Technology policy

CISA issues advisory on Johnson Controls Simplex Incident Manager credential exposure

1 min read11 hours ago

The advisory, issued Aug. 20 2026, warns users of Simplex Incident Manager version 2.01 and earlier of a memory-cleartext credential risk.

Energy

DOE Announces First Advanced Reactor Criticality in U.S.

1 min read19 hours ago

Antares Nuclear's Mark-0 microreactor achieved zero-power criticality at Idaho National Laboratory, paving the way for commercial operation from 2027.

Economy

FDIC Issues Reporting Forms for Stablecoin Issuers

1 min readyesterday

Permitted payment stablecoin issuers must use the new weekly and quarterly reporting forms after the comment period ends.

Economy

OCC proposes new reporting forms for permitted stablecoin issuers

1 min read2 days ago

Permitted and foreign payment stablecoin issuers must comment by Aug. 11, 2026 on weekly and quarterly reporting requirements

Economy

OCC proposes AML and sanctions rules for permitted payment stablecoin issuers

1 min read2 days ago

The rule would bind all OCC-jurisdictional stablecoin issuers and is open for comment until July 24, 2026

Economy

SEC proposes Regulation Crypto Assets framework for crypto offerings

1 min read2 days ago

The proposal, released Aug. 18, 2026, binds crypto issuers seeking U.S. capital and investors during the 60-day comment window.

Economy

Governor Waller Sets Digital-Asset Focus for Fifth U.S. Dollar Conference

1 min read2 days ago

The Federal Reserve's fifth conference on the international roles of the dollar will examine stablecoins and blockchain impacts beginning today.

Economy

Fed unveils modernization principles for bank supervision

1 min read2 days ago

U.S. banks of all sizes will be subject to new risk-based capital rules and supervisory operating principles as the Fed finalizes its 2026 Basel III proposal.

Economy

Fed releases 2025 Small Business Credit Survey data on AI adoption

1 min read2 days ago

Survey shows nearly half of small firms use AI and 71% report productivity gains, effective immediately for researchers and policymakers.

Economy

Fed Vice Chair urges banks to follow new AI guidance for inclusion

1 min read2 days ago

U.S. banks must consider the Financial Stability Board's AI consultation as supervisory expectations, with comments due by July 22

Economy

Fed Holds Rates Steady as Inflation Risks Outweigh Employment Concerns

1 min read2 days ago

The rate hold binds all banks and financial institutions, with Governor Cook warning of heightened inflation pressure from AI spending and global shocks.

Economy

OCC proposes new information collection for payment stablecoin issuers

1 min read2 days ago

The notice requires businesses seeking PPSI status or foreign stablecoin registration to submit applications under the GENIUS Act, with comments due Sept. 25, 2026.

Economy

Treasury proposes rules restricting payment stablecoin issuance and sales

1 min read2 days ago

The proposed regulations bind U.S. issuers, digital asset service providers and foreign stablecoin issuers, with key prohibitions taking effect July 18, 2028.

Defense

President imposes 100% duty on heavy unmanned aircraft systems

1 min read2 days ago

Importers of UAS over 25 kg and related components face a 100% duty, with a 25% duty on lighter systems and certain parts taking effect 180 days after Aug. 13, 2026.

Technology

President imposes 15% duty and price floor on polysilicon imports

1 min read3 days ago

Importers of polysilicon and its derivatives must pay a 15 percent ad valorem duty and adhere to a new minimum-import-price program effective Aug. 6, 2026.

Foreign policy

President Extends Export Control Emergency for 1 Year

1 min read3 days ago

U.S. exporters and entities subject to the Export Administration Act are bound by the extension effective August 17, 2026.

Elsewhere

What other outlets are reporting on this beat. We link out; we do not republish.

US says hackers are targeting vulnerable water systems with the help of AI
Amidst a spate of ongoing cyberattacks targeting water systems across the country, the U.S. government’s security agencies are warning that hackers are actively breaking into Siemens devices used in critical infrastructure. U.S. cybersecurity agency CISA, the FBI, and the National Security Agency, among others, said on Wednesday that hackers are targeting “all” Siemens S7 programmable logic controllers, which are devices used for controlling automated physical processes in energy, water systems, manufacturing, and agriculture. CISA said the attacks are part of broader activity targeting water supply and wastewater systems around the United States. The agency said that the disruption could result in downtime, safety incidents, or equipment damage to critical infrastructure that relies on these devices. The agencies said the hackers are using AI to generate exploit scripts that rely on publicly available information to find and exploit vulnerable programmable logic controllers that are running out-of-date software or are otherwise poorly secured. CISA has long warned owners of critical infrastructure to keep these devices disconnected from the internet, and officials have acknowledged that rural communities are often the most affected because these systems service large geographic areas. An incident response professional who works with critical infrastructure told TechCrunch that it was noteworthy that the hackers are using AI to identify and target vulnerable programmable logic controllers, as well as to understand how these devices work. But he cautioned that these devices are already highly vulnerable to begin with. This is the latest warning from CISA following a series of cyberattacks by suspected Iranian hackers targeting U.S. water suppliers and wastewater providers in recent months. CISA said the attacks have escalated since Iranian hackers first targeted internet-connected systems used in critical infrastructure. Officials across the U.S. have reported intrus
TechCrunch 16 hours ago
CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability CVE-2026-72530 TrueConf Server Code Injection Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied. While BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria. Aware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA’s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.
CISA advisories 17 hours ago
Hackers Using AI to Target Siemens PLCs in Critical US Sectors
Several government agencies in the United States have issued a joint cybersecurity advisory warning critical infrastructure organizations about hacker attacks targeting Siemens programmable logic controllers (PLCs). According to the NSA, CISA, FBI, EPA, and DOE, the hackers are scanning the internet to identify exposed PLCs and developing exploits that could cause serious disruption to industrial processes. Other potential impacts include equipment damage, safety incidents affecting workers, compromise of sensitive data, and cascading effects on supply chains, associated facilities, and business operations. The unidentified threat actors have targeted sectors such as energy, critical manufacturing, water and wastewater, food and agriculture, chemical, and commercial facilities. Targeted devices include the S7-200, S7-300, S7-400, S7-1200, and S7-1500 series; for most of them, regardless of the CPU variant. The agencies said the attackers are using AI to create exploitation scripts for initial access, credential access, DoS attacks, and other purposes. The hackers can also exploit known vulnerabilities affecting the targeted PLCs. Open source industrial automation libraries such as snap7.dll and python-snap7 are being combined with AI-made scripts to create malicious tools that mimic legitimate OT monitoring software. These tools enable the attackers to tamper with the memory of the targeted Siemens PLC, as well as configuration data and ladder logic programs.Advertisement. Scroll to continue reading. The advisory notes: “Using AI to generate exploitation scripts represents an evolution in threat actor capabilities, dramatically reducing the technical expertise and time required to develop working ICS exploitation scripts and malicious tools. In addition, AI enables adversaries to rapidly leverage additional attack vectors and adapt to defensive measures. Threat actors can easily collect public information about vulnerabilities and weaknesses, find exposed and exploi
SecurityWeek 22 hours ago
Self-Regulatory Organizations; The Nasdaq Stock Market LLC; Notice of Filing and Immediate Effectiveness of Proposed Rule Change To Amend the Exchange's Connectivity Schedule and Discontinue a Previously Proposed Offering
[Federal Register Volume 91, Number 160 (Thursday, August 20, 2026)] [Notices] [Pages 53918-53920] From the Federal Register Online via the Government Publishing Office [www.gpo.gov] [FR Doc No: 2026-16945] ----------------------------------------------------------------------- SECURITIES AND EXCHANGE COMMISSION [Release No. 34-106142; File No. SR-NASDAQ-2026-066] Self-Regulatory Organizations; The Nasdaq Stock Market LLC; Notice of Filing and Immediate Effectiveness of Proposed Rule Change To Amend the Exchange's Connectivity Schedule and Discontinue a Previously Proposed Offering August 17, 2026. Pursuant to Section 19(b)(1) of the Securities Exchange Act of 1934 (``Act''),\1\ and Rule 19b-4 thereunder,\2\ notice is hereby given that on August 14, 2026, The Nasdaq Stock Market LLC (``Nasdaq'' or ``Exchange'') filed with the Securities and Exchange Commission (``SEC'' or ``Commission'') the proposed rule change as described in Items I, II, and III, below, which Items have been prepared by the Exchange. The Commission is publishing this notice to solicit comments on the proposed rule change from interested persons. --------------------------------------------------------------------------- \1\ 15 U.S.C. 78s(b)(1). \2\ 17 CFR 240.19b-4. --------------------------------------------------------------------------- I. Self-Regulatory Organization's Statement of the Terms of Substance of the Proposed Rule Change The Exchange proposes to (1) amend Rule General 8, Section 1(b) to remove certain fiber optic-delivered market data offerings and certain discontinued wireless connectivity services; (2) amend Equity 7, Section 115(c) to delete obsolete QIX-protocol-related text and associated fees for certain Computer to Computer Interface (``CTCI'') Stations; (3) discontinue a certain Proximity-On-Demand (``POD'') offering that was previously proposed but not implemented; and (4) make associated non-substantive, conforming changes.
Federal Register - Securities and Exchange Commission yesterday
Self-Regulatory Organizations; Nasdaq PHLX LLC; Notice of Filing and Immediate Effectiveness of Proposed Rule Change To Amend the Exchange's Connectivity Schedule and Discontinue a Previously Proposed Offering
[Federal Register Volume 91, Number 160 (Thursday, August 20, 2026)] [Notices] [Pages 53907-53909] From the Federal Register Online via the Government Publishing Office [www.gpo.gov] [FR Doc No: 2026-16946] ----------------------------------------------------------------------- SECURITIES AND EXCHANGE COMMISSION [Release No. 34-106143; File No. SR-Phlx-2026-53] Self-Regulatory Organizations; Nasdaq PHLX LLC; Notice of Filing and Immediate Effectiveness of Proposed Rule Change To Amend the Exchange's Connectivity Schedule and Discontinue a Previously Proposed Offering August 17, 2026. Pursuant to Section 19(b)(1) of the Securities Exchange Act of 1934 (``Act''),\1\ and Rule 19b-4 thereunder,\2\ notice is hereby given that on August 14, 2026, Nasdaq PHLX LLC (``Phlx'' or ``Exchange'') filed with the Securities and Exchange Commission (``SEC'' or ``Commission'') the proposed rule change as described in Items I, II, and III, below, which Items have been prepared by the Exchange. The Commission is publishing this notice to solicit comments on the proposed rule change from interested persons. --------------------------------------------------------------------------- \1\ 15 U.S.C. 78s(b)(1). \2\ 17 CFR 240.19b-4. --------------------------------------------------------------------------- I. Self-Regulatory Organization's Statement of the Terms of Substance of the Proposed Rule Change The Exchange proposes to (1) amend Rule General 8, Section 1(b) to remove certain fiber optic-delivered market data offerings and certain discontinued wireless connectivity services, and (2) discontinue a certain Proximity-On-Demand (``POD'') offering that was previously proposed but not implemented. The text of the proposed rule change is available on the Exchange's website at https://listingcenter.nasdaq.com/rulebook/phlx/rulefilings, and at the principal office of the Exchange. II. Self-Regulatory Organization's Statement of the Purpose of, a
Federal Register - Securities and Exchange Commission yesterday
DHS tries to lessen constraints of biometric identity verification
Skip to main content Voting is Now Open for the 2026 FedScoop 50 Awards Vote Now! Members of TSA and the agency's Science and Technology Directorate created a pair of systems to address shortfalls and improve the utility of related tools. Listen to this article 0:00 Learn more. A look at security screening technology at Miami International Airport. (Photo by: Jeffrey Greenberg/Universal Images Group via Getty Images) The Department of Homeland Security is working to mitigate technical challenges tied to biometric identity verification systems, per documents posted Tuesday and earlier this month. DHS built the Biometric Data Collection and Verification System to quantify the performance of data acquired and stored by the agency. The system can identify deficiencies and provides standardized testing measures. In addition to tackling the challenge of identifying failures or inaccuracies in biometric matching algorithms, the BDCVS is meant to speed up data acquisition and delayed retrieval speeds, according to the agency. DHS characterized BDCVS as a “proven system” that improves trust in biometric matching outcomes with applications across screening venues. The agency also developed another new system that aims to address additional shortcomings of typical biometric identification tools used for traveler screening. Biometric verification systems can struggle to properly identify individuals with common first and last names or when birthdays are shared by multiple people, DHS said in its research note. Data input errors, such as misspellings or use of nicknames can also present roadblocks, leading to delays in verification, significant bottlenecks for security personnel and travelers and extended screening process time. In response, researchers from the Transportation Security Administration and the DHS’s Science and Technology Directorate created the Biometric Identity Disambiguation system. BID determines whether an individual matches their identification information
FedScoop 2 days ago
CISA Adds One Known Exploited Vulnerability to Catalog | CISA
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-64849 MLflow Server-Side Request Forgery Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied. While BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria. Aware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA’s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.
CISA advisories 2 days ago
Opening remarks by Vice Chair for Supervision Bowman on sound practices for artificial intelligence
Thank you for the opportunity to join you today to discuss the Financial Stability Board's (FSB) consultation report on Sound Practices for Responsible Adoption of Artificial Intelligence.1 Both Federal Reserve staff and staff from the FSB Secretariat are eager to consider and incorporate feedback on the consultation report so that we can finalize the report later this year as a U.S. G-20 deliverable. Before offering a few thoughts about the report itself, I want to thank Hern Shin Ho from the Monetary Authority of Singapore. Hern Shin led the FSB work stream that produced this report in a very compressed timeframe, and I would also like to recognize and thank the FSB Secretariat staff who supported this work. Finally, I would like to thank our U.S. colleagues at the Treasury and the SEC who also collaborated with us to produce this report. As many of you know, I chair the FSB's Standing Committee on Supervisory and Regulatory Cooperation. In setting out my priorities late last year, I initiated work on a set of sound practices for financial institutions to consider in the responsible adoption and use of artificial intelligence (AI). Since that time, AI has continued to rapidly evolve, and financial institution use of AI has expanded. In light of these ongoing developments, it is important to engage the public to discuss the potential benefits of AI and the risks and other challenges that could arise with its use in our report. The report also describes the ways in which financial institutions, including banks, are already successfully addressing and managing AI use risks, with the broader goal of responsible innovation that benefits financial institutions and their customers. The Federal Reserve has been monitoring bank usage of AI for nearly a decade. We have seen a noticeable increase in the use of AI by banks of all sizes, and we have seen a variety of use cases. Our focus has been on supporting institutions that want to innovate responsibly by leveraging AI too
Federal Reserve speeches July 7, 2026

Newsletter

What the federal government did today, and what it changes - with the document behind every item.

Federal Reserve Opens Comment Period for American Exchange Co. BHC Application

Federal Reserve Issues Change-in-Control Notice for Dunlap Trust Acquisition

Federal Reserve opens comment period on Citizens Bancshares acquisition

Federal Reserve posts change-in-control notice for Anderson family share purchase

Technology policy

CISA issues advisory on Johnson Controls Simplex Incident Manager credential exposure

DOE Announces First Advanced Reactor Criticality in U.S.

FDIC Issues Reporting Forms for Stablecoin Issuers

OCC proposes new reporting forms for permitted stablecoin issuers

OCC proposes AML and sanctions rules for permitted payment stablecoin issuers

SEC proposes Regulation Crypto Assets framework for crypto offerings

Governor Waller Sets Digital-Asset Focus for Fifth U.S. Dollar Conference

Fed unveils modernization principles for bank supervision

Fed releases 2025 Small Business Credit Survey data on AI adoption

Fed Vice Chair urges banks to follow new AI guidance for inclusion

Fed Holds Rates Steady as Inflation Risks Outweigh Employment Concerns

OCC proposes new information collection for payment stablecoin issuers

Treasury proposes rules restricting payment stablecoin issuance and sales

President imposes 100% duty on heavy unmanned aircraft systems

President imposes 15% duty and price floor on polysilicon imports

President Extends Export Control Emergency for 1 Year