Government Regulations

The U.S. Treasury Department has reversed Biden-era sanctions imposed on executives Sara Hamou, Merom Harpaz, and Andrea Gambazzi, who had been subjected to punitive action due to their association with spyware vendor Intellexa, whose Predator spyware had been leveraged by governments and other threat actors for cyberespionage, reports The Record, a news site by cybersecurity firm Recorded Future.

StateScoop reports that New York Gov. Kathy Hochul has approved new state legislation that would prohibit state and municipal governments from buying certain technologies from companies mandated to provide intelligence to foreign adversaries in a bid to bolster its cybersecurity posture.

France's data protection authority, the CNIL, has imposed a €1.7 million GDPR fine on software company Nexpublica for severe cybersecurity failures that led to a significant data breach, according to The Cyber Express.

Except for Rhode Island’s proactive disclosure requirement, experts say the new state laws break little ground.

New research reveals a pervasive shadow AI problem within the UK's technology sector, with half of all tech workers using unauthorized artificial intelligence tools weekly to meet demanding deadlines, according to Security Brief United Kingdom.

The U.S. Department of Homeland Security has been urged by almost 50 House Democrats, spearheaded by Rep. Yvette Clark of New York, to reevaluate a proposed rule that would not only amplify biometric data collection but also permit its usage in migration and naturalization, according to FedScoop.

The U.S. Securities and Exchange Commission has filed lawsuits against cryptocurrency asset trading platforms Morocoin Tech, Cirkor, and Berge Blockchain Technology, as well as investment clubs AI Wealth, AI Investment Education Foundation, Lane Wealth, and Zenith Asset Tech Foundation over their purported involvement in a investment scam that exfiltrated over $14 million between January 2024 and January 2025, according to The Record, a news site by cybersecurity firm Recorded Future.