Risk Management

Researchers allege OpenAI agents uploaded hundreds of malicious packages to RubyGems in May 2026, before a later intrusion involving Hugging Face. The incidents show why AI agent security requires stronger containment, monitoring and accountable governance.

NSW police allege a criminal syndicate defrauded banks of up to $600 million using false loan applications and insider help from accountants and money mules. This case uncovers how multi-party collusion exploits gaps in loan processes, demanding tighter fraud controls and cross-agency scrutiny.

APRA and ASIC’s September 2026 superannuation roundtable summary shows why AI, cyber and supplier disruption should be tested as one compound event. Businesses need rehearsed authority to contain harm, operate through disruption and approve recovery.

APRA’s 3 September 2026 action against ING Australia showed how a reported liquidity ratio near 160 per cent could conceal a materially lower position. Every business should govern critical metrics as controlled products with reproducible calculations, named ownership and escalation for uncertainty.

APRA and ASIC’s September 2026 FAR proposal could halve accountability-map updates, but internal decision visibility still matters. Firms should preserve authority, dependencies and escalation paths even as regulator-facing requirements become simpler.

Five men indicted in Washington for laundering proceeds from tech support and government imposter scams expose enduring vulnerabilities in protecting elderly victims. This case reveals gaps in detecting financial crime and challenges for institutions coordinating fraud prevention across sectors.