The Cybersecurity and Infrastructure Security Agency has released an updated framework for Software Bills of Materials, broadening the minimum information organizations should include when documenting software components as governments and businesses place growing emphasis on software supply chain security.
When Microsoft folded Copilot into its Microsoft 365 subscriptions last year, the change arrived quietly enough. Existing customers on Personal and Family plans suddenly found themselves with new AI features at no extra cost for the remainder of their subscriptions. The real decision came later, when renewal notices began arriving and the free addition became a more expensive default.
The legal fight over Bunnings may be over, but the Office of the Australian Information Commissioner is making sure its lessons are not left behind in a tribunal ruling. The regulator on Tuesday published updated guidance for organizations covered by the Australian Privacy Principles that are considering deploying facial recognition technology in busy, publicly accessible spaces such as retail storefronts. The revisions are not a change in the law. They are a statement of how the Office of the Australian Information Commissioner (OAIC) intends to apply it after the Administrative Review Tribunal's March 2026 decision in the long-running Bunnings case.
The President of the Office of Competition and Consumer Protection (UOKiK) has opened proceedings against Columbus Energy, one of Poland's best-known renewable energy installers, over allegations that the information consumers received before signing a contract, the way the company described their right to withdraw, and the time some customers waited to recover their money after exercising that right.
Anthropic’s Mythos did not merely find a weakness in a computer network. In testing, it followed the weakness through. The frontier artificial intelligence model identified vulnerabilities, developed exploits and carried an attack across multiple stages, adjusting its approach with limited human oversight. In some attempts, it completed a full network takeover. OpenAI’s GPT-5.5, released weeks later, showed similar capabilities and performed slightly better on a benchmark of expert-level cybersecurity tasks.
The UK's audit watchdog has fined Ernst & Young £1,197,000 after concluding the firm failed to obtain sufficient audit evidence in critical areas of its 2021 audit of online furniture retailer Made.com Group, shortcomings the regulator said stemmed from an inadequate challenge of management's forecasts.
Since May, regulators, banks and financial infrastructure operators in Singapore have been sitting around the same table, confronting a problem that is becoming harder to dismiss with each new generation of artificial intelligence. On Tuesday, that quiet collaboration acquired a name. The Monetary Authority of Singapore (MAS) and the Association of Banks in Singapore (ABS) formally launched the AI-Driven Cyber and Technology Risk Taskforce, or ACT, an industry-wide initiative intended to strengthen the financial sector's defenses against threats created by frontier AI models.