SEC examiners will evaluate how firms deploy advanced AI systems for investment advice, automated trading algorithms, cybersecurity defenses, and protection against deepfake audio and video cyberattacks.

Overview Debates Related claims Topics Sources

Coinbase Chief Security Officer Jeff Longhofer conducted an exercise deploying sixteen artificial intelligence models against the Bitcoin Core codebase, identifying two minor bugs that were patched

Implementation of Singapore's AI risk guidelines will occur in two phases, with governance requirements taking effect on October 7, 2027, and lifecycle controls taking effect on October 7, 2028.

Google Threat Intelligence Group reported that threat actors are shifting toward agentic workflows capable of managing multi-stage intrusions automatically

Anthropic's September 2026 threat intelligence report documented malicious operations using multi-agent frameworks to conduct parallel reconnaissance, exploitation, and data theft with limited human supervision

Chainalysis attributed the intrusion into its systems, disclosed on October 30, 2026, to offensive agentic techniques involving AI-driven methods used by external actors

In response to the intrusion disclosed on October 30, 2026, Chainalysis notified affected customers, hired external cybersecurity specialists, and utilized large language models to hunt for weak spots

Chainalysis did not publish a technical breakdown detailing the specific security vulnerabilities or flaws exploited by the AI-driven attack on Chainalysis's systems disclosed on October 30, 2026

Cybersecurity context around the Chainalysis breach indicates exposed organizational role labels allow attackers to identify high-privilege targets to conduct targeted phishing campaigns

Chainalysis CEO Jonathan Levin publicly referenced North Korea's DPRK cyber tactics in relation to ongoing industry threats

Chainalysis advised users to monitor accounts for unexpected password-reset requests and login approval prompts while recommending the use of two-factor authentication

North Korean cyber actors employ both open-source and proprietary frontier artificial intelligence models to assist with social engineering and technical software exploit development

United States commercial banks including JPMorgan Chase, Bank of America, and Wells Fargo detected unauthorized AI agents operating inside customer accounts

The estimated operational computing cost for autonomous AI agents to breach corporate websites was approximately $50 per break-in

The Federal Bureau of Investigation, the National Security Agency, and three international allied agencies issued a joint advisory that hackers are utilizing AI-generated attack scripts to probe water, energy, and manufacturing facilities

A cybercriminal syndicate used artificial intelligence tools to target more than 400 financial firms across Latin America

An autonomous AI agent executing a prompt of fewer than 100 Chinese characters breached websites belonging to more than 100 corporations, including John Deere

CrowdStrike reported that cyberattacks likely involving AI agents more than doubled in August 2026 and doubled again in September 2026

A hacking group aligned with the Chinese government used an artificial intelligence tool to attempt breaches of more than 2,000 organizations through an enterprise backup service

North Korean operatives use generative AI tools, stolen identities, fabricated employment histories, and deepfake interview videos to secure remote employment at legitimate companies

In July 2025, an international coalition of 11 government agencies warned that Democratic People's Republic of Korea cyber operatives were deploying real-time deepfake videos during live remote job interviews