Japan’s Financial Services Agency has published a research report examining how financial institutions can strengthen the management of third-party cybersecurity risks, commissioning Deloitte Tohmatsu Cyber to conduct the study.
The Federal Trade Commission has brought an enforcement action against OkCupid and its affiliate Match Group Americas, accusing the companies of quietly sharing users’ personal data with a third party despite telling users otherwise.
Imagine a scenario that unfolds hundreds of times daily across organizations of all sizes and sectors. A senior analyst, facing a tight deadline, pastes the text of a confidential vendor contract into an AI-powered tool. She seeks a quick summary, perhaps highlighting key terms or comparing it with a previous agreement. The tool responds promptly. She gets the information she needs in seconds and moves on.
Australia’s competition watchdog has opened an enforcement investigation into the country’s diesel supply chain, stepping into a politically and economically sensitive space where fuel availability, pricing pressure, and regional livelihoods intersect.
Ericsson has begun notifying individuals that their personal information may have been exposed in a data security incident involving one of the company’s service providers.
The European Commission has proposed new legislation aimed at strengthening Europe’s industrial base while accelerating the shift toward low-carbon manufacturing. But beyond its economic ambitions, the proposal could introduce a new set of governance and compliance considerations for companies operating across strategic industrial sectors.
In June 2025, procurement vendor Chain IQ Group AG was hit by a sophisticated cyberattack. Hackers accessed data from Chain IQ and at least 19 of its clients, uploading files to the dark web shortly afterward, exposing over 130,000 employee records from firms including UBS and Pictet. None of those firms had hired the attackers’ actual entry point. They had hired Chain IQ.