Skip to content
cisonews.ai

Browse by year · 33 regulatory milestones · 9 incidents

2024 on cisonews.ai

Everything we have on record from 2024. Each page sits under the month its milestone or incident happened, newest first. cisonews.ai launched on September 27, 2026; entries about earlier events were compiled after that from public records and are labelled that way.

December 20243 entries

  1. Regulatory milestoneEUItaly's Garante fines OpenAI 15 million euros over ChatGPT data useItaly's data protection authority closed its ChatGPT probe on 20 December 2024, fining OpenAI 15 million euros for unlawful data processing.
  2. Regulatory milestoneInternationalBrazil's Senate approves AI bill PL 2338/2023Brazil's Federal Senate passed the risk-based AI bill PL 2338/2023 on December 10, 2024, sending it to the Chamber of Deputies.
  3. Regulatory milestoneEUEU Cyber Resilience Act enters into force, reaching software with digital elementsRegulation (EU) 2024/2847 entered into force on 10 December 2024, starting a staged timeline covering network-connectable hardware and software.

November 20243 entries

  1. Regulatory milestoneUS FederalNIST publishes AI 100-4 on reducing risks from synthetic contentNIST's AI Safety Institute publishes AI 100-4, a technical overview of watermarking, provenance and detection tools for synthetic content.
  2. Regulatory milestoneInternationalOWASP releases the Top 10 for LLM Applications 2025 editionOWASP's GenAI Security Project published its 2025 update to the Top 10 for LLM Applications in November 2024, revising prompt injection and agency risks.
  3. Regulatory milestoneUS FederalDHS releases Roles and Responsibilities Framework for AI in Critical InfrastructureDHS publishes a voluntary framework assigning AI safety and security responsibilities across five groups in the critical infrastructure supply chain.

October 20244 entries

  1. Regulatory milestoneUS FederalWhite House issues the National Security Memorandum on Artificial IntelligenceBiden's October 2024 NSM directs US national security agencies to adopt AI quickly while adding cyber, bio and nuclear risk testing duties.
  2. Regulatory milestoneUS StatesNYDFS issues guidance on cybersecurity risks arising from AIOn 16 October 2024 NYDFS issued an industry letter explaining how regulated entities should use 23 NYCRR Part 500 to assess and address AI-related cyber risks.
  3. Regulatory milestoneSingaporeSingapore's CSA publishes Guidelines on Securing AI SystemsCSA's October 2024 guidelines give a lifecycle approach to AI cybersecurity, paired with a living Companion Guide of practical controls.
  4. IncidentDeepfake fraudHong Kong police break up deepfake romance scam syndicateHong Kong police arrested 27 people on Oct. 14, 2024, in a face-swapping deepfake romance and crypto investment scam ring.

September 20247 entries

  1. Regulatory milestoneEUEU AI Pact reaches first signatories as companies sign voluntary pledgesOn 25 September 2024 the European Commission celebrated the first companies to sign AI Pact pledges ahead of AI Act deadlines.
  2. Regulatory milestoneUS FederalFTC launches Operation AI Comply, its first AI-washing enforcement sweepFTC announces five enforcement actions against companies accused of using AI hype to deceive consumers, opening its Operation AI Comply initiative.
  3. Regulatory milestoneUS FederalOMB issues M-24-18 on responsible acquisition of AI in governmentOMB's September 2024 memo told federal agencies how to buy AI responsibly, with phased deadlines through March 2025.
  4. Regulatory milestoneUS StatesTexas AG settles with healthcare AI vendor over hallucination-rate claimsPieces Technologies agreed to disclose its generative-AI accuracy limits after Texas's AG found its advertised hallucination rate was likely inaccurate.
  5. Regulatory milestoneUS FederalGAO Confirms Agencies Met Executive Order 14110's Chief AI Officer MandateGAO's September 2024 report found federal agencies had fully implemented EO 14110 AI management requirements, including appointing Chief AI Officers.
  6. Regulatory milestoneAustraliaAustralia publishes the Voluntary AI Safety Standard with 10 guardrailsAustralia's Department of Industry released the Voluntary AI Safety Standard on 5 September 2024, setting out ten voluntary AI guardrails.
  7. Regulatory milestoneInternationalCouncil of Europe AI Framework Convention opens for signatureThe Council of Europe's AI treaty opened for signature in Vilnius on 5 September 2024, with the EU and the United States among the first signatories.

August 20244 entries

  1. IncidentPrompt injectionSlack AI indirect prompt injection that could pull data from private channelsOn 20 August 2024 PromptArmor disclosed a Slack AI prompt injection flaw that could leak private-channel data; Slack deployed a patch the same day.
  2. Regulatory milestoneUS StatesIllinois amends Human Rights Act to regulate AI in employment decisions (HB 3773)Illinois HB 3773 adds AI discrimination and notice rules to the Human Rights Act, signed August 2024, effective January 1, 2026.
  3. IncidentVulnerabilitySSRF flaw CVE-2024-38206 let attackers reach internal Copilot Studio hostsTenable researchers used an SSRF bypass in Microsoft Copilot Studio to reach internal metadata and database services before Microsoft fixed it.
  4. Regulatory milestoneEUEU AI Act enters into forceRegulation (EU) 2024/1689 entered into force on 1 August 2024, starting staged deadlines for bans, general-purpose AI rules and high-risk obligations.

July 20241 entry

  1. Regulatory milestoneUS FederalNIST publishes Generative AI Profile, NIST AI 600-1On 26 July 2024 NIST published NIST AI 600-1, a Generative AI Profile that applies the AI Risk Management Framework to generative AI risks.

June 20241 entry

  1. Regulatory milestoneUS FederalFINRA issues Regulatory Notice 24-09 on generative AI and LLMsFINRA reminds broker-dealers that existing rules, including supervision and communications rules, apply to generative AI and LLM tools.

May 20247 entries

  1. IncidentCredential exposureUnauthorized access to Hugging Face Spaces secretsHugging Face disclosed on 31 May 2024 that it had detected unauthorized access to Spaces secrets and revoked a number of HF tokens stored in them.
  2. Regulatory milestoneSingaporeSingapore finalises its Model AI Governance Framework for Generative AISingapore's IMDA and AI Verify Foundation released the final Model AI Governance Framework for Generative AI on 30 May 2024, setting out nine dimensions.
  3. Regulatory milestoneEUCouncil of the EU gives final approval to the AI ActEU ministers approved the AI Act on 21 May 2024, the last legislative step before signature, publication in the Official Journal and entry into force.
  4. Regulatory milestoneInternationalSeoul Declaration and Frontier AI Safety Commitments signed at AI Seoul SummitWorld leaders and 16 AI companies agreed the Seoul Declaration and voluntary Frontier AI Safety Commitments on 21 May 2024.
  5. Regulatory milestoneUS StatesColorado AI Act SB24-205 signed, then delayed and replaced before taking effectColorado enacted SB24-205 on 17 May 2024; SB25B-004 delayed it to 30 June 2026, and SB26-189 repealed and reenacted its provisions in May 2026.
  6. IncidentDeepfake fraudDeepfake impersonation attempt targeting WPP leadershipThe Guardian reported on 10 May 2024 that fraudsters used a voice clone and YouTube footage of WPP executives in a Teams meeting; the attempt failed.
  7. Regulatory milestoneInternationalOECD updates its AI Principles to cover generative AIThe OECD Ministerial Council adopted revisions to the 2019 AI Principles on 3 May 2024, addressing generative AI, safety and information integrity.

April 20241 entry

  1. Regulatory milestoneUS FederalNSA, CISA, FBI and allied agencies publish Deploying AI Systems SecurelyOn 15 April 2024 the NSA AI Security Center, CISA, the FBI and five allied cyber agencies issued joint guidance on securely deploying externally built AI systems.

March 20246 entries

  1. Regulatory milestoneUS FederalOMB issues M-24-10, first government-wide policy on agency AI riskOn 28 March 2024 OMB issued memo M-24-10, requiring Chief AI Officers and safeguards for rights- and safety-impacting federal AI by 1 December 2024.
  2. IncidentVulnerabilityShadowRay: exploitation of exposed Ray AI compute clusters via CVE-2023-48022Oligo reported on 26 March 2024 that attackers had exploited the disputed Ray flaw CVE-2023-48022 to hijack AI compute clusters and steal credentials.
  3. Regulatory milestoneInternationalUN General Assembly adopts resolution on safe, secure and trustworthy AIUNGA adopts a US-led, consensus resolution on safe, secure and trustworthy AI, the Assembly's first text on AI regulation.
  4. Regulatory milestoneEUEuropean Parliament approves the AI Act in plenary voteMEPs endorsed the AI Act on 13 March 2024 by 523 votes to 46, fixing staged dates for bans, codes of practice, general-purpose AI rules and high-risk duties.
  5. Regulatory milestoneUS StatesUtah signs the Artificial Intelligence Policy Act (SB 149)Utah enacts SB 149, requiring generative AI disclosure and creating an Office of AI Policy, the first comprehensive US state AI law.
  6. IncidentSupply chainMalicious machine learning models found on Hugging Face that ran code when loadedJFrog reported in late February 2024 that about 100 models on Hugging Face executed hidden code when loaded, 10 of them truly malicious; Hugging Face removed them.

February 20243 entries

  1. Regulatory milestoneUS FederalFCC declares AI-generated robocall voices fall under the TCPAFCC Declaratory Ruling confirms AI-generated voices in robocalls count as artificial or prerecorded voice under the TCPA.
  2. Regulatory milestoneUKUK publishes government response to its AI regulation white paper consultationDSIT's February 2024 response to the 2023 AI white paper keeps a non-statutory, principles-based approach to regulating AI.
  3. IncidentDeepfake fraudArup deepfake video-conference fraud in Hong KongA Hong Kong finance worker at Arup sent 200 million Hong Kong dollars after a video call with deepfaked colleagues; police described the case in February 2024.

January 20242 entries

  1. Regulatory milestoneEUEuropean AI Office is established within the European CommissionA Commission Decision created the European AI Office on 24 January 2024, entering into force 21 February 2024, to help implement the EU AI Act.
  2. IncidentDeepfake fraudAI-generated robocall impersonated President Biden ahead of NH primaryA robocall used an AI voice clone of President Biden to discourage voting before the 2024 New Hampshire primary, triggering FCC fines and a state cease-and-desist order.