News

The machine has the keys. Who’s got the spare? Autonomous agents sound marvellous. Give them a job, let them get on with it, enjoy the productivity. Before we get too carried away, I would quite like to know who gave them permission to spend the money. That slightly less

CoreWeave’s customer concentration and debt-funded expansion give bank boards a live case for combining credit, provider, market and operational AI risk.

METR now has employee-like access to Anthropic systems and staff, creating a stronger model for external evaluation while raising questions about scope and publication rights.

The Bank of England’s bare-metal recovery focus moves AI cyber resilience beyond prevention and asks whether critical banking services can be rebuilt from trusted components.

The Financial Stability Board has finalised 12 sound practices for responsible AI adoption, shifting the bank governance debate from principle to evidence.

The renewed UK-Canada AI security partnership centres on interoperable standards and coordinated evaluation, testing whether assurance evidence can travel without weakening scrutiny.

US authorities imposed more than $1.21 billion in penalties after identifying transaction-monitoring, escalation, due-diligence and sanctions weaknesses, including failures involving the data used by the AML programme.

AvePoint’s October updates reflect a wider enterprise shift from policy catalogues towards discovery, ownership, access review, backup and remediation across AI platforms.

IonQ has agreed an all-stock acquisition of Zero Trust specialist Elisity worth up to $1.3 billion, extending its security proposition beyond cryptography into policy enforcement.

Coordinated US litigation against OpenAI puts alleged harms to young users, safety representations and product design before state courts rather than voluntary governance forums.

The partnership combines Claude, dedicated delivery capability and software integrations, illustrating how large enterprises may buy agentic AI through a governed implementation layer.

Muse Wonder and Muse Code are designed for long-running work with active memory and focus, but Meta says the detailed safety report will follow, putting evidence timing under scrutiny.

Workday’s planned C1.ai acquisition and expansion of Sana connect autonomous work with scoped identities, approvals and action records, offering a clearer model for governing non-human workers.

The rollout shows how frontier model launches are becoming exercises in controlled access, misuse testing and post-release evidence, especially where cyber capabilities are material.

A UK committee hearing has concentrated attention on the powers, independence and timing of model testing, including whether authorities can compel disclosure or stop a release.