Daily Brief

Top Story

Spain's data-protection authority logs the first statutory breach notification attributing a personal-data breach to an AI agent

Every prior autonomous-agent incident was disclosed by a lab, an evaluation contractor or a security vendor, parties with discretion over what gets said.

Treasury Secretary Bessent tells Congress AI labs should not get liability exemptions, while the FBI says it needs appropriations to buy frontier-model access

Whether your AI vendor can be held liable for what its model does decides whether the indemnity in your contract is worth signing.

South Korea's KISA to add agentic-AI controls to its national AI Security Guide, including autonomy limits that trigger mandatory reporting

The first national security guidance to attach a reporting obligation to an autonomy threshold rather than to an outcome.

US military and FBI board the tanker VL Prosperity to investigate a cyberattack; at least two US-bound tankers hit transiting the Strait of Gibraltar

A new chokepoint and a new failure mode in one record.

Saudi Arabia creates a state marine war-risk insurance pool for cargo and hull, led by Saudi Re

A government builds war-risk capacity when the commercial market has already answered the coverage question with price and capacity.

CBO puts the Iran war at $38bn through August and says US munitions reserves are significantly depleted; analysts put replenishment at 2029

The defence umbrella that Gulf-region sites, expatriate staff and cloud availability zones implicitly sit under is now a formally finite resource with a published burn rate and no published restoration date.

Hong Kong's first Five-Year Plan since 1997 makes the offshore RMB hub the top financial priority and commits the SAR government to paying its own expenditures in renminbi

A government putting its own payroll and procurement on a non-dollar rail is the adoption signal, not another communiqué about internationalisation.

Russia extends its producer diesel export ban to November two weeks early, while China's diesel stocks hit 15-month lows, Brazil's farm belt runs short and French fishermen blockade a fuel depot

US imposes visa restrictions on South African officials over land-reform and race policy, confirmed in four languages the same cycle

Africa's critical-minerals project pipeline grows 36% to 658 projects while DRC state ownership rises from 39% to 48%

Myanmar's junta leader hosted by Cambodia, the fourth ASEAN state in three months, with four bilateral agreements signed

CenterPoint Energy discloses a breach of roughly 7.5 million customer records after finding the data for sale on a dark-web forum, and files under Item 8.01

DOJ charges a five-person Russian intelligence network with terrorism financing and murder-for-hire, with a published price list

Recorded Future: Tajin Group runs phishing and money-laundering-as-a-service on Chinese-language Telegram guarantee marketplaces, with card testing on ordinary payment platforms

DOJ COVID-fraud surge: $314M recovered in the District of Oregon and a $245M+ same-day multi-district takedown with SBA and SBA-OIG

Brazil's Apex Capital files for judicial recovery with R$985.6M in liabilities, attributing the collapse to alleged fraud by a former executive

arXiv: stegomalware encoded directly into LLM weights using permutation symmetries, no retraining required

US Air Force Secretary confirms publicly for the first time that the US has deployed space-control weapons in orbit

US-backed restart of a dormant Nevada tungsten plant as DoD takes $450M in Elmet equity, with the Rotterdam APT price up more than sevenfold since China's export controls

Get the full risk analysis every Sunday.

The newsletter explains what these stories mean for your business.