Live 307 sources monitored São Paulo Washington London Frankfurt Dubai Hong Kong Sydney 7 regions
✦ RegulusGlobal regulatory broadcast network

Regulatory heat map

Where it's moving right now · select a region to filter
Showing
since: 24h × Clear all

Filtered

4 segments
DOJ DOJ Criminal Division Source document ↗
United States DOJ Criminal Division Financial Crime ✓ 15 claims 11 hrs ago

DOJ and HHS-OIG make the Fraud Division the single door for criminal health care self-disclosures

The Justice Department's National Fraud Enforcement Division and HHS-OIG have resolved a long-standing dual-reporting problem for health care fraud. A single disclosure to the Fraud Division now carries the benefits of both DOJ's Corporate Enforcement Policy and the OIG Self-Disclosure Protocol. This segment covers what changed, how the two agencies divided criminal from civil conduct, and the trap for firms that disclose only to OIG.

  • One disclosure to the Fraud Division's Health Care Fraud Section now automatically confers HHS-OIG SDP benefits, with no additional OIG portal submission required.
  • HHS-OIG updated its SDP to state criminal conduct should go to DOJ; disclosing only to OIG generally will not qualify a company for a declination.
  • The Fraud Division was created on 7 April 2026; its Health Care Fraud Section runs nine strike forces and has charged more than 6,200 defendants since 2007.
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 17 claims 15 Oct 2026

CISA flags critical flaws in dcm4che DICOM archive letting attackers delete and forge medical images

CISA's medical advisory covers six vulnerabilities in J4Care's dcm4chee-arc-light, a DICOM archive used in healthcare settings worldwide. The flaws range from missing authentication and authorization to denial-of-service conditions, with top CVSS v3 scores of 9.1. For anyone running medical imaging infrastructure, this is a patch-now item: the defaults ship insecure, and the vendor fix is already out.

  • Six CVEs affect dcm4chee-arc-light 5.35.1; J4Care recommends upgrading to release 5.35.2 or later.
  • In the default configuration, the archive and HL7 listener accept unauthenticated requests, enabling retrieval, forgery and patient-record reassignment.
  • Top CVSS v3 base score is 9.1 (critical); CISA reports no known public exploitation to date.
IC3 IC3 — FBI Internet Crime Complaint Center Source document ↗
United States IC3 — FBI Internet Crime Complaint Center Financial Crime ✓ 20 claims 15 Oct 2026

FBI warns of election fraud schemes targeting donors ahead of 2026 US midterms

The FBI's Internet Crime Complaint Center has updated its 2024 election-fraud advisory for the 2026 midterms, cataloguing how scammers solicit donations, sell undelivered merchandise and harvest personal data. It details four scheme types and the growing role of AI-generated voices, images and messages. A short, practical read for financial-crime and fraud-prevention teams tracking consumer-facing threat patterns.

  • IC3 updated its 2024 election-fraud alert (I-102924-PSA) to cover the 2026 US midterms, warning of financial fraud and PII theft.
  • Four schemes are named: campaign investment pools, fake PACs/ScamPACs, online merchandise non-delivery, and fraudulent voter-registration pages.
  • The FBI warns AI tools now generate realistic voices, images and messages impersonating candidates, campaigns and trusted contacts, raising detection difficulty.
OCC OCC Bulletins Source document ↗
United States OCC Bulletins Governance & Accountability ✓ 15 claims 15 Oct 2026

US agencies propose to replace interagency third-party risk guidance with a risk-tailored approach

Four US banking agencies have jointly proposed guidance that would revise and replace their existing third-party risk management expectations. The pitch is calibration: align oversight to the risk of each relationship rather than treating every vendor as high-risk. This segment covers what the proposal changes, who it would bind, the comment window, and why the non-enforceable framing matters for examiners and banks alike.

  • Proposed interagency guidance would revise and replace existing third-party risk management guidance across the OCC, Federal Reserve, FDIC and NCUA.
  • The guidance would not set enforceable standards or prescriptive requirements, and non-compliance would not result in supervisory action.
  • Comments are due 60 days from publication in the Federal Register; the guidance would apply to community banks when final.