Governance, Regulation, Legislation, Geostrategies

Inaugural UN Global Dialogue on AI Governance ends with call to turn principles into action before 2027

(DigWatch) The inaugural United Nations Global Dialogue on AI Governance concluded in Geneva with a clear message from governments, industry, civil society, and international organisations: the success of global AI governance will depend not on the principles adopted, but on the concrete actions taken before participants reconvene in New York in 2027. Speakers repeatedly argued that narrowing the widening AI divide, strengthening international cooperation, and embedding human rights into AI governance will require practical implementation rather than new declarations alone. – https://dig.watch/updates/global-dialogue-ai-governance-2026-closing

EU calls for evidence-based AI governance at UN dialogue

(DigWatch) The European Union has called for evidence-based AI governance and stronger international cooperation during the first UN Global Dialogue on AI Governance in Geneva. Speaking on behalf of the EU and its member states, European Commission Director-General Roberto Viola said the meeting was the first dedicated UN gathering on AI governance involving all members of the organisation. The EU said broad stakeholder participation was essential for the relevance of the Dialogue’s outcomes and could help lay the foundation for stronger international cooperation. – https://dig.watch/updates/eu-ai-governance-global-dialogue-statement

AI governance must serve all countries, ministers tell UN Global Dialogue

(DigWatch) Ministers and senior officials from around the world used the third high-level governmental plenary of the UN Global Dialogue on AI Governance to outline national priorities for AI, while calling for stronger international cooperation to ensure AI benefits are shared more equitably. Although countries differed on regulatory approaches, participants broadly agreed that AI governance must be inclusive, human-centric and grounded in multilateral cooperation if it is to narrow rather than deepen global inequalities. Throughout the session, speakers highlighted AI’s transformative potential for healthcare, education, agriculture and public services, while repeatedly warning that unequal access to computing power, infrastructure, talent and financing risks leaving many developing countries behind. – https://dig.watch/updates/global-dialogue-high-level-government-session

UN AI dialogue urges human rights to become the foundation of AI governance

(DigWatch) Human rights must move from the margins to the centre of AI governance if societies are to harness AI without undermining democracy, equality and public trust, speakers argued during the fourth thematic discussion of the UN Global Dialogue on AI Governance. Bringing together governments, UN agencies, civil society, academia and industry, the session examined how AI systems can better respect human rights through stronger transparency, accountability and human oversight. Participants agreed that AI governance should be grounded in international human rights law throughout the entire AI lifecycle, from design and development to deployment and oversight. – https://dig.watch/updates/global-dialogue-protecting-human-rights-session

Global Dialogue highlights need for interoperable AI governance

(DigWatch) Building safe, secure and trustworthy AI requires countries to align their governance frameworks rather than adopt a single global regulatory model, participants heard on the second day of the UN Global Dialogue on AI Governance. Speakers from governments, international organisations, industry and civil society argued that interoperability, backed by common standards, scientific evidence and inclusive participation, is essential to address AI risks that increasingly cross national borders. The discussion also highlighted a growing imbalance in global AI development, with participants warning that governance should not be shaped solely by the countries and companies leading frontier AI. Instead, they called for developing countries to become co-creators of international AI governance through stronger capacity development, shared standards and multilateral cooperation. – https://dig.watch/updates/global-dialogue-interoperable-ai-governance

EU proposes Cloud and AI Development Act to boost tech sovereignty

(DigWatch) The European Commission has published a proposal for the Cloud and AI Development Act to strengthen Europe’s cloud and AI ecosystem, investment and infrastructure. CADA forms part of the Commission’s Tech Sovereignty Package and is also linked to the AI Continent Action Plan. The proposal aims to make it easier and faster to deploy sustainable data centres and cloud infrastructure across the EU. – https://bisi.org.uk/reports/eu-cloud-and-ai-development-act-sovereignty-ai-and-us-tech-dependence

Can Government of and by API Still Be Government ‘for the People’?

(James Goodwin, Arvind Salem – Lawfare) When Anthropic, the U.S. company behind the Claude artificial intelligence (AI) tool, refused to allow its product to be used for mass domestic surveillance or fully autonomous weapons, the Department of Defense took the extraordinary step of designating the company a “supply chain” risk—a move that would bar Pentagon contractors from doing business with Anthropic. Much of the focus on this episode has centered on the legal questions Anthropic raised in response (for example, its First Amendment rights and applicable requirements of the Administrative Procedure Act) as well as practical concerns around proposed carveouts to avoid a full bar. While these questions are important, they obscure a more far-reaching problem: democratic accountability implications of the government’s growing dependence on AI systems like Claude. Policy experts have long worried about the democratic accountability implications of outsourcing core governance functions to for-profit companies. AI replicates that dynamic, but with systems designed to mimic or even substitute for human reasoning and deliberation. That this is occurring against a backdrop of decimated state capacity and erosion of long-standing democratic norms makes it all the more concerning. As AI’s capabilities and prevalence grow, the temptation to shift government functions away from the career civil service and toward these systems is likely to follow. A consequential side effect of this development is that procurement will take on increased significance as a policymaking venue, gradually displacing more democratically accountable channels such as notice-and-comment rulemaking. This shift will further reinforce the marginalization of the career civil service. – https://www.lawfaremedia.org/article/can-government-of-and-by-api-still-be-government–for-the-people

China and Denmark expand cooperation on AI and innovation

(DigWatch) Chinese Foreign Minister Wang Yi has expressed China’s readiness to strengthen cooperation with Denmark in areas including the green economy, innovation and AI during a visit to Copenhagen. Wang made the remarks in a meeting with Danish King Frederik X, alongside separate talks with Danish Foreign Minister Lars Lokke Rasmussen. During a meeting with King Frederik X, Wang highlighted the longstanding relationship between China and the Danish royal family, noting previous state visits and describing them as a symbol of mutual respect and friendship. – https://dig.watch/updates/china-and-denmark-expand-cooperation-on-ai-and-innovation

Courts and Litigation

South Korea opens antitrust proceedings over Google app market practices

(DigWatch) South Korea’s Fair Trade Commission has begun formal deliberation procedures over allegations that Google abused its dominant position in the Android app market. The case follows an examiner’s report submitted to the Commission, which outlines suspected violations of the country’s Fair Trade Act. According to the report, Google used its Games/Google Velocity Program, known internally as Project Hug, to provide financial support for services such as Google Cloud, Google Ads and YouTube. – https://www.korea.net/Government/Briefing-Room/Press-Releases/view?articleId=2017684&type=N&insttCode=A260307

Security and Surveillance

Telegram-Hosted RedWing Malware Lets Anyone Rent Android Spyware Tools

(Pierluigi Paganini – Security Affairs) Zimperium’s zLabs team has uncovered RedWing, an Android spyware operation sold as a subscription service through Telegram, with links to Russian threat actors and apparent roots in the Oblivion malware family. It comes with documentation, tutorial videos, a referral discount program, and a bot that builds custom malicious apps on demand. No malware-writing skill required. “Far from being just another basic piece of malware sold online, RedWing is a fully developed, commercial-grade MaaS product with seller documentation, videos, and a bot-driven subscription model that provides a low entry barrier for novice attackers.” reads the report published by Zimperium. “As a proof of this, the APK customization/obfuscation/creation can be fully implemented through telegram.” – https://securityaffairs.com/194942/malware/telegram-hosted-redwing-malware-lets-anyone-rent-android-spyware-tools.html

CISA Deploys Anthropic’s Mythos AI to Hunt Vulnerabilities in U.S. Government Code

(Pierluigi Paganini – Security Affairs) Three sources familiar with the matter told Reuters that CISA, the U.S. government’s civilian cyber defense agency, is running Anthropic’s Mythos AI model against federal code repositories to find vulnerabilities before foreign intelligence services and criminal groups do. Neither CISA nor Anthropic commented on the record. A CISA representative said last month he’d check whether there was anything to share, then stopped responding. The operation is run by CISA’s Attack Surface Evaluation team, a unit that conducts security assessments and simulated attacks across the federal government. Two of Reuters’ sources said the audits have already turned up a large number of vulnerabilities. The exact scope, which agencies were covered, and how serious the bugs are have not been disclosed. – https://securityaffairs.com/194913/ai/cisa-deploys-anthropics-mythos-ai-to-hunt-vulnerabilities-in-u-s-government-code.html

China-Linked APT Expands Proxy Network With New Malware

(Alessandro Mascellino – Infosecurity Magazine) A China-linked hacking group has been observed expanding a network of hijacked devices used to disguise cyber-attacks, arming it with several newly discovered pieces of custom malware, researchers have found. Cisco Talos said the actor, an advanced persistent threat (APT) group it tracks as UAT-7810, built what are known as Operational Relay Box (ORB) networks, meshes of compromised routers and other devices that other hackers rent to route their traffic through and hide their origin. Talos assessed with high confidence that UAT-7810 is a China-nexus group. – https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/

Threat Actors Uses Agentic AI to Rapidly Compromise Cloud Target

(Phil Muncaster – Infosecurity Magazine) Thanks to AI, a lone threat actor was able to execute a cyber-attack that would have otherwise taken weeks in just 72 hours, according to a new report by Sygnia. The Israeli security vendor’s reeport, Inside an AI-Assisted Cloud Attack: Familiar Techniques at Unfamiliar Speed, highlighted how the threat actor relied on AI for speed and scale, rather than researching novel malware or zero-day exploits. Using tried-and-tested techniques for attacking cloud infrastructure, an AWS environment was compromised with the goal of extortion, the report noted. – https://www.infosecurity-magazine.com/news/threat-actor-agentic-ai-cloud/

New Malicious Campaign Delivers Vidar Infostealer and Monero Crypto Miner

(Kevin Poireault – Infosecurity Magazine) A new cyber-attack targets consumers and small and medium businesses worldwide to both steal sensitive cryptocurrency data and mine Monero, a decentralized cryptocurrency focused on private, untraceable transactions. The malicious campaign was first detected by Unit 42, the research arm of cybersecurity giant Palo Alto Networks, in April 2026. Attackers first lure victims via malvertising to pages for downloading files that impersonate cracked versions of copyright-protected software including JustWatch GmbH, a legitimate German streaming guide service, and one that resembles the BleacherReport[.]com certificate. – https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/

How Faster Cyber-Attacks Are Reshaping Enterprise Cybersecurity Strategies

(Danny Palmer – Infosecurity Magazine) Cybercriminals are getting faster at conducting cyber-attacks. In the past, unauthorized intruders would spend weeks or months inside a compromised network to lay the groundwork needed to steal data or plant malware. Today, an attacker can move from initial entry into a network to accessing data and exfiltrating it in a matter of minutes. According to the CrowdStrike Global Threat Report 2026, the average breakout time for an intrusion during 2025, that is the window between when the attacker initially enters the network to when they leave having stolen or destroyed data, was 29 minutes. – https://www.infosecurity-magazine.com/news-features/faster-cyberattacks-reshape/

NCSC Touts National Scale, AI-Powered “Cyber Shield” for Defense

(Pierluigi Paganini – Infosecurity Magazine) The UK’s leading cybersecurity agency has introduced plans to build an ambitious new national cyber-defense capability powered by agentic AI. The National Cyber Security Centre (NCSC) said that the Cyber Shield project is necessary to counter the offensive threat to the UK’s critical technology systems from threat actors wielding AI. It was first trailed in a GCHQ speech in May. “AI is already helping attackers to conduct elements of offensive cyber activity, such as vulnerability discovery and reconnaissance at a much greater scale and faster pace,” the NCSC explained in an article on July 7. – https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/

European Commission launches AI cyber defence strategy

(DigWatch) The European Commission has presented an Action Plan on Cybersecurity and Artificial Intelligence to strengthen Europe’s response to AI-related cyber risks. The plan aims to help member states, businesses and public authorities use AI safely while addressing the cybersecurity risks created by advanced AI models. The Commission said AI can help detect vulnerabilities, prevent cyberattacks and protect critical infrastructure. However, it warned that malicious actors can also use AI to automate attacks, identify weaknesses and carry out cyber operations at greater speed and scale. – https://digital-strategy.ec.europa.eu/en/news/commission-presents-eu-action-plan-cybersecurity-and-artificial-intelligence

ENISA warns frontier AI is compressing cyberattack timelines

(DigWatch) The European Union Agency for Cybersecurity has warned that frontier AI models are compressing cyberattack timelines and challenging traditional defence practices. In a July 2026 paper, ENISA said advanced AI models are reducing the time between vulnerability discovery and exploitation, creating new pressure on vulnerability management, patching and incident response. The agency said open-weight models may reach similar capabilities within 9 to 12 months, while existing models combined with skilled security experts can already produce comparable results. – https://dig.watch/updates/enisa-frontier-ai-cybersecurity-defences

Accusation, Trust, and the Future of Vulnerability Disclosure

(Cory Simpson – Lawfare) In May, an independent security researcher known as Nightmare Eclipse published a series of unpatched Windows vulnerabilities after what the researcher described as a failed disclosure process with Microsoft. The researcher said the vulnerabilities, along with proof-of-concept exploit code, had been reported to the company before publication. Microsoft said the disclosure occurred outside proper coordination, accused the researcher of enabling criminal activity, invoked its Digital Crimes Unit, and pointed toward potential law enforcement action. Microsoft blurred a line it knows well: the line between protecting billions of users from malicious actors and implying that security researchers may be treated as criminals for good-faith research. The security community heard the message that way and responded forcefully, with researchers publicly describing their own frustrations working with Microsoft’s disclosure process. Microsoft later clarified that it has no intention of pursuing action against individuals conducting or publishing security research, while reserving the right to work with law enforcement when someone breaks the law and harms customers. That clarification drew the line where Microsoft should have drawn it from the start. – https://www.lawfaremedia.org/article/accusation–trust–and-the-future-of-vulnerability-disclosure

Frontiers

ECB researchers use LLMs to measure geoeconomic tension

(DigWatch) The European Central Bank (ECB) researchers have published a working paper introducing a Large Language Model-based method for measuring geopolitical and geoeconomic tensions in the euro area. The paper develops the LLM Geoeconomic and Geopolitical Tension index, or LGPT, using a large dataset of European newspaper articles in local languages. Researchers analysed almost 20 million articles from newspapers in France, Germany, Italy and Spain, covering the period from 1999 to 2025. – https://dig.watch/updates/ecb-use-llms-to-measure-geoeconomic-tension

NVIDIA unveils RTX Spark for the AI-powered PC era

(DigWatch) NVIDIA and Microsoft have introduced RTX Spark, a new Windows PC platform designed for personal AI agents. NVIDIA describes RTX Spark as a 1-petaflop superchip that combines its AI and graphics stack with Windows-native agent capabilities. NVIDIA’s Blackwell architecture powers the platform and supports up to 128GB of unified memory. – https://dig.watch/updates/nvidia-unveils-rtx-spark-for-the-ai-powered-pc