonsterCloud owner Zohar Pinhasi with wire fraud after alleging he told clients he could decrypt ransomware without paying attackers, while secretly negotiating and paying the ransoms himself and marking up the cost dramatically. The indictment details a specific $8,200 ransom payment billed to a client at $150,000, illustrating the alleged margin across the scheme.

  • Pinhasi faces two counts of wire fraud and one count of wire fraud conspiracy, each carrying a maximum 20-year penalty.
  • The indictment alleges that in or around August 2023, Pinhasi paid a cybercriminal approximately $8,200 and charged the client approximately $150,000.
  • Prosecutors say Pinhasi charged MonsterCloud clients more than $19 million over the course of the alleged scheme.
  • The indictment alleges Pinhasi paid more than $8 million in ransom payments to cybercriminals while telling clients he avoided paying ransoms.
  • The FBI and CISA have issued joint guidance advising against paying ransoms, stating it does not guarantee data decryption or prevent leaks.
Source document
NIST NIST Source document ↗
United States NIST AI, Technology & Data ✓ 15 claims 16 Oct 2026

NIST Demonstrates Chip-Scale Frequency Comb for Portable Optical Clocks

NIST and the University of Maryland's JQI have demonstrated a chip-based optical frequency comb designed to work without tethering to laboratory equipment. The technology underpins optical atomic clocks and could eventually support navigation for drones, vehicles and submarines when GPS signals are jammed or unavailable.

  • NIST and JQI researchers demonstrated the chip-based frequency comb in a result announced October 16, 2026.
  • The design sends light from two lasers around a single microresonator ring, avoiding power-hungry stabilization equipment required by earlier single-laser methods.
  • Each fabrication wafer contains more than 400 chips, and each chip houses up to 300 ring-shaped resonators.
  • NIST states the technology could support mobile optical atomic clocks used for navigation when GPS is unavailable or jammed, and for oil, gas and mineral exploration.
Source document