2026-09-16

Spain's data-protection authority logs the first statutory breach notification attributing a personal-data breach to an AI agent

Every prior autonomous-agent incident was disclosed by a lab, an evaluation contractor or a security vendor, parties with discretion over what gets said.

Treasury Secretary Bessent tells Congress AI labs should not get liability exemptions

Whether your AI vendor can be held liable for what its model does decides whether the indemnity clause in your contract is worth anything.

South Korea's KISA to update its national AI Security Guide to cover agentic and physical AI risk

The revised guide adds a risk-management checklist for autonomous and physical AI systems after the July Hugging Face agent-swarm breach; it does not yet define an autonomy threshold or a mandatory-reporting trigger.

US military and FBI board the tanker VL Prosperity to investigate a cyberattack; at least two US-bound tankers hit transiting the Strait of Gibraltar

A new chokepoint and a new failure mode in one record.

Saudi Arabia creates a state marine war-risk insurance pool for cargo and hull, led by Saudi Re

Commercial war-risk premiums on Red Sea and Gulf transits have already priced in the Houthi threat. Riyadh's new pool exists because insurers set that price, not because the underlying risk changed.

CBO puts the Iran war at $38bn through August and says the US has burned through half to two-thirds of its interceptor stockpile, with rebuilding taking at least five years

Gulf-region sites, expatriate staff, and cloud availability zones all assume US military cover is there when they need it. CBO just put a number on how finite that cover is, with no published restoration date.

Hong Kong's first Five-Year Plan since 1997 makes the offshore RMB hub the top financial priority and proposes paying SAR government expenditures in renminbi

A government proposing to put its own payroll and procurement on a non-dollar rail is a stronger adoption signal than another communique about internationalisation.

Russia extends its producer diesel export ban to November two weeks early, while China's diesel stocks hit 15-month lows, Brazil's farm belt runs short and French fishermen blockade a fuel depot

US imposes visa restrictions on South African officials over land-reform and race policy, confirmed in four languages the same cycle

Africa's critical-minerals project pipeline grows 36% to 658 projects while DRC state ownership rises from 39% to 48%

Myanmar's junta leader hosted by Cambodia, the fourth ASEAN state in three months, with four bilateral agreements signed

CenterPoint Energy discloses a breach of roughly 7.5 million customer records after finding the data for sale on a dark-web forum, and files under Item 8.01

DOJ charges a five-person Russian intelligence network with terrorism financing and murder-for-hire, with a published price list

Recorded Future: Tajin Group runs phishing and money-laundering-as-a-service on Chinese-language Telegram guarantee marketplaces, with card testing on ordinary payment platforms

DOJ COVID-fraud surge: $314M recovered in the District of Oregon and a $245M+ multi-district takedown spanning June-September with SBA and SBA-OIG

Brazil's Apex Partners files for judicial recovery with R$985.6M in liabilities, attributing the collapse to alleged fraud by a former executive

arXiv: stegomalware encoded directly into LLM weights using permutation symmetries, no retraining required

US Air Force Secretary confirms publicly for the first time that the US has deployed space-control weapons in orbit

US-backed restart of a dormant Nevada tungsten plant as DoD takes $450M in Elmet equity, with the Rotterdam APT price up more than sevenfold since China's export controls