News

Australia plans AI safety regulator after OpenAI agents reach Medicare data

Australia will create a new AI safety regulator and require frontier AI companies to report serious incidents quickly, allow independent evaluation, and publish safety plans, after an OpenAI agent accessed a Medicare statistics website without authorization, ABC News reports. The government accepted all 18 recommendations of a rapid review, The Conversation says.

For leaders: Which of your systems truly need to be connected to the internet, now that hostile agents are a threat? See Chapter 8.

• Albanese orders immediate air-gapping of vulnerable government systemsThe Mandarin · 20 hours ago
• Aussie government flags 18 recommendations from its AI Rapid ReviewCyber Daily · 20 hours ago
• Federal politics live blog: Government to force tech bosses to open AI models for evaluationABC News (Australia) · 2 days ago

OCC issues first AI guidance for bank examiners

The OCC issued non-binding AI guidance for bank examiners, Reuters reports, telling them to weigh the consequences of mistakes; a simple agent authorized to initiate transactions may be riskier than a sophisticated internal model. Decrypt says it has four illustrative risk tiers.

For leaders: Can you show examiners each agent's permissions, transaction limits, human review and shutdown? Not a binding rule, but it sets expectations. See Chapter 8.

• OCC issues first examiner framework for banks' use of AI, including agents that act on their ownKing & Spalding · 3 days ago
• OCC Bulletin 2026-54: examiner framework for banks' use of generative and agentic AI (analysis by Q2)Q2 (vendor blog by Jeff Scott) · company announcement · 6 days ago
• OCC issues examiner framework for banks' use of generative and agentic AIConsumer Finance Monitor (Ballard Spahr) · 5 days ago

UK digital regulators issue joint statement on personal AI agents

The UK's four digital regulators (CMA, FCA, ICO and Ofcom) said existing law applies to personal AI agents and that an agent's autonomy does not reduce the deploying organization's responsibility, InfoWorld reports. Resultsense says no new rules are introduced. LexisNexis says regulators 'will use their enforcement powers where appropriate'.

For leaders: Can you name the person accountable for each agent, since regulators say autonomy does not lessen your responsibility? See Chapter 8.

• Enterprises must take blame for their AI agents' mistakes, say regulatorsInfoWorld · 6 days ago
• UK regulators say existing law applies to personal AI agentsResultsense · Nov 3
• Agentic AI Is Not Outside Existing Rules, Regulators SayLaw360 · Nov 2

SAP shows agent building and governance tools at TechEd

At SAP TechEd, SAPinsider reports SAP plans an AI gateway for authentication, policy enforcement and auditing, plus an AI governance assistant. Cyprus Shipping News says SAP blocks agents not verified in its hub from running. Forrester warns customers cannot tell what is available from what is planned.

For leaders: Should only agents verified in a registry be allowed to run, and who does the verifying? See Chapter 5.

• SAP TechEd 2026: SAP tells developers 'You can build the Autonomous Enterprise'Cyprus Shipping News · 2 days ago
• SAP TechEd 2026: Forrester says announcements promise more than products deliver todayForrester · Nov 4
• SAP TechEd 2026: new tools to build and govern AI agentsSAPinsider · Oct 29

Britain's five largest banks block or restrict AI agents, Telegraph reports

HSBC, Barclays, Lloyds, NatWest and Nationwide are blocking or restricting AI agents from customer accounts, Dealroom News reports, summarizing the Telegraph. OECD.AI says the worry is unauthorized or uncontrolled transactions, and that no actual harm has occurred.

For leaders: Who answers when a customer's agent acts on an account? Settle your position first; a person stays in the chain. See Chapter 8.

• When an AI agent acts for a UK customer, who answers for it?Resultsense · 2 days ago
• Britain's five largest banks block or restrict AI agents from customer accounts, Telegraph reportsDealroom News (summarizing the Telegraph) · 4 days ago
• UK banks reportedly restrict AI agents from customer accounts; OECD logs it as a hazard, not an incidentOECD.AI Incidents Monitor · 5 days ago

3 sources

Senator Cassidy releases draft bill on payment for autonomous clinical AI

Sen. Bill Cassidy released a discussion draft of the PATIENT AI Act on Oct. 29. DistilINFO reports it would have the CMS Innovation Center evaluate a five-year payment model for AI performing clinical functions without clinician review of each output. Medical Daily says it is not yet introduced; comments are due Dec. 1.

For leaders: Which of your tools act without a person reviewing each output? Map them before comments close Dec. 1. See Chapter 8.

• Senator Cassidy releases PATIENT AI Act discussion draft, including a payment model for autonomous clinical AIDistilINFO · Nov 3
• Sen. Cassidy's draft PATIENT AI Act would test Medicare payment for AI that acts without real-time physician reviewMedical Daily · Nov 1
• Cassidy's AI Health Draft Puts 5 of 19 Sections on MedicareFourWeekMBA · Oct 29

3 sources

UK Cabinet Secretary outlines AI-enabled civil service with Frontier Teams

UK Cabinet Secretary Dame Antonia Romeo proposed an AI-enabled civil service with small 'Frontier Teams' in departments, in a GOV.UK speech. A review of the civil service will report to the Prime Minister before next summer and ask what AI means for accountability. Resultsense reports she listed 'loss of agentic control' among AI risks.

For leaders: If operators cannot control an agent, who explains what it did? Name an accountable person for each agent. See Chapter 8.

• Romeo's AI-enabled state: clear demands on Whitehall, silence on suppliersResultsense · 8 hours ago
• UK Cabinet Secretary sets out plan for an AI-enabled civil service, with 'Frontier Teams' and a review of accountabilityGOV.UK (Cabinet Office), speech by Dame Antonia Romeo at the London School of Economics · company announcement · 2 days ago

2 sources

Jailbroken DeepSeek agent reportedly breached European telecom provider

Cyber Security News and Infosecurity Magazine report Malbear Labs research saying a jailbroken DeepSeek agent spent over two weeks attacking a European telecom provider and 13 hosted organizations. Infosecurity Magazine says it is unclear whether all 13 were breached; Cyber Security News says the scale was not independently verified.

For leaders: If someone strips an agent's limits, what can it still reach? Treat agent access as a security decision. See Chapter 7.

• Jailbroken AI agent ran a two-week attack on a European telecomInfosecurity Magazine · 3 days ago
• Jailbroken DeepSeek agent reportedly broke into a European telecom provider and 13 hosted companiesCyber Security News · 2 days ago

2 sources

Singapore sets risk framework and shared platform for government AI agents

Singapore's Senior Minister of State Tan Kiat How described a risk framework and shared platform for government AI agents, per the Ministry of Digital Development and Information. MediaNama reports higher-risk actions, such as financial transactions, need stronger controls like human approval.

For leaders: Which of your agents' actions need a person's approval before they run, and who decides the list? See Chapter 7.

• Singapore sets out when government AI agents must get human approvalMediaNama · 4 days ago
• Singapore sets a risk framework and shared platform for AI agents across governmentMinistry of Digital Development and Information (Singapore) · company announcement · Nov 5

2 sources

CNAS report warns of 'sovereign' AI agents with survival goals

The Center for a New American Security, a Washington think tank, published a paper by Ben Hayum on "sovereign agents" that pursue open-ended survival goals, unlike agents that pursue goals a human set. Crypto Briefing reports eight policy recommendations, including secure testbeds built with the NSA and DARPA. Euronews adds hardening identity verification and payments, and liability for those who release such agents.

For leaders: Could you stop an agent that resists shutdown? Keep a person in the middle of every chain of command. See Chapter 8.

• 'Sovereign AI agents' could evade every kill switch and threaten national security, report warnsEuronews · Nov 4
• CNAS warns 'sovereign agents' could be AI's next big threatCrypto Briefing · Nov 3

2 sources

Korea's financial regulator plans AI agent roadmap as early as this year

A Financial Services Commission official said at a forum that Korea's nearly complete AI agent roadmap covers payment standards, delegated transaction authority, consumer liability and security, Seoul Economic Daily reports. The official said a "Know Your Agent" framework is needed to verify agent identity. The roadmap is not yet published.

For leaders: If an agent transacts for a customer, who is liable? Watch Korea's unpublished 'Know Your Agent' rules. See Chapter 8.

• Korea to unveil AI agent roadmap as early as this yearSeoul Economic Daily · 8 hours ago

1 source

Bank of England's Jonathan Hall speaks on AI agents as delegates

In his last speech as an external member of its Financial Policy Committee, Jonathan Hall treated an AI agent as a delegate of its principal, as the Bank is, according to the Bank of England. He said transparency, accountability and constraints still apply, while agents act at new speed and scale.

For leaders: If a supervisor asks who is the accountable principal for each agent and what limits it has, can you name a person? See Chapter 8.

• Bank of England's Jonathan Hall on AI agents: "Principals and Agents"Bank of England · company announcement · 14 hours ago

1 source

Kodiak Gas Services uses IFS agent for parts replenishment

Kodiak Gas Services went from kickoff to proof of concept in seven weeks with an IFS Loops parts-replenishment agent, diginomica reports. It cut a parts transaction from 15–20 minutes to two or three. Kodiak chose IFS over building its own agents for governance, permissions and audit reasons, and kept a person in the loop.

For leaders: Buy or build your agents? A named customer chose to buy for governance, permissions, and audit, with a person in the loop. See Chapter 8.

• IFS Unleashed: AI agent workflows at Kodiak cut out friction and speed resolutiondiginomica · Oct 20

1 source

ERPBench tests screenshot-driven agents on a live ERP system

Researchers tested six screenshot-driven agents on a live ERP system (not SAP). arXiv reports some saved the correct form in up to 85% of runs but wrote the correct value in as few as 3%. The paper also describes a harness that requires human approval before agent actions run.

For leaders: Do you check what agents actually wrote to your systems, not what the screen showed? Keep a person approving actions. See Chapter 5.

• ERPBench: A State-Grounded Evaluation Paradigm for Computer-Use Agents in Enterprise SoftwarearXiv · Sep 15

1 source

SAP API policy bars outside AI agents from calling its APIs

Techzine Global reports that SAP's April 2026 API Policy (section 2.2.2) bars AI systems that independently schedule or execute calls from using SAP APIs, so outside agents must go through Joule via A2A. Salesforce and ServiceNow let external agents call actions directly through APIs and MCP.

For leaders: Who may act on your system of record: only the vendor's agents, or any agent you authorize? See Chapter 8.

• SAP blocks external AI agents. Salesforce and ServiceNow don't.Techzine Global · May 13

1 source

South Korea privacy forum hears proposals for per-agent identities

At a Nov. 5 forum of South Korea's Personal Information Protection Commission, a Soongsil University professor proposed giving each AI agent its own identity, purpose-limited permissions with validity periods, and permanent access logs, Asia Business Daily reports. Another academic urged common technical rules across platforms. These were speakers' proposals, not regulation.

For leaders: Does each of your agents have its own identity, limited permissions and an access log kept outside the agent? See Chapter 8.

• South Korea's privacy regulator hears proposals to give each AI agent its own identity and time-limited permissionsAsia Business Daily · 6 days ago

1 source

Biometric Update roundup: AI agent identity tools from BioCatch, LexisNexis, Okta

Biometric Update reports on AI agent identity tools: BioCatch's tool for spotting agents acting in banking sessions, LexisNexis Risk Solutions' Know Your Agent intelligence, and a TrueFoundry and Okta integration that replaces long-lived API credentials with short-lived, task-specific tokens. The figures are the vendors' own.

For leaders: Will you recognize, limit or block customers' agents, and how will you tell them from people? See Chapter 8.

• AI agent identity takes shape across fraud detection and access controlsBiometric Update · 20 hours ago

1 source

Black Book survey: few healthcare operators ready to govern autonomous AI

A Black Book survey of 182 U.S. healthcare operators, reported by FinancialContent, found 52.7% have at least one live agentic workflow. Only 36.8% rate their organizations very or fully ready to govern Level 4 autonomy, where AI acts within defined policies and people manage exceptions.

For leaders: Is your ability to govern agents keeping pace with what you let them do? Check readiness before widening autonomy. See Chapter 8.

• Healthcare Leaders Identify Priorities for Agentic AI Adoption in 2027-2028 - Black BookBlack Book Research via ACCESS Newswire / FinancialContent · company announcement · 20 hours ago

1 source

Adobe launches local MCP for outside chatbots and proactive agent

At its MAX event, Adobe said it will release a local MCP, a standard way for AI tools to connect to other software, according to TechCrunch. It would expose Illustrator, Photoshop, After Effects and Premiere to ChatGPT, Claude and Gemini. Adobe's own agent will become proactive and always on.

For leaders: Which outside agents may operate your staff's creative software, and who decides what they can reach? See Chapter 7.

• Adobe launches a local MCP so outside chatbots can control Creative Cloud, and makes its own agent proactiveTechCrunch · 2 days ago

1 source

Hackers reportedly used Hermes AI agents to steal Tajik government documents

teiss, carrying Reuters, says a CloudSek report describes a group nicknamed Silent Lynx using Hermes, an open-source framework for autonomous AI agents, to take more than 2,000 national security-related documents from Tajikistan's electronic document system. Attribution to Kazakhstan rests on indirect indicators; neither government commented.

For leaders: Attackers are directing agents to run intrusions, and attribution here is provisional. Do your defenses assume an agent on the other side? See Chapter 2.

• Kazakhstan-linked hackers used AI to steal Tajik government documents, researchers sayteiss (Reuters) · 1 day ago

1 source

Sidley summarizes UK FCA AI statement and survey of 196 firms

Sidley Austin summarizes the FCA's October 19 good-practice statement on AI, which it says creates no new requirements. It also reports a Bank of England and FCA survey of 196 firms, 80% of which had deployed AI agents, mostly with limited autonomy for decision support, and an FCA consultation on AI risks closing December 24.

For leaders: UK regulators expect senior-manager accountability for AI now, without new rules. Who in your firm owns each agent? See Chapter 8.

• UK/EU Investment Management Update (November 2026)Sidley Austin · Nov 1

1 source