Cyber threats against AI systems are a top threat that business and security leaders say they feel least prepared to address, according to PwC’s 2027 Global Digital Trust Insights survey.
Cybersecurity
Posted inArtificial Intelligence
FCA warns AI may reveal more cyber vulnerabilities firms can cope with
The UK’s financial regulator has warned that the rapid pace of AI development is revealing vulnerabilities in firms’ cybersecurity arrangements because their existing controls cannot keep up with the risks new technology can either create or exploit.
Posted inManufacturing
Manufacturers of EU digital products must now report cyber incidents within 24 hours
If you make or sell digital products in the EU, you must now report all exploited vulnerabilities and “severe” incidents that impact their security within 24 hours of becoming aware of them. These rules apply to every sector that produces products with a digital element – from baby monitors to smart watches and apps.
Posted inSurveys & Benchmarking
KPMG report urges CCOs to collaborate and invest to boost operational resilience
Enhanced operational resilience is key to improving responses to interconnected cyber, third-party and regulatory risks, according to KPMG’s 2026 chief ethics and compliance officer survey.
Posted inHealthcare
OSF Healthcare pays $552,250 for HIPAA violations from ransomware breach
Illinois-based OSF Healthcare System has agreed to pay $552,250 to resolve potential HIPAA violations tied to a 2021 ransomware attack.hea
Posted inArtificial Intelligence
New code for AI Act compliance will be ‘de facto’ standard, say experts
The European Union has issued updated guidance to help companies better understand—as well as comply with—the transparency requirements that underpin the bloc’s groundbreaking legislation aimed at ensuring safe AI use.
Posted inEurope
International agents take down major site where criminals traded stolen corporate info
A major online site used by cybercriminals to buy and sell information stolen from corporations and individuals worldwide has been shut down by an international enforcement action, the Department of Justice announced.
Posted inEthics & Culture
An appreciation of CW’s data and research journalist, Aly McDevitt
One of the best things about writing for Compliance Week is reading the fabulous work by my colleagues. For me, CW data and research journalist Aly McDevitt has always stood out as someone whose work in reporting on and writing the Compliance Week case studies is work I have greatly admired.
Posted inEthics & Culture
False Claims Act enforcement themes for 2026
The U.S. Department of Justice touted a record $6.8 billion in False Claims Act (FCA) recoveries in fiscal year 2025, much of that total stems from prior years’ cases and does not necessarily reflect the administration’s current enforcement direction.
Posted inThird Party Risk
Hidden supply-web risks in MSPs and MSSP contracts
Governance failures embedded in standard agreements are amplifying organizations’ exposure to cyber incidents by failing to account for modern supply-chain realities, where third- and fourth-party vendors, cloud platforms, subcontractors create a cascading risk far beyond the contracting entity.