7-minute read | 1,600 words
What to know this week
Banking watchdogs improve AI scrutiny.
Banking regulators are looking to step up efforts to manage AI risks as concerns grow amid continued reports of AI-related security incidents.
FBI seizes scanning and phishing tools used by Chinese-affiliated hackers.
The FBI and Department of Justice have seized control of a series of scanning and phishing tools that have been reportedly used for disruptive cyber operations.
This week's full stories
Banking watchdogs ramp up AI scrutiny efforts as stability fears mount.
THE NEWS
On Tuesday, reports emerged that several banking regulators are looking to improve their efforts related to containing growing AI risks. These increased efforts are related to concerns regarding the continued growing number of incidents involving AI agents going rogue.
In this effort, three top regulators in the US, including the Federal Reserve, are quizzing banks about their use of advanced AI models. These questions include whether they deploy Chinese-developed technologies, use AI agents in cyber defence, and control increasingly autonomous systems.
Within Europe, supervisors, including those in the Bank of England and the European Central Bank, are concerned with these recent AI incidents. These supervisors are looking to press financial institutions to improve recovery plans.
Additionally, the International Monetary Fund (IMF) also issued a warning that there is “complacency” in global financial markets. The IMF also stated that if there were a major attack impacting a critical service or financial institution it could undermine confidence.
THE KNOWLEDGE
When discussing AI risks, the common conversations revolve around how AI developers are improperly managing risks, and the lack of effective safeguards for securing these models during development. While these conversations are important, another critical aspect of this conversation revolves around how organizations are deploying models into business operations.
For financial institutions, the consequences could extend beyond an individual AI deployment. Given the interconnected nature of financial systems, the integrations of third-party technologies, and the nature of always-available banking services, the impacts of rogue agents could be substantial. Compromises could impact numerous institutions or undermine confidence in financial systems, as noted by the IMF.
The IMF released a report highlighting the greatest risks facing global financial markets. The three risks identified are:
- AI-driven market correction
- Sharper rise in sovereign bond yields
- Cyberattacks
For AI, the IMF emphasized that this technology has become instrumental in supporting the global economy and financial markets, with billions being invested in its various applications. While the impact on the market from AI is undeniable, the IMF also noted that this technology's impacts on attacks and defenses are significant. The IMF wrote:
“Frontier AI models could accelerate both attacks and defenses, increasing the importance of cyber resilience, incident reporting, crisis preparedness, and oversight of critical third-party providers.”
This highlights the challenge facing financial institutions as AI capabilities advance. Organizations must ensure their defenses, recovery plans, and oversight mechanisms can keep pace.
THE IMPACT
As AI capabilities continue to advance, financial institutions are likely to face growing pressure to demonstrate that they can manage the risks associated with deploying these technologies. This could require additional investment in cybersecurity, recovery infrastructure, and oversight of autonomous systems and third-party providers. While these measures could introduce new operational and compliance costs, the challenge for regulators will be ensuring that financial institutions can manage emerging AI risks without imposing requirements that are unnecessarily burdensome or difficult to implement.
Regulators will also need to determine how existing oversight frameworks should adapt to increasingly autonomous AI systems. Requirements designed around traditional software and human decision-making may not fully address systems capable of taking actions at machine speed or interacting with multiple services. More formal expectations for monitoring, incident reporting, and recovery planning could help address these gaps, though overly prescriptive requirements could make it more difficult for institutions to adopt useful AI applications.
The challenge will be balancing AI adoption with financial stability. AI could help banks strengthen fraud detection, improve cybersecurity, and automate complex operations, but those benefits depend on institutions maintaining meaningful oversight of the technology.
FBI seized tools used by Chinese-affiliated hackers.
THE NEWS
On Friday, the FBI and Department of Justice announced that they have seized a group of phishing and scanning tools that have been allegedly used by Chinese-affiliated hackers. According to law enforcement, these tools were used to launch disruptive cyber operations across the globe with the goal of impacting power industries, academia, and critical infrastructure.
The two tools, known as “Microscan” and “FishHub” were used by hackers to exploit targets. More specifically, Microscan was used to target an unnamed power company in the US, Japanese and Polish airports, Taiwanese universities, and Taiwanese critical infrastructure companies. FishHub was used to improve phishing activities and allowed hackers to gain remote access to victim networks.
Jason Bilnoski, the FBI Cyber Division Deputy Assistant Director, emphasized that this hacking operation was both “indiscriminate and reckless,” and stated:
“We aim to remove the capability from the threat actors. We target their infrastructure, their money, and their tools.”
The FBI also stated that the tools were being used by the Integrity Technology Group, a Chinese-based information security company, which the FBI has claimed is the true identity of the state-sponsored hacking group, Flax Typhoon.
Mao Ning, China’s foreign ministry spokesperson, responded to the allegations:
“We urge the US to abandon its double standard and political manipulation, and work with China through equal dialogue and consultation to jointly address cybersecurity risk.”
THE KNOWLEDGE
Flax Typhoon is the latest in a series of high-profile Chinese-affiliated threat actors that have proven to be exceptionally effective in recent years. Though it is unclear exactly how widespread Flax Typhoon’s influence was with these tools and if their operations have been truly disrupted, the FBI’s seizure highlights efforts to disrupt the infrastructure and capabilities that enable these operations.
In recent years, two high-profile incidents occurred where sophisticated Chinese-affiliated threat actors successfully compromised major US targets. After being publicly identified in 2023, Volt Typhoon is a threat actor that looks to target critical infrastructure. In their campaigns, Volt Typhoon was able to gain access to energy, communications, transportation, and water providers with the suspected intent to pre-position itself to enable disruptions during major conflicts.
One year later, in 2024, Salt Typhoon emerged after it was able to successfully compromise several major telecommunications networks within the US. In that effort, Salt Typhoon not only compromised those networks but was reportedly able to target specific government officials, likely gaining access to private communications.
While Flax Typhoon, Volt Typhoon, and Salt Typhoon are distinct threat actors, their reported activities demonstrate the range of risks connected to Chinese-affiliated cyber operations. These include attempts to gain access to and potentially compromise critical infrastructure, disruption of telecommunication networks, and the development of capabilities to support prolonged cyber operations. The FBI’s seizure represents an effort to disrupt one part of this broad effort, though the extent to which it will impact Flax Typhoon’s operations remains uncertain.
THE IMPACT
The FBI’s seizure highlights how disrupting the tools and infrastructure behind cyber operations can serve as a critical component of broader efforts to counter state-linked hacking campaigns. However, the long-term effectiveness of the disruption will depend on whether Flax Typhoon can rebuild these capabilities or if they can shift to alternative methods.
The operation also underscored the continued risks posed by Chinese-affiliated threat actors to critical infrastructure and other sensitive organizations. Previous campaigns have demonstrated how compromises to essential services and telecommunications can create significant risks that extend beyond individual victims or organizations.
For organizations, the seizures should serve as a reminder that law enforcement action cannot fully eliminate these risks, as these tools have already exploited several targets. Maintaining network visibility, addressing vulnerabilities, and hardening defenses remain critical for limiting the impact of these malicious efforts.
This Week's Caveat Podcast: Who’s liable when AI goes rogue?
Dave Bittner and Ben Yelin look at two developing stories. The first involves a new proposal for the House of Representatives, introduced by Representative Lori Trahan, which aims to clarify liability rules for AI agents. The second story involves how an AI-generated video was able to sway a judge after it carried “undue emotional weight.” Additionally, Dave sits down with Garfield Jones, Senior Vice President of Research and Strategy at QuSecure, to share insights into the OMB Memorandum on post-quantum cryptography migrations.
OTHER NOTEWORTHY STORIES
Copeland, Dixell refrigeration also hacked.
What: France’s cybersecurity agency stated that the refrigeration systems of Copeland and Dixell were also hacked during a cyberattack.
Why: On Tuesday, France’s cybersecurity agency confirmed that Copeland’s and Dixell’s systems were successfully hacked during an incident that targeted supermarket refrigerators.
Hackers were able to hit over one hundred grocery stores. Cooperative U CEO Dominique Schelcher stated:
“Targeting equipment essential to the preservation of fresh products and to the food supply of the French people is of extreme gravity and is unprecedented.”
During the incident, hackers raised the temperatures of hundreds of supermarkets to over 122 degrees, causing fires and spoiling food.
OCTOBER 13, 2026 | Source: Reuters
Chinese-linked hackers breached Fiji organization.
What: Chinese-linked hackers compromised a regional organization’s network, according to the US Embassy in Fiji.
Why: On Monday, the US Embassy stated that Chinese-linked hackers compromised a regional network in Suva, Fiji, between July and August 2026. The US Embassy informed the Fijian government of the incident and the affected organization of the suspected breach.
Additionally, the US provided technical recommendations to help secure their networks.
In the breach, hackers were reportedly able to maintain access over several days.
OCTOBER 12, 2026 | Source: Reuters