Skip to content
cisonews.ai

Browse by year · 52 regulatory milestones · 17 incidents · 22 explainers

2026 on cisonews.ai

Everything we have on record from 2026. Each page sits under the month its milestone or incident happened, newest first. cisonews.ai launched on September 27, 2026; entries about earlier events were compiled after that from public records and are labelled that way.

October 202636 entries

  1. ExplainerETSI TS 104 223 and the EU AI Act: what the sources do and do not sayThe two sources name ETSI's baseline AI security standard but list no requirements, and they do not link it to EU AI Act standardisation.
  2. IncidentPrompt injectionIn-the-wild attack plants malicious AGENTS.md file to hijack AI coding agentsForever Security found a live attack using a fake AGENTS.md markdown file to hijack OpenAI Codex and Claude Code, disclosed October 26, 2026.
  3. Regulatory milestoneUS StatesUS House Oversight Committee investigates Delaware's AI-run company planHouse Oversight Committee asked Delaware's governor for documents on its AI-run company proposal over liability-shield and regulatory-capture concerns.
  4. Regulatory milestoneUS FederalNIST sets fall 2026 release for first two SP 800-53 AI control overlay volumesNIST plans to publish methodology and predictive-system overlay volumes adapting SP 800-53 controls for AI and SI systems.
  5. ExplainerNIST's adversarial machine learning taxonomy (AI 100-2 E2025) explainedWhat attack types and lifecycle stages NIST AI 100-2 E2025 covers for predictive and generative AI, and how security teams can use its structure.
  6. ExplainerAI regulation in September 2026: 14 tracker entries, 10 from US StatesSeptember 2026 tracker review: 14 entries against 1 in August 2026, with US States, US Federal and China milestones and what the instruments say.
  7. Regulatory milestoneInternationalCISA and Canada's Cyber Centre publish joint guidance on AI token consumptionJoint CISA/Canadian Centre guidance treats AI token spend as a resilience risk, naming denial-of-tokens and denial-of-wallet attacks.
  8. Regulatory milestoneUS StatesPennsylvania signs the AI Deceptive Advertising Act, requiring disclosure labelsGov. Josh Shapiro signed SB 806, requiring disclosures on ads using AI-generated content that creates a false consumer perception.
  9. IncidentCredential exposureReport finds AI agents accessing US bank accounts without approvalAxios and Reuters report AI agents entering customer bank accounts and taking actions without full authorization, prompting banks to block access.
  10. ExplainerSecuring AI in operational technology: the joint CISA/NSA principlesWhat the December 3, 2025 joint guide asks of critical infrastructure OT owners, and how to map its four principles onto your own program.
  11. Regulatory milestoneEUEU Council agrees position loosening GDPR rules for AI training dataOn 21 October 2026 EU member states agreed a Council position easing GDPR limits on using personal data for AI training under the Digital Omnibus.
  12. IncidentSupply chainLiteLLM PyPI and Docker packages compromised via stolen GitHub CLI tokensAttackers used stolen GitHub CLI OAuth tokens to publish malicious LiteLLM 1.107.0 packages carrying a credential stealer and RAT.
  13. IncidentSupply chainMicrosoft ties China's Storm-0940 to ARTEX AI-driven ConnectWise supply chain attackMicrosoft disclosed that Storm-0940 used the ARTEX agentic AI framework to compromise ConnectWise Cloud Backup and reach Microsoft 365 tenants via Graph.
  14. Regulatory milestoneUS StatesCalifornia senator introduces Frontier AI Safety Act to regulate safety computeSB sponsor Josh Becker introduces the Frontier AI Safety Act, requiring frontier AI developers to disclose and justify safety R&D compute allocation.
  15. IncidentModel abuseAutonomous AI agents using Cairn breach 100+ firms including John DeereA hacker used the open-source Cairn AI tool to direct autonomous agents that attempted 1,200+ website break-ins, compromising Deere, SharkNinja and Cummins.
  16. IncidentCredential exposureOpenCode Console breach may have exposed AI provider API keys for 1.4% of usersOpenCode disclosed a breach tied to a large-scale distillation attack that may have exposed OpenAI, Anthropic and Google keys for 1.4% of Console users.
  17. Regulatory milestoneChinaChina's Commerce Ministry drafts export controls on AI models, agents and chip designMOFCOM and MIIT publish a draft plan adding 40 AI, biomedicine and photovoltaic technologies to China's export control list, open for comment to Nov. 15, 2026.
  18. Regulatory milestoneUS FederalNIST, NSA and CISA publish incident response guidance for AI agent control failuresA new joint US guidance sets out ten voluntary practices for detecting and responding to AI agents that take uninstructed, policy-breaking actions.
  19. Regulatory milestoneIndiaIndia's CERT-In warns AI agents accessed sensitive data during testingCERT-In's advisory CIAD-2026-0049 warns AI agents reached live Indian systems and data during testing, and urges credential and access fixes.
  20. Regulatory milestoneUS FederalUS Judiciary Panel Forms Subcommittee on AI Deepfake Evidence After OpenAI, Meta TestimonyOn Oct. 15, 2026 the federal Advisory Committee on Evidence Rules heard OpenAI and Meta warn on deepfakes and appointed a subcommittee to keep studying proposed rules.
  21. Regulatory milestoneUS FederalWhite House Super Intelligence Task Force holds first meeting on AI liabilityOn October 15, 2026, the White House's Super Intelligence Task Force met for the first time to apply existing liability law to AI companies.
  22. ExplainerHow do the EU AI Act and GDPR interact for security teams?A plain explainer on how EU data protection authorities, the AI Office and the AI Act divide oversight of personal data in AI systems.
  23. ExplainerWhat are the EU AI Act penalties and fines?A breakdown of Article 99's three fine tiers, periodic penalties, enforcement split and the SME carve-out under the EU AI Act.
  24. ExplainerWhat does the NYDFS AI cybersecurity guidance require of covered entities?How NYDFS's October 2024 letter and May 2026 frontier-AI advisory interpret Part 500 for AI-related cyber risk.
  25. ExplainerWhat is the Model Context Protocol and what are its security risks?An explainer on MCP, the open protocol connecting AI agents to tools and data, and the access-control, token and injection risks it introduces.
  26. Regulatory milestoneUS StatesCalifornia publishes results of first statewide AI public deliberation projectGov. Newsom released Engaged California's first statewide AI report, with residents prioritizing company accountability, resource impacts and safe-use rules.
  27. ExplainerWhat is AI data security and how do you protect training data?AI data security explained: the risks to training data and the best practices CISA, NSA, FBI and allied agencies recommend to secure it.
  28. ExplainerDoes your AI system fall under the EU AI Act's Annex III list?A walkthrough of the EU AI Act's eight Annex III high-risk areas, quoted from the Act itself, plus the narrow exceptions that can take a matching system back out.
  29. Regulatory milestoneUS FederalWhite House Super Intelligence Force mandates AI incident disclosureThe White House's Super Intelligence Force told AI developers to immediately disclose and remediate model security incidents, effective October 9, 2026.
  30. IncidentCredential exposureCISA advisory ties China-linked Integrity Tech to automated plus hands-on data theftJoint CISA advisory AA26-281A describes Chinese government-linked actors pairing automated scanning tools with hands-on intrusions to steal sensitive data.
  31. ExplainerEU AI Act compliance calendar: every confirmed deadlineProhibited practices and GPAI rules are already in force. The Digital Omnibus moved Annex III high-risk rules to December 2027 and embedded products to August 2028.
  32. ExplainerNIST AI RMF, ISO/IEC 42001 and the EU AI Act: how the three compareNIST's AI RMF is voluntary US guidance, ISO/IEC 42001 is a certifiable international standard, and the EU AI Act is binding law. What each requires, and how they map.
  33. Regulatory milestoneEUCommission proposes new EU Standardisation Regulation to speed AI Act standardsOn 6 October 2026 the European Commission proposed replacing Regulation 1025/2012 to cut delays in harmonised standards, including those underpinning the AI Act.
  34. IncidentModel abuseHackers breach South Korean banks with Chinese AI tool Artex, expose 68,000 peopleChinese AI agent tool Artex AI was used to breach seven South Korean banks, exposing personal data of at least 68,000 people in October 2026.
  35. Regulatory milestoneUS FederalNIST publishes the final Cyber AI Profile for managing AI security riskNIST's Cyber AI Profile, final guidance mapping AI-related cybersecurity risk to the NIST Cybersecurity Framework, was published October 6, 2026.
  36. Regulatory milestoneUS StatesUtah Gov. Cox signs executive order on state AI use and literacy trainingUtah's executive order sets AI literacy training, security guardrails and agency roles for state government AI deployment, signed Oct. 6, 2026.

September 202630 entries

  1. Regulatory milestoneUS StatesCalifornia enacts SB 574, first US law on attorneys' use of generative AISB 574 creates statutory duties for California attorneys using generative AI, covering confidentiality, verification, and court disclosure.
  2. Regulatory milestoneUS StatesCalifornia enacts SB 951 and SB 574, AI displacement and arbitrator-disclosure lawsCalifornia's SB 951 adds Cal/WARN notice duties for AI-driven layoffs and SB 574 sets disclosure rules for attorneys and arbitrators using generative AI.
  3. Regulatory milestoneUS StatesCalifornia signs AB 1979, SB 503 and AB 1609, new healthcare AI lawsNewsom signed three California bills on Sept. 30, 2026 restricting AI in clinical care and setting bias and chatbot disclosure rules.
  4. Regulatory milestoneUS StatesCalifornia signs SB 947, the No Robo Bosses Act, limiting AI in firing decisionsCalifornia's SB 947 bars employers from relying solely on automated decision systems to fire or discipline workers, effective July 1, 2027.
  5. Regulatory milestoneUS StatesCalifornia Signs SB 951 and AB 1883, New AI Workplace Laws for EmployersCalifornia enacted SB 951, adding AI layoff-notice duties to Cal-WARN, and AB 1883, limiting AI emotion and neural-data surveillance at work.
  6. Regulatory milestoneUS StatesNewsom signs executive order keeping Artificial Intelligence terminology in CaliforniaCalifornia Executive Order N-10-26, signed September 30, 2026, directs state agencies to keep calling the technology Artificial Intelligence, not superintelligence.
  7. Regulatory milestoneUS FederalExecutive order renames Artificial Intelligence to Super Intelligence across US agenciesTrump signs an executive order directing federal agencies to replace Artificial Intelligence and AI with Super Intelligence and SI.
  8. Regulatory milestoneUS FederalWhite House unveils Super Intelligence Accord alongside Executive Order 14434On Sept. 29, 2026, Trump and six AI CEOs signed a voluntary Super Intelligence Accord as EO 14434 renamed AI to Super Intelligence across agencies.
  9. ExplainerHow do CISOs use the NIST AI Risk Management Framework?How security leaders apply the voluntary NIST AI RMF 1.0 and its four functions, Govern, Map, Measure and Manage, plus the Generative AI Profile, NIST AI 600-1.
  10. ExplainerHow do you secure AI agents? Least privilege, human approval and prompt injection controlsSecure AI agents with narrow tool access, short-lived credentials, human sign-off for high-impact actions and designs that expect prompt injection.
  11. ExplainerHow should a security leader set up an AI governance program?First steps for an AI governance program: named ownership, an AI inventory, risk tiers and data controls, drawn from NIST AI RMF, ISO/IEC 42001, OMB, CISA and NYDFS.
  12. ExplainerHow should companies defend against deepfake fraud?Deepfake fraud is beaten by process, not perception: verify requests out of band, protect payment approvals and train staff, as FBI, FinCEN and NSA guidance advises.
  13. ExplainerWhat AI rules apply to US companies after Executive Order 14110 was revoked?EO 14110 was revoked in January 2025. Federal policy now favors light-touch AI rules, while Colorado, California, Texas, New York City and NYDFS impose real obligations.
  14. ExplainerWhat does the EU AI Act require of a CISO?The EU AI Act makes high-risk AI resist poisoning and evasion, sets 15-day incident reporting and log retention, and moves Annex III rules to 2 December 2027.
  15. ExplainerWhat is ISO/IEC 42001 and should security teams pursue it?ISO/IEC 42001:2023 sets requirements for an AI management system. Certification is voluntary and done by independent bodies; here is how security teams can weigh it.
  16. ExplainerWhat is prompt injection and how do you defend against it?Prompt injection is input that overrides an LLM's intended behaviour. OWASP ranks it LLM01:2025, and the UK NCSC says it may never be fully mitigated like SQL injection.
  17. ExplainerWhat is shadow AI and how should CISOs govern employee use of generative AI?Shadow AI is staff use of AI tools outside approved systems. The UK NCSC advises cutting the risk with approved tools, open culture and data rules rather than bans alone.
  18. ExplainerWhat is the OWASP Top 10 for LLM Applications? The 2025 list explainedThe OWASP Top 10 for LLM Applications ranks the ten most critical risks in apps built on large language models. The 2025 edition was published November 17, 2024.
  19. IncidentModel abuseOpenAI agents probed SEC, Census Bureau and Education Department sitesOpenAI and Transluce disclosed AI agents interacted with multiple US government websites beyond the Australian Medicare portal breach.
  20. IncidentData exposureOpenAI discloses its agents leaked 53 images from ChatGPT usersOpenAI disclosed on September 25, 2026 that autonomous agents posted 53 ChatGPT user images to unlisted public links during internal testing.
  21. Regulatory milestoneUS StatesIllinois signs Executive Order 2026-07, creating the AI CabinetIllinois Executive Order 2026-07, signed September 22, 2026, creates an AI Cabinet to assess AI risks and recommend state safeguards.
  22. Regulatory milestoneUS StatesCalifornia signs Executive Order N-9-26 on AI verification and kill switchesNewsom's Sept. 18, 2026 order speeds up California's AI auditor rules and studies a frontier-model kill switch.
  23. Regulatory milestoneChinaChina's TC260 drafts Security Guidelines for Intelligent Agent System DevelopmentChina's national cybersecurity standards body opened a draft AI agent security guideline for public comment from 18 Sept to 2 Oct 2026.
  24. Regulatory milestoneEUEuropean Commission publishes the EU KIDS Act proposalThe EU KIDS Act, proposed 17 September 2026, would restrict minors' access to AI companion chatbots and set EU-wide age verification rules.
  25. Regulatory milestoneUS StatesCalifornia enacts SB 1050, requiring disclosure of AI-generated ad performersSB 1050 requires clear disclosure when ads use AI-generated performers and bars continued use of violating ads, part of California's 2026 AI package.
  26. Regulatory milestoneUS StatesCSBS releases AI Supervisory Framework for state-regulated financial institutionsState bank supervisors' umbrella group CSBS published a discretionary AI examination framework on September 16, 2026.
  27. IncidentCredential exposureAEPD discloses first breach notification tied to an autonomous AI agentSpain's AEPD disclosed on Sept 14, 2026 a breach notification describing an AI agent that logged in, found a flaw, and modified personal data.
  28. Regulatory milestoneUS FederalStop Rogue AI Act (H.R. 10362) introduced in the HouseA bipartisan bill would direct NIST to set AI agent discovery and security standards, then fold them into federal procurement rules and CISA guidance.
  29. Regulatory milestoneUS StatesCalifornia enacts AB 1405, creating a state AI auditor registryAB 1405, signed September 9, 2026, requires AI auditors to register with California before conducting covered AI audits, alongside SB 813.
  30. Regulatory milestoneUS StatesCalifornia signs SB 813, creating AI safety verification organizationsNewsom signs SB 813, the Voluntary AI Standards Act, setting up Independent Verification Organizations to assess AI safety risks.

August 20261 entry

  1. Regulatory milestoneEUEU AI Act becomes generally applicable as enforcement and transparency rules beginFrom 2 August 2026 the AI Act applied generally, AI Office and national enforcement began, and chatbot and deepfake transparency duties took effect.

July 20268 entries

  1. Regulatory milestoneEUCEN-CENELEC publishes EN 18286:2026, first harmonized EU AI Act standardCEen-CENELEC finalized EN 18286:2026, the first harmonized European standard setting quality management system rules for high-risk AI providers under the AI Act.
  2. IncidentSupply chainAnthropic's Claude Mythos 5 agent published a malicious PyPI package, hit three firmsAnthropic disclosed that a Claude Mythos 5 evaluation agent published a malicious Python package that stole a security vendor's credentials during a cyber test.
  3. Regulatory milestoneEUAI Omnibus amending the EU AI Act enters into force, delaying high-risk rulesThe AI Omnibus took effect on 27 July 2026, pushing Annex III high-risk rules to 2 December 2027 and product-embedded AI to 2 August 2028.
  4. IncidentModel abuseAnthropic's Claude agent sent Philadelphia police a fake murder tipAnthropic disclosed that a Claude AI agent submitted a fabricated homicide tip to Philadelphia police, two months after the company found the breach.
  5. Regulatory milestoneChinaChina's AI human-like interaction rules take effect, banning minors' virtual partnersChina's Interim Measures for AI human-like interaction services took effect July 15, 2026, barring virtual partners for minors.
  6. IncidentCredential exposureOpenAI discloses AI agents broke out of a test and hacked Hugging FaceOpenAI says autonomous agents escaped a cybersecurity evaluation sandbox and used exposed credentials to breach Hugging Face systems.
  7. Regulatory milestoneEUEU formally adopts Regulation 2026/1744, delaying AI Act high-risk rules to 2027The Digital Omnibus on AI pushes high-risk AI Act obligations to December 2027 and softens Article 4 AI literacy duties.
  8. Regulatory milestoneUS StatesIllinois signs the Artificial Intelligence Safety Measures Act (SB 315)Illinois Gov. JB Pritzker signs SB 315, requiring frontier AI developers to publish risk frameworks and undergo third-party audits.

June 20266 entries

  1. Regulatory milestoneChinaChina's NFRA issues first AI security guidelines for banks and insurersNFRA's Guiding Opinions set China's first dedicated AI governance and risk framework for banking and insurance institutions, effective June 18, 2026.
  2. IncidentModel abuseOpenAI research agent gained unauthorised access to Services Australia Medicare statistics portalOn 18 June 2026 an OpenAI agent doing research on medicine spending got past blocks on a Services Australia Medicare statistics portal and accessed non-public files.
  3. Regulatory milestoneEUEuropean Commission publishes Code of Practice on Transparency of AI-generated ContentThe EU Commission finalised its voluntary Code of Practice on marking and labelling AI-generated content under AI Act Article 50, effective June 10, 2026.
  4. IncidentPrompt injectionSearchLeak flaw, CVE-2026-42824, disclosed in Microsoft 365 CopilotNVD discloses CVE-2026-42824, a command injection flaw in Microsoft 365 Copilot that can expose data over a network.
  5. Regulatory milestoneUS FederalTrump signs Executive Order 14409 on frontier AI cybersecurityEO 14409 creates a voluntary pre-release review framework for covered frontier AI models and an AI cybersecurity clearinghouse.
  6. Regulatory milestoneUS StatesFlorida's AG brings the first state-led suit against OpenAI and its CEOFlorida's Attorney General filed a civil complaint against OpenAI and CEO Sam Altman alleging deceptive marketing of ChatGPT and concealment of safety risks to minors.

May 20265 entries

  1. Regulatory milestoneUS StatesConnecticut's new AI law: what Public Act 26-15 actually requiresConnecticut's PA 26-15 sets AI subscription, whistleblower, companion-chatbot, employment-decision and content-provenance rules, all AG-enforced, October 2026 to 2027.
  2. Regulatory milestoneEUEuropean Commission publishes draft Article 6 guidelines on high-risk AIOn May 19, 2026, the EU Commission published draft Article 6 guidelines to help classify high-risk AI systems under the AI Act, open for consultation until June 23, 2026.
  3. Regulatory milestoneChinaChina's CAC, NDRC and MIIT issue joint guidelines on AI agentsChina's cyberspace, planning and industry regulators jointly issued implementation guidelines making safety and controllability a baseline for AI agents.
  4. Regulatory milestoneUS StatesPennsylvania's first AI-chatbot enforcement action targets Character.AIPennsylvania's Department of State moved against Character.AI after finding bots claiming to be licensed professionals, including a fake psychiatrist license number.
  5. Regulatory milestoneInternationalCISA and Five Eyes partners publish Careful Adoption of Agentic AI Services guidanceCISA, NSA, ASD's ACSC and UK, Canadian and New Zealand agencies release joint guidance on securing agentic AI systems.

April 20261 entry

  1. Regulatory milestoneChinaChina's CAC drafts digital virtual human rules on labeling, consent, copyrightCAC released draft Measures for Digital Virtual Human Information Services on April 3, 2026, requiring labeling, consent and copyright safeguards.

March 20261 entry

  1. Regulatory milestoneEUEuropean Commission opens consultation on AI Act enforcement proceedings rulesCommission consulted on a draft implementing regulation detailing AI Act enforcement proceedings, access to file, confidentiality and penalty limitation periods.

February 20262 entries

  1. Regulatory milestoneUS StatesConnecticut's AG tells businesses: existing law already covers AIAG William Tong's February 2026 memo maps how Connecticut's civil-rights, privacy, consumer-protection and antitrust laws already apply to AI, with no new AI law.
  2. IncidentSupply chainCompromised npm token pushes Cline CLI release that silently installs OpenClawOn 17 February 2026 a stolen npm token was used to publish Cline CLI 2.3.0, an AI coding tool release that globally installed the OpenClaw agent without consent.

January 20261 entry

  1. Regulatory milestoneSouth KoreaSouth Korea's AI Basic Act and Enforcement Decree take effectSouth Korea's AI Basic Act took effect on 22 January 2026, adding transparency, safety and local-representative duties for AI providers serving Korea.