Key Highlights The Kik case is the first case that the SEC has brought in litigation that has been contested by the company where there are no allegations of fraud “The SEC has made clear that virtually all ICOs are going to be treated as offerings of securities.” Even if a company is offering ICOs…
This is the first part of an insight series by Tanner De Witt partner, Pádraig Walsh, in which he gives his legal perspective on security token offerings. In this article, he starts from the basics, and asks and answers what are security token offerings and why we should care. What is a token? A token…
When Senator Josh Hawley declared, “If you break it, you pay for it. If you cause damage, you clean it up,” during the September 30 Senate Homeland Security subcommittee hearing, he wasn’t just offering a soundbite. He was drawing a line. The hearing, titled “Rogue AI: Securing the Homeland Against AI Agent Attacks”, marked a…
Critical Vulnerability in Loom Loom, an open-source platform for managing agents on Amazon Bedrock AgentCore Runtime and AWS Strands Agents, is affected by a critical authentication bypass vulnerability, CVE-2026-103956. Detailed in GitHub Security Advisory GHSA-vgmj-998f-r8mp and covered by GBHackers, this flaw allows unauthenticated remote attackers to gain administrative access to the agent control plane. The…
The Security Organization Compromised by Its Own Threat Class On September 21, 2026, the Dutch Institute for Vulnerability Disclosure suffered a breach that carried a structural irony no defender wants to face. DIVD exists to identify, disclose, and coordinate remediation of software vulnerabilities. It was compromised by an autonomous AI agent exploiting two zero-day flaws…
FinCEN withdrew both of them on the same Sunday. On October 5, 2026, the Treasury Department’s enforcement arm for financial crime scrapped a proposed rule requiring financial institutions to report crypto transfers above $10,000 to or from self-custodied wallets, and simultaneously killed a separate proposal that would have classified transactions involving crypto mixers as a…
Critical Path Traversal in Atlassian Data Center Exposes Development Infrastructure The disclosure of CVE-2026-21589 on October 5, 2026, highlights a systemic fragility in the modern development stack. This critical path traversal vulnerability, carrying a CVSS 4.0 score of 9.3, affects eight self-hosted Atlassian Data Center products. While the vulnerability does not grant remote code execution…
Governance models for AI agents have diverged into two distinct operational strategies. The United States remains focused on containment and liability, while China has codified agent deployment as a core pillar of its industrial policy. This shift moves the competitive focus from theoretical safety to the state-directed integration of autonomous systems into the real economy.…
Stripe is no longer playing with crypto as a side project. By committing to a 100-country rollout of its stablecoin card programs by the end of 2026, the company is signaling a hard pivot: stablecoins are being promoted from experimental assets to the bedrock of its global financial stack. This isn’t about consumer novelty; it…
Beijing has spent years attempting to excise cryptocurrency from its domestic economy, yet the latest Chainalysis 2026 Geography of Cryptocurrency Report reveals a persistent, high-velocity alternative. Domestic peer-to-peer (P2P) stablecoin transfers in China reached $104.1 billion annually, facilitated by 18.1 million individual transfers. This activity is not merely a residual habit; it represents a 43-fold…