Secure & Responsible Technology

Across the Industry Brief – Issue 13

Rhode Island and Vermont have taken significant steps in regulating AI in mental health, with new laws prohibiting AI from acting as therapists and imposing strict penalties on chatbot operators. Meanwhile, the European Parliament is advancing the Digital Omnibus on AI, delaying high-risk obligations while introducing new prohibitions against harmful AI practices. In the industry, notable talent shifts, such as Nobel laureate John Jumper’s move to Anthropic, signal intensifying competition in AI-for-biology. Discover how these developments could impact organizations and the future of AI in healthcare and beyond.

Assessed Signal – June 2026

On June 12, 2026, a U.S. export control directive suspended foreign national access to Anthropic’s Fable 5 and Mythos 5 systems, causing immediate disruption for organizations with cross-border teams. This followed a June 2 executive order establishing a voluntary federal benchmarking process for frontier models. Meanwhile, Verizon’s 2026 DBIR highlighted that vulnerability exploitation now accounts for 31% of initial access, with attackers leveraging generative AI across numerous techniques. In the enterprise sector, Gartner projects 40% of agentic AI projects will fail by 2027, primarily due to inadequate governance and unclear ownership rather than technical limitations. Organizations must prioritize assurance and governance before scaling to maintain control over these frontier capabilities.

Across the Industry Brief – Issue 12

In a surprising move, the US government has issued an export control directive that bars all foreign nationals from accessing Anthropic’s advanced AI models, Fable 5 and Mythos 5, leading the company to disable these models worldwide. This decision, prompted by concerns over a potential jailbreak technique, highlights the fragility of AI model deployment and the increasing regulatory scrutiny facing the industry. As organizations grapple with compliance and continuity risks, the implications of this directive extend far beyond Anthropic, signaling a new era of challenges for AI developers and users alike. Read more to understand the full impact!

Across the Industry Brief – Issue 11

On June 4, 2026, a pivotal moment in AI regulation unfolded as House lawmakers unveiled the Great American Artificial Intelligence Act, proposing a three-year preemption of state AI development laws. This ambitious draft, backed by bipartisan sponsors, aims to establish a comprehensive governance framework for frontier AI models while igniting fierce debate among labor unions and consumer advocates. Simultaneously, the European Commission introduced its Tech Sovereignty Package, aiming to bolster the EU’s digital independence. As these legislative efforts unfold, organizations must navigate the evolving landscape of AI compliance and governance. Dive into the details of these significant developments!

Across the Industry Brief – Issue 10

On June 2, 2026, President Trump signed a pivotal executive order aimed at enhancing AI cybersecurity, establishing a voluntary framework for developers to share their frontier AI models with the government. This initiative comes amid rising concerns over the vulnerabilities of advanced AI technologies. Meanwhile, Vermont and Connecticut are making strides in consumer privacy legislation, with Vermont’s new bill closely mirroring Connecticut’s successful framework. As states ramp up their regulatory efforts, organizations must stay informed and adapt to the evolving landscape of AI policy and data privacy. Discover the latest developments shaping the future of AI and cybersecurity.

Across the Industry Brief – Issue 9

On May 21, 2026, President Trump postponed a significant executive order aimed at regulating artificial intelligence and cybersecurity, leaving the future of frontier AI model oversight uncertain. Meanwhile, California Governor Gavin Newsom took proactive steps by signing an executive order to prepare for AI-driven workforce disruptions, signaling a shift in labor policies. In Europe, the European Commission published draft guidelines on high-risk AI systems, inviting public consultation. As the AI landscape evolves, organizations must navigate these developments carefully to mitigate risks and seize opportunities. Dive into the latest updates shaping the AI industry and regulatory environment!

Across the Industry Brief – Issue 8

In the latest issue of Across the Industry Brief, critical updates on cybersecurity vulnerabilities and AI advancements are highlighted. The U.S. Cybersecurity and Infrastructure Security Agency has added a severe flaw in Cisco’s SD-WAN to its Known Exploited Vulnerabilities catalog, demanding immediate action from federal agencies. Meanwhile, the Department of Education is prioritizing AI integration in grant programs, reflecting a significant shift in educational funding. Additionally, Microsoft unveils its groundbreaking MDASH security system, discovering multiple vulnerabilities in Windows. Stay informed on these pivotal developments shaping the future of technology and security.

Assessed Intelligence Launches Assessed Institute

Most organizations do not have a compliance problem; they have a coordination problem that manifests as compliance issues. As new frameworks like CMMC and the EU AI Act emerge, separate teams tackle overlapping requirements independently, leading to duplicated efforts and costly gaps. This fragmentation not only inflates costs but also creates inconsistencies that can jeopardize compliance. The solution lies in unifying these efforts under a single control foundation, allowing organizations to implement controls once and demonstrate compliance across multiple frameworks. Discover how to streamline your compliance processes and eliminate unnecessary duplication in your organization.

Assessed Signal – May 2026

Assessed Signal, May 2026

The May 2026 threat picture is defined by AI moving from advisory tool to operational executor across the intrusion lifecycle. Phishing has industrialized at machine speed, deepfake impersonation has crossed into executive trust mechanisms, and the GTG-1002 espionage campaign confirmed autonomous agents can run 80 to 90 percent of tactical operations without human hands on the keyboard. The same agentic architecture is now under attack from the other direction, with EchoLeak (CVE-2025-32711) establishing zero-click prompt injection as a documented production vulnerability class. Organizations with identity-bound agent governance, provenance-tracked retrieval pipelines, and continuous adversarial validation will operate in the new environment; those still relying on annual audits and trust-based controls will not.