357 articles · page 2 of 18
Articles
Week of 8 June 2026
Why World Cup cyber risk sat in the city services residents use every day
The stadiums had federal, state and venue security teams. The cyber risk host cities owned sat somewhere less obvious: in the everyday services around the matches, from parking sites and traffic signals to 911 dispatch and the vendors neighboring cities share.
Week of 1 June 2026
For a small adviser, Regulation S-P compliance is bought before the breach
The amended Regulation S-P reached smaller advisers and broker-dealers on June 3, 2026, and most had no in-house incident team. For them, compliance means buying in advance: people to respond, the evidence to decide, and the means to notify clients.
Week of 25 May 2026
Faster settlement, longer nights: what two years of T+1 tell Europe’s operations desks
America’s move to one-day settlement held because firms automated same-day trade matching and rethought who works when. Europe and the UK follow in October 2027, and the shift patterns and funding arrangements will be harder to build than the software.
Week of 18 May 2026
Searching by balance: how bribed bank insiders choose their targets
Bank insider cases prosecuted in 2026 show bribed employees selling three things: the search that finds wealthy customers, the screens that expose them, and the overrides that open doors. A bank can control all three without first catching the insider.
Week of 11 May 2026
Payer prior authorization APIs will only help the providers ready to call them
By January 2027, federal rules require health insurers to offer electronic doorways for prior authorization. Only health systems that have settled three things first will benefit: which system knocks on the door, whether the chart can answer, and who owns the request.
Week of 4 May 2026
Why a hospital’s accessibility deadline now sits in its vendor contracts
Federal health regulators gave hospitals and other funded providers one more year to make their websites and apps usable by people with disabilities. Since vendors build most of what patients touch online, the smartest use of that year is the contract file.
Week of 27 April 2026
Lower quantum estimates moved signatures up the post-quantum queue
New research in spring 2026 lowered estimates of what a quantum computer would need to break today’s digital locks. For agencies, the urgent part was proof of identity rather than secrecy: certificates, smart cards and device keys take longest to replace.
Week of 20 April 2026
DOJ’s accessibility delay moved one date and put the budget at risk
The Justice Department pushed back its web accessibility deadline by a year, but the standard, the legal duty and residents’ experience stayed exactly where they were. The real risk was to budgets that had leaned on April 2026 to justify the work.
Week of 13 April 2026
Direct File’s quiet exit made retirement part of service design
The first tax deadline without IRS Direct File showed that switching off a public digital service is a piece of design work in its own right, with duties to returning users, to the states that connected to it, and to the public record.
Week of 6 April 2026
When AI made flaws cheap to find, banks’ patch queues set the pace
An AI model that could find serious software flaws prompted a meeting with bank chief executives, yet most banks could not use it. Their test was how fast they could install the fixes that would follow.
Week of 30 March 2026
What payers’ first prior authorization numbers needed from providers to be useful
By March 31, 2026, health plans had to publish how often they approve care requests and how fast. The numbers were rates without volumes, averaged across whole books of business, and only became useful once a health system added its own counts.
Week of 23 March 2026
The tool that checked for supply-chain risk was the supply-chain risk
Hackers turned a trusted security scanner into a password thief, then used what it stole to poison a popular AI gateway. Exposure came down to three things: which tools held the keys, where keys were pooled, and how long stolen keys stayed valid.
Week of 16 March 2026
States could build Medicaid work requirements from the statute before the rule arrived
By spring 2026, states had nine months to put Medicaid work requirements into practice and no federal rule yet. The safe path: build what the law already fixed, make adjustable what the rule would decide, and lock in delivery capacity before it ran out.
Week of 9 March 2026
Stryker’s wipe made a supplier’s admin console a hospital supply risk
The attack on Stryker reportedly turned the company’s own device-management tools into an eraser, with no ransom and no patient data at stake. It reached hospitals through orders and shipments, a dependency most vendor risk reviews never look at.
Week of 2 March 2026
Iran’s war tested banks’ decision rights more than their defenses
After the strikes on Iran, the cyber warnings named old tricks banks already knew how to stop. The harder test was judgment under pressure: what to fix first, who could override a change freeze, and what to ask of the providers banks depend on.
Week of 23 February 2026
What a supply chain label on a U.S. AI vendor asked of agencies and contractors
As the administration moved to exclude Anthropic, agencies and contractors could not wait for the courts. The organizations that coped best asked three calm questions in order: which legal instrument applied, whom and which contracts it reached, and which uses it covered.
Week of 16 February 2026
Why Part 2’s compliance date reached hospitals that never ran a treatment program
On February 16, 2026, addiction treatment records came under the same complaint, breach and penalty system that governs other health data under HIPAA. Because the duties follow the records, general hospitals, health plans and their vendors were covered too.
Week of 9 February 2026
What a second CISA lapse in five months asked state and local security teams to own
Homeland Security’s funding lapsed on February 14, and the nation’s cyber defense agency paused much of its help to states and localities for the second time in five months. Local leaders now had to decide which work to take on, buy or keep borrowing.
Week of 2 February 2026
Vendors repriced in a day, contracts run for years: the buyer’s side of the software selloff
In February, investors dumped software stocks on fears that AI agents would upend the business. Buyers in banks, hospitals and agencies faced a slower-moving problem: contracts priced per human user, locked for years, closed to automation and hard to exit.
Week of 26 January 2026
A two-year telehealth runway is long enough to build on and too short to bet on
After yet another lapse in late January, Congress extended Medicare telehealth through 2027 and hospital at home through September 2030. Health systems can finally plan, but only by sorting each virtual service by how long its legal footing lasts.