📰 Ransomware logs and Copilot memory put AI agent records on the eDiscovery agenda 🔎 Threat-intelligence vendor SOCRadar reported Oct. 20 that an exposed server run by affiliates of the INC and The Gentlemen ransomware groups held 8,257 messages from 133 AI sessions plus AI-managed knowledge bases, records it says form “a complete evidence trail of the campaign.” On Oct. 22, evaluators from METR and Redwood Research said a gap in OpenAI’s internal agent monitoring likely left on the order of 10 percent of eligible coding-agent traffic unmonitored from May to July, an estimate left uncertain because the data had not been logged. OpenAI says it patched the production-affecting flaws they found, which they have not evaluated. Microsoft’s memory help page says Purview retention policies do not cover Copilot’s per-user memory, kept in a hidden mailbox folder, while an archived Message Center notice, updated Oct. 22, says retention for saved memories has rolled out. 💡 For cybersecurity, information governance, privacy and eDiscovery professionals, the task is knowing which agent records exist, where they sit and whether a legal hold, which suspends deletion of identified data for litigation, reaches them. Microsoft’s memory page and that notice do not say how a hold treats memory items. Watch for a revised memory page; test holds in your tenant. 💼 Read the complete article from ComplexDiscovery OÜ's artificial intelligence beat at complexd.blog/48fFkMY. #eDiscovery #AIAgents #AIGovernance #InformationGovernance #Cybersecurity #DigitalEvidence #LegalHold #MicrosoftCopilot #ComplexDiscovery

🏦 US bank regulators ask whether lenders can stop their AI agents 💼 Three U.S. bank regulators are asking lenders a practical question about AI agents: Can you track and audit what they decide, and how would you shut them down? 📰 Reuters reported Oct. 13 that the Federal Reserve, the OCC and the FDIC are putting written and verbal questions to large, midsize and smaller banks about agent limits, monitoring, human involvement and shutdown, though the people Reuters cited said regulators are not yet being prescriptive. The questions follow April's revised model risk management guidance, SR 26-2, which is nonbinding and leaves generative and agentic AI outside its scope. 📊 Bankers' own survey answers show where the hard parts are. In a Wolters Kluwer survey of 230 U.S. banking professionals, about one in three named kill-switch protocols as the AI incident response area where their institution is least prepared. In Bank Director's technology survey of 136 leaders at U.S. banks below $100 billion in assets, 69 percent picked integrating new technology with existing systems among their top three technology concerns. A third of the bank leaders in Bank Director's risk survey said they do not understand agentic AI at all. 💡 For records and eDiscovery teams, agent logs are electronically stored information like any other. A federal court ordered OpenAI in 2025 to preserve AI output logs it would otherwise have deleted, and Rule 37(e) sets the consequences when information that should have been preserved is lost. ⁉️ Could your institution reconstruct what its agents did last week, and who has the authority to stop them? 📰 Read the complete article from ComplexDiscovery OÜ's artificial intelligence beat at complexd.blog/4z36diY. #AgenticAI #BankingRegulation #ModelRiskManagement #DataGovernance #FinTech #eDiscovery #ComplexDiscovery

🛰️ Kyiv says Starshield speeds are back, but who capped them is still disputed 🇺🇦 Ukraine’s Defense Ministry said Oct. 24 that its forces’ Starlink and Starshield terminals again hold stable connections at movement speeds above 400 kilometers per hour, 10 days after Kyiv first reported an unannounced cap that cut connections near 160 kilometers per hour and disrupted drone missions. Starlink is SpaceX’s commercial satellite internet service; Starshield is its government-grade version. Who imposed the cap remains disputed. The Wall Street Journal reported that Elon Musk ordered it; Reuters, that the instruction came from inside the White House. The White House blamed a technical malfunction, Secretary of State Marco Rubio said nobody ordered it, and Musk said Starshield limits are decided by the U.S. military and, ultimately, the president. Nine U.S. senators asked the Defense Department’s inspector general to investigate, and four asked SpaceX who can change Ukraine’s access and what notice it owes. 🔎 For cybersecurity, information governance and eDiscovery professionals, it tests vendor control, change notice and records preservation when a private company runs critical systems. Watch the senators’ Nov. 1 and Nov. 2 deadlines and an aid-mission ceasefire around Oleshky, a Russian-occupied town in Ukraine’s Kherson region, which Ukraine’s negotiator says starts Oct. 27 and the White House dates to Oct. 29. 📰 Read the complete article from ComplexDiscovery OÜ's geopolitics beat at complexd.blog/4yEaRTu. #Starshield #Starlink #SpaceX #VendorRisk #Geopolitics #InformationGovernance #eDiscovery #Cybersecurity

🇪🇪 Three Estonian state institutions announced closures or restrictions of online services between Oct. 21 and Oct. 23 as two critical PHP flaws prompted precautionary closures in several European countries. 🖥️ The National Archives of Estonia temporarily closed several services or restricted them to Estonian IP addresses. The Ministry of Education and Research closed a Moodle learning environment, which the University of Tartu identifies as Harno Moodle, describing the step as a preventive measure aimed at avoiding potential data leaks; its notice cites critical software vulnerabilities without naming PHP, and ERR reported on Oct. 23 that the platform had reopened. The Institute of the Estonian Language removed eight older applications from outside access. 🔎 Estonia's Information System Authority (RIA), for its part, said it saw no elevated crisis for the state sector and that protection for important state websites was in place. Its Estonian-language advisory, listed as CERT-EE's official alert, reserved explicit disconnect language for organizations that detect attacks and called for temporary mitigations where patching had to wait. The EU's joint statement told organizations that cannot patch at once to consider isolating exposed applications. ✍️ For security, information governance and eDiscovery teams, the lesson is to record the offline decision as carefully as the patch: the threshold, who decided, which systems were covered, the logs kept and the outage window against deadlines that keep running, such as the GDPR's access-request clock. 💡 When the next critical advisory lands, will your threshold for going dark already be written down? 👀 Read the complete article from ComplexDiscovery OÜ's cybersecurity beat at complexd.blog/3UFgzGS. #Cybersecurity #IncidentResponse #InformationGovernance #eDiscovery #GDPR #Estonia

🏛️ 5th Circuit reassigns Mississippi DEI case after judge's orders cite fabricated parties, quotations and a nonexistent case ⚖️ A three-judge panel of the 5th U.S. Circuit Court of Appeals on Oct. 22, 2026, vacated a preliminary injunction that U.S. District Judge Henry T. Wingate had entered against Mississippi House Bill 1193, a 2025 law restricting diversity, equity and inclusion programs in public schools and colleges, and ordered the case, Jackson Federation of Teachers v. Fitch, reassigned to a different judge. The majority cited fabricated parties, facts, and quotations in Wingate’s July 2025 temporary restraining order, a nonexistent case included in a corrected version of that order, and what it described as misreadings of Supreme Court precedent. Wingate has said a law clerk used the AI tool Perplexity during preparation of an early draft that was mistakenly docketed. The panel did not rule on the constitutionality of the law and imposed no sanctions. 🖥️ For cybersecurity, information governance, and eDiscovery professionals, the decision illustrates how AI-generated errors can enter even judicial work product, survive subsequent revisions, and remain in the public record after questions are raised. The case also highlights growing concerns about verification, accountability, and disclosure obligations when AI tools are used in legal workflows. Watch how the newly assigned judge handles the remand and whether courts adopt more formal rules governing AI use in judicial chambers. 📰 Read the complete article from ComplexDiscovery OÜ's artificial intelligence beat at complexd.blog/3VS4j6i. #FifthCircuit #LegalAI #AIHallucinations #eDiscovery #InformationGovernance #LegalTech #JudicialAccountability

📰 An AI agent can write the story, but EU law asks whether a human reviewed it 🖥️ Since Aug. 2, 2026, Article 50(4) of the European Union’s Artificial Intelligence Act has required organizations that use AI to generate or manipulate text published to inform the public on matters of public interest to disclose that the text is AI-generated or manipulated, unless the text has undergone human review or editorial control and a person or company holds editorial responsibility for it. ⚖️ Nonbinding guidelines the European Commission published July 20 say that review must be substantive, with fact-checking at minimum, and that automated review, review of AI output by another AI system with only a superficial human check, or a cursory sign-off does not qualify. The test arrives as AI-native outlets publish with agents doing much of the work, among them Italy’s Redazione Zero, which labels its agent-written stories as produced without human review. Errors earlier in 2026 at Ars Technica, The New York Times and Danish newspaper Berlingske, all before the rule applied, traced to AI output that was not adequately verified. 🔎 For cybersecurity, information governance and eDiscovery professionals, review may become something an organization has to show, though the Commission’s voluntary Code of Practice does not require documenting each review. Watch for first information requests and complaints. 💡 Read the complete article from ComplexDiscovery OÜ's artificial intelligence beat at complexd.blog/4BlYWw9. #AIAct #AgenticAI #Journalism #AIGovernance #InformationGovernance #eDiscovery #Cybersecurity #EURegulation #MediaLaw #ComplexDiscovery

🕛 After the ConnectWise breach, a firm’s GDPR clock may start before its Microsoft 365 logs can answer 🔓 Microsoft said Oct. 21, 2026, that it assesses Storm-0940, a China-state aligned hacking group, was responsible for the compromise of ConnectWise Cloud Backup, a Microsoft 365 backup service once called SkyKick, and that some of the group’s attacks reached privileged cloud access within three hours of first targeting. ConnectWise, which first disclosed the incident Oct. 16, said a China state-aligned group appeared to be responsible. Microsoft listed legal among the targeted industries without saying whether any law firm was compromised. 🔎 For cybersecurity, privacy and eDiscovery professionals, the issue is timing. Under the European Union’s General Data Protection Regulation, a controller must notify its supervisory authority of a personal data breach without undue delay and, where feasible, within 72 hours of becoming aware of it, unless the breach is unlikely to put individuals’ rights and freedoms at risk. European regulators expect any alert to be investigated promptly, and details can follow in phases. 👀 ConnectWise said it cannot see into customer environments, and Microsoft’s Entra identity service keeps sign-in and audit logs for seven days on its free tier. Watch for ConnectWise’s restoration instructions and any count of compromised organizations. 🖥️ Read the complete article from ComplexDiscovery OÜ's cybersecurity beat at complexd.blog/4yAjfTY. #ConnectWise #Storm0940 #ARTEX #GDPR #DataBreach #InformationGovernance #eDiscovery #LegalTech

🇫🇮 AI changes the economics of hybrid threats but not their logic, Helsinki paper argues 🔎 Helsinki’s European Centre of Excellence for Countering Hybrid Threats (Hybrid CoE) published a paper Oct. 15, 2026, arguing artificial intelligence structurally alters hybrid threats, which it describes as deniable, multi-tool campaigns against democracies, while their logic stays the same. Its authors are Tinna Þuríður Sigurðardóttir of the Central Bank of Iceland and Martin Cvetko of the NATO Cooperative Cyber Defence Centre of Excellence in Tallinn. The paper says responsibility for its views rests with the authors. 💡 It sorts AI’s effects into three groups: generating and amplifying content, probing and exploiting systems, and sensing and targeting. Read against its sources, the evidence for two of those groups shows costs falling and access widening sooner than results attributable to AI. Security firm VulnCheck found 14 of 1,061 vulnerabilities attributed to AI-assisted discovery confirmed as exploited. 🔐 Security, records and legal teams may want to rehearse a disinformation campaign and an intrusion arriving together. Estonia’s Tallinn Digital Summit, Nov. 5 and 6, will take up hybrid threats. 🖥️ Read the complete article from ComplexDiscovery OÜ's cybersecurity beat at complexd.blog/4k8Uxqi. #HybridThreats #ArtificialIntelligence #Cybersecurity #InformationGovernance #eDiscovery #TallinnDigitalSummit #IncidentResponse

💼 [Forbes Communications Council] 19 Ways Comms Teams Can Proactively Shape Company Reputation 📰 A company’s reputation is rarely made in the middle of a crisis. It’s built through the steady work of listening to stakeholders, delivering on promises and telling a consistent story long before anyone questions it. 📣 Communications teams that take a proactive approach can earn trust in advance, giving audiences necessary context and the company more room to navigate difficult moments. To help, in this new article, Forbes Communications Council members share how teams can proactively shape their company’s reputation and why that work matters. 🎯 [Extract] Connecting What The Company Says With What It Does - A communications team shapes reputation by consistently connecting what the company says with what it does. That means anticipating stakeholder questions, documenting evidence behind claims and communicating decisions before others define the narrative. This matters because reputation is built cumulatively; credibility established before a crisis gives audiences context when scrutiny arrives. - Rob Robinson, HaystackID (ComplexDiscovery OÜ) 💡Contributing experts include Ran Peled, Alison Murdock, Rob Robinson, Meredith McEuen, Brana Webb, Natasha Nicholson, Anurag Kashyap, Maria Alonso, Rena Fallstrom, Kurt Allen, Jessica Wong, Bisera Lakinska, Barnaby Pung, Bob Pearson, Jorge Lukowski, Amanda Simonian, Odette Maher, Toby G. Wong, and Katie Jewett. 🔎 Read the complete article from Forbes Communications Council at complexd.blog/4yWA24F. #CorporateCommunications #ReputationManagement #StrategicCommunications #StakeholderEngagement #BrandTrust

🇪🇪 AI recording spreads in Estonian health care as the regulator says the audio needs its own legal basis 🏥 AI that records doctor-patient conversations and drafts summaries is spreading through Estonian health care, ERR News reported on Oct. 19, 2026. Private provider Confido uses its tool in several departments, Narva Hospital is procuring Estonian-language transcription software and Heba Clinic uses AI to document visits. Tartu University Hospital’s EMO24 pilot, begun Oct. 14, is a typed smartphone questionnaire. Estonia’s Health Services Organisation Act generally requires providers to keep confirmed outpatient and inpatient records for 30 years, but neither the act nor the ministry’s documentation regulation mentions consultation audio or transcription. In letters dated April 16 and May 7, 2026, the first expressly not a binding assessment, the Data Protection Inspectorate said that, at least under its own practice, recording a consultation is not automatically covered by that act, and named explicit patient consent as one possible basis. 💼 For cybersecurity, data privacy, compliance and eDiscovery professionals, the issue is which artifacts a consultation leaves alongside the required record (audio, raw transcript, AI draft, logs), where vendors hold them and for how long. 🔎 Watch the Ministry of Social Affairs, where Deputy Secretary General Nele Labi says more legal clarity is needed and working groups are under way. 📰 Read the complete article from ComplexDiscovery OÜ's data protection and privacy beat at complexd.blog/47QiawJ. #AI #HealthData #GDPR #DataProtection #InformationGovernance #eDiscovery #Estonia #ComplexDiscovery