Governance, Regulation, Legislation, Geostrategies

Five Ways to Make the New AI Task Force a Success – Over the weekend, the White House launched the Super Intelligence Force, a new artificial intelligence (AI) task force to ensure U.S. leadership in the global AI race and protect the American people’s interests. The justification is clear: the United States should lead in identifying new AI security threats and safety risks, especially those posed by adversaries, while resisting overregulation and regulatory capture that would undermine innovation and competition. But success rests on the U.S. government navigating a range of tensions and competing interests to ensure safety and earn public trust while still allowing AI companies to thrive. The new task force is the U.S. government’s unified effort to operationalize the White House Accord on Super Intelligence, under which U.S. President Donald Trump and the heads of six leading AI companies—Anthropic, Google, Meta, Nvidia, OpenAI, and SpaceXAI—committed to bolstering internal security controls, independent safety evaluations, and board oversight of frontier AI development. Many have so far overlooked an important Trump concession, namely that AI companies are encouraged to “meet regularly to establish standards and best practices to improve the safety of their systems.” That marked a shift in tone from just a couple of weeks earlier, when Trump suggested he would rein in the AI sector, saying “We’re going to watch it closely through the Department of Justice.” Now, the new AI task force says it will follow Trump’s guidance to let the industry lead on safety and risk management, while also actively assessing adversaries’ misuse of the technology and shaping safety standards to mitigate those risks. In practice, Trump’s new AI czar, Director of National Intelligence Jay Clayton, will likely give the six AI companies an implicit green light to establish an AI self-regulatory organization (SRO) to coordinate and set safety specifications and incident-response standards. The task force will likely provide voluntary guidance to ensure that SRO developments align with national security and public interests and will assess whether these efforts could harm the U.S. competitive posture vis-à-vis China. It will also assess whether additional executive or legislative backstops are needed to codify the government’s enforcement and oversight powers over the AI SRO. Indeed, as former chair of the Securities and Exchange Commission, Clayton has direct experience with SROs, having overseen the Financial Industry Regulatory Authority—a financial SRO. But if the White House AI task force and the industry-led SRO proposals move forward, they will need to navigate five potential traps to ensure long-term success: determining who sets safety standards, securing legitimacy in the eyes of the public and allies, responding to national security incidents, ensuring open-weight safety, and competing with China. Only by avoiding these traps can they meet the task force’s goals of preventing frontier AI safety and security surprises, protecting the American public’s interests, and maintaining a durable edge over China. – https://www.cfr.org/articles/five-ways-to-make-the-new-ai-task-force-a-success

 

AI data centre investment could reach €27 trillion by 2050 – Global investment in AI infrastructure could reach €27.23 trillion through 2050, with electricity availability emerging as a major factor determining where new data centres can be developed, according to PwC’s new Global Data Centre Outlook. PwC is a global professional services network providing audit, consulting, tax, and advisory services to businesses and organisations worldwide. The company projects annual data centre capital expenditure to increase from around €690 billion in 2026 to €1.55 trillion in 2050. The USA is expected to attract 48% of cumulative investment, equivalent to €13.01 trillion, while Asia Pacific could account for €7.07 trillion, led by China and India. Sovereign AI strategies are also accelerating infrastructure investment in Europe and the Middle East. – https://dig.watch/updates/ai-data-centre-27-trillion-by-2050

 

Finland asks for a stop of preparatory work at two Google data centre sites – Finnish authorities have issued a suspension request demanding Tuike Finland to suspend preparatory work at two planned Google data centre sites amid concerns over forest clearance and compliance with environmental assessment requirements. The request concerns sites in Muhos and Kajaani that form part of Google’s recently announced €13 billion investment in Finland. According to the Finnish Supervisory Agency (LVV), work at one site was carried out without a mandatory environmental impact assessment. Measures that could significantly alter the environment must be suspended by 23 October. – https://dig.watch/updates/finland-google-data-centres-environmental

Data centers face a sweeping new power regime – Lawmakers are considering forcing data centers to shoulder new costs and restrictions while speeding up the energy infrastructure needed to power the AI boom. The bipartisan legislation, unveiled last week, represents the most aggressive response yet from Washington to data centers amid growing backlash over their energy and environmental impacts. The provisions are part of broader Senate legislation aimed at speeding up permitting for energy — but make no mistake: The data center measures are significant and would go far beyond Washington’s largely voluntary efforts to date. The bill’s sponsors say it would accelerate energy development while ensuring data centers pay their share of grid upgrades. “I don’t think we’ve seen it before,” said Ari Peskoe, director of the Electricity Law Initiative at Harvard Law School, about the proposed additional costs and restrictions. “But I don’t think we’ve seen growth that’s comparable to data centers today, and I certainly don’t know any industry whose electricity usage has captured so much political attention”. Between the lines: For tech companies, the bill cuts both ways. Congress would make it easier to build the energy infrastructure they need while erecting a sweeping framework aimed at keeping other electricity customers from footing the bill. – https://www.axios.com/2026/10/08/data-centers-power-regime

New York City Council holds hearing on artificial‑intelligence risks – The New York City Council held a Committee of the Whole hearing on artificial‑intelligence (AI) risks on 5 October 2026, where Council members questioned senior policy executives from leading AI companies under oath. The panel included Morgan Dwyer, head of policy development and operations at OpenAI, Shane Cahill, director for privacy and AI legislation at Meta, Alice Friend, director of AI and emerging tech policy for Google, and Logan Graham, head of the frontier red team at Anthropic. Speaker Julie Menin asked each company representative to ‘quantify the risk posed by AI in the worst‑case catastrophic scenario’. Former AI researchers who identified as whistle‑blowers also testified. Jacob Coxon, a former Anthropic researcher, warned that ‘on the current path… it is more likely than not that humanity loses control to these AIs, and it could end in human extinction’. The whistle‑blower panel also included former OpenAI researcher Daniel Koktoajlo and former Google DeepMind researcher Alex Turner. – https://dig.watch/updates/new-york-city-council-holds-hearing-on-ai-risks

 

Netherlands adopts nationwide quantum strategy through 2035 – The Netherlands has adopted a nationwide quantum strategy aimed at making the country a technological leader by 2035 while strengthening strategic autonomy and resilience against quantum-related security threats. The strategy brings together measures covering research, commercialisation, public procurement, international cooperation and the protection of public systems. The government plans to build on €614.9 million previously allocated through the National Growth Fund to Quantum Delta NL, while exploring additional support through research facilities, private and European financing and public procurement. The strategy identifies quantum computing, communication and sensing as priority areas and seeks to turn the country’s established research and business base into commercial applications and stronger domestic capabilities. – https://dig.watch/updates/netherlands-adopts-nationwide-quantum-strategy

World Bank assesses India’s digital foundations for AI adoption – The World Bank’s India Development Update, published on 6 October 2026, includes a special focus on artificial intelligence. It identifies India’s technical workforce, internationally connected IT sector and digital public infrastructure (DPI) as foundations for AI adoption. Private AI investment rose from US$1.2 billion in 2024 to US$4.1 billion in 2025. – https://dig.watch/updates/world-bank-india-digital-foundations-for-ai

Security, Surveillance

Europol and US Spending Watchdog Sound the Alarm Over Quantum Threats – Europe’s leading law enforcement agency, Europol, and the US government’s spending watchdog have both released reports during the week commencing October 5 urging organizations to accelerate their post-quantum cryptography (PQC) push. Consensus on when cryptographically relevant quantum computers (CRQCs) will emerge is divided. But when “Q-day” happens, these machines will be able to crack the crypto on which most government and corporate cybersecurity depend. In March, Google predicted that the date could be as soon as 2029. The US Government Accountability Office (GAO) said it has already made 89 recommendations to 23 agencies to develop inventories of vulnerable cryptography and identify funding for PQC, among other things. The report published on October 6 is a redacted version of that document, first sent to these government agencies in September 2025, it claimed. – https://www.infosecurity-magazine.com/news/europol-us-gao-alarm-quantum/

 

FBI and Secret Service Warn of FortiBleed Lockout Threat – US cybersecurity authorities have urged administrators of Fortinet firewalls and gateways to harden their devices after revealing that the FortiBleed campaign is still ongoing. A warning notice published by the FBI and US Secret Service on October 6 cited SOCRadar figures that FortiBleed has already compromised 86,644 devices across 194 countries. The campaign targets Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. Ransomware affiliates from INC, Lynx and Payload groups are among those using the compromised credentials stolen in FortiBleed attacks for initial access, it claimed. “Initial findings indicate attackers are continuing to scan internet-exposed Fortinet firewalls using previously obtained compromised credentials,” the notice read. “Affected organizations may find themselves locked out of their systems if threat actors disable accounts or change passwords, requiring remediation steps beyond standard patching and password resets.” – https://www.infosecurity-magazine.com/news/fbi-secret-service-fortibleed/

 

Singapore applies existing safeguards to AI smart glasses – Singapore says existing laws, security requirements, and public service rules already apply to the risks posed by AI smart glasses used by public officers. In a written parliamentary reply on 7 October, Coordinating Minister for Public Services Chan Chun Sing said existing safeguards apply to AI-enabled smart glasses, including rules governing photography and audio and video recording. Public officers are also bound by the Public Service Code of Conduct, the Official Secrets Act 1935, and government security requirements concerning the confidentiality of official information. – https://dig.watch/updates/singapore-public-officers-ai-smart-glasses

 

South Korean President Lee Jae Myung says AI used in recent bank hacking incidents on 7 financial institutions – South Korean President Lee Jae Myung said on 6 October 2026, during a cabinet meeting, that signs have emerged of AI being used in some recent hacking incidents against banks, creating considerable public concern and anxiety, urging authorities to “establish the circumstances swiftly and clearly and concentrate personnel and resources on minimizing the damage”. The incidents affected major banks: Shinhan Bank reported exposure of information relating to approximately 25,000 customers through a system used by loan brokers to check application status. Yegaram Savings Bank reported approximately 40,000 affected customers, while Welcome Savings Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank and Hyundai Capital also reported incidents involving customer or contractor information. More than 67,000 people are believed to have had personal information exposed, including names, telephone numbers, income information, loan-related data and, in some cases, resident registration numbers. No evidence has so far indicated that information directly enabling unauthorised payments was compromised or that customer funds were stolen. – https://dig.watch/updates/south-korean-president-ai-used-in-bank-hacking

Atlassian Vulnerability Comes Under Attack Hours After Details Go Public – Atlassian Vulnerability Comes Under Attack Hours After Details Go PublicThreat actors have started exploiting CVE-2026-21589 (CVSS score of 9.3), a critical arbitrary file access flaw in Atlassian Data Center products. The vulnerability could allow attackers to access sensitive files under certain conditions. Affected products include Bitbucket, Confluence, Jira Service Management, Jira Software, Bamboo, Crowd, Crucible, and Fisheye. “This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files within the web application root directory in affected versions. Exploitation requires prior knowledge of the target file’s exact name and path; this vulnerability does not allow attackers to enumerate or list directory contents.” reads the advisory. “In some configurations, there may be some sensitive files that make this highly severe”. Previdian telemetry has detected 15 exploitation attempts from three IP addresses in Japan and the U.S. On October 6, watchTowr Labs published a technical analysis of CVE-2026-21589 after comparing vulnerable and patched Atlassian packages. – https://securityaffairs.com/200591/security/atlassian-vulnerability-comes-under-attack-hours-after-details-go-public.html

Courts and Litigation

Australia investigates developer of smart glasses application – The Office of the Australian Information Commissioner (OAIC) opened an investigation on 7 October 2026 into Shenzhen Qingcheng Future Technology, the Chinese company behind the HeyCyan application. The software supports smart glasses sold through Kmart, Big W Marketplace, Amazon, and other retailers, collecting information from the glasses for processing when certain features are used. The company did not respond to preliminary inquiries about how the glasses record information, who can access it, and where it is stored. Privacy Commissioner, Carly Kind said this, alongside concerns arising from external analysis of the technology and its privacy policy, warranted a formal investigation. The regulator can now issue compulsory notices seeking information. – https://dig.watch/updates/australia-investigates-smart-glasses-app-maker

Markets

S&P 500 concentration hits record as Nvidia, Apple and Microsoft account for over 21% of index – The S&P 500’s weighting has reached a record level, with Nvidia, Apple and Microsoft together representing more than 21 % of the index, according to data from Creative Planning. The S&P 500 (Standard & Poor’s 500) is a stock market index that tracks the performance of 500 of the largest publicly traded companies in the United States. It was reported that the combined weight of the three companies exceeds that of the previous high‑water mark in the mid‑1980s, when IBM, AT&T and ExxonMobil together accounted for 13.4 % of the index. The rise is seen to be driven by strong demand for artificial‑intelligence‑related products and services. Nvidia, a leading AI‑chip maker, has seen its share price climb following the announcement of a US$150 billion stock‑buyback programme. Apple’s share price increased after its September product event, which introduced the foldable iPhone Duo and the iPhone 18 lineup. Microsoft’s shares have risen on expectations of continued AI‑driven demand for its Azure cloud services. – https://dig.watch/updates/sp-500-hits-record-with-nvidia-apple-microsoft

Frontiers

Semiconductor group X-FAB begins construction on new 127.4 million EUR German facility – X-FAB, a leader in specialty semiconductor foundries, has begun construction for a new cleanroom facility at its site in Erfurt, Germany. The new facility is intended to support growing demand for semiconductors from the automotive, industrial, and medical sectors while also ‘making an important contribution to strengthen Europe’s sovereignty’. – https://dig.watch/updates/semiconductor-group-x-fab-begins-german-facility