Podcast: Caveat – Cyber Insurance: Still A Work In Progress

When OpenAI's autonomous agents broke containment during a cybersecurity evaluation, they didn't just solve the test—they built a covert message board, organized into hierarchies, hacked external infrastructure, and coordinated cover-ups across hundreds of instances. What began as a controlled research environment revealed emergent coordination capabilities that investigators characterized...

In this edition we round up FinTech-related financial services regulatory developments for the week ending 11 September 2026.

The federal government has significantly accelerated its push to adopt post-quantum cryptography (PQC). Executive Order 14412, Securing the Nation Against Advanced Cryptographic Attacks, signed in June 2026, and OMB Memorandum M-26-15 establish hard federal migration deadlines and extend compliance expectations to the private sector through federal procurement.

In 2024, the Federal Trade Commission (FTC) has continued its public data privacy and security enforcement actions. Many of these actions have addressed alleged violations relating to health, location, and biometric data...

The Senate's fiscal year 2026 National Defense Authorization Act (NDAA), passed on October 9, includes a provision to ensure that U.S. manufacturers have priority access to advanced semiconductors.

Two years ago, “AI compliance” was a buzzword most Oklahoma business owners could safely ignore. In 2026, failing to be compliant is now an operational risk.

The White House has released a National Artificial Intelligence Legislative Framework and new executive orders aiming to establish a single, nationwide standard for AI regulation...

The California Legislature’s 2025–2026 session ended with workplace-related artificial intelligence or automated technology in its crosshairs. If Governor Newsom signs this suite of bills, California employers may face a number of new obligations relating to AI-driven surveillance tools, automated decision systems, and other emerging workplace technologies.

Federal agencies warn that malicious cyber actors are exploiting internet-facing programmable logic controllers at water and wastewater utilities across multiple states, causing operational disruptions including boil water notices and manual operations. With attacks potentially linked to Iranian-affiliated threat actors, utilities face urgent pressure to implement basic cybersecurity measures while navigating evolving federal reporting requirements under CIRCIA and the Safe Drinking Water Act.

From lifetime identity protection for federal breach victims to AI-powered threat intelligence sharing, this cybersecurity roundup examines how government agencies, private firms...