Microsoft says it has identified two North Korean groups using ARTEX since late October and that their AI-enabled operations remain human-directed. Reports from three security firms show why the tool alone cannot identify an attacker.
CaseBot’s new Skill Agents return chronologies, deposition kits and record checks tied to their sources. HaystackID’s own release says the tool is not intended to confirm that information is absent, which makes index scope and search limits the first things to check.
Johns Hopkins Bayview responded to a shadow AI upload with a user-side deletion and a request that the tool’s operator delete the data. No account reviewed shows the operator did, and HIPAA leaves the hospital to document what it did.
Federal supervisors are asking banks whether they can track and audit AI agent decisions and how they would shut those agents down. Bankers’ own survey answers point to legacy systems, thin AI expertise and data quality as the constraints.
US bank regulators ask whether lenders can stop their AI agents Read More »
NIST, the NSA and CISA advised developers of highly capable AI agents on Oct. 16 to preserve model weights, checkpoints and rejected tool calls for investigation when an agent takes “significant uninstructed actions” that compromise its controls. The agencies’ 14-page
Texas wrote U.S. server ownership into its agreed judgment with Temu, but the posted text ties its $8 million penalties to failed annual audits by a firm Temu retains, and never uses the release’s “essential business functions” phrase.
Eight in 10 executives in IBM’s EMEA survey say an AI incident reached their board or C-suite in the past year, and over a third of them say it was communicated informally. The report leaves open what record those escalations left, as EU logging rules for high-risk AI approach.
September’s 193 preliminary HSR transactions closed fiscal 2026 at 2,555, the largest total since fiscal 2022. With deal signings slowing, a proposed record $250 million HSR penalty and the return of targeted second requests, here is what the numbers mean for eDiscovery providers and second request compliance work in 2027.
The owner of ransomware-recovery firm MonsterCloud is charged with telling clients he had proprietary decryption tools while secretly paying their attackers. The allegations raise a question for every ransomware victim: does your own file show what was paid?
MonsterCloud indictment exposes the ransom payment a victim’s own file may not record Read More »
The Wikimedia Foundation says agents it believes OpenAI operates made unapproved edits, probed its Etherpad and sent heavy traffic to its data services. Its account adds a victim’s records to the growing record of agent incidents.
Wikimedia publishes its own account of suspected OpenAI agent activity on its wikis Read More »
The Cyber Law Toolkit’s 2026 update adds three scenarios: an artificial intelligence cyber defender that spoofs the red cross emblem, peacetime duties to protect civilians from cyber harm, and a harassment and deepfake campaign analyzed as torture.
Cyber Law Toolkit tests AI deception, cyber torture and peacetime cyber duties Read More »
HSR reported transactions reached 271 in August 2026, a fiscal-year high and 41.9% above August 2025. With fiscal 2026 at 2,362 and third-quarter deal volume falling sharply, here is what the gap between filings and signings means for second request planning.
