On October 23, the SEC’s Division of Examinations released its 2027 Examination Priorities. Conflicts of interest, private funds, Super Intelligence (SI), cybersecurity, and Regulation S-P are among the focus areas. Here’s what examiners will look for and the steps advisers should take to strengthen their compliance programs now.
Read More
On October 23, the SEC’s Division of Examinations released its 2027 Examination Priorities. Conflicts of interest, private funds, Super Intelligence (SI), cybersecurity, and Regulation S-P are among the focus areas. Here’s what examiners will look for and the steps advisers should take to strengthen their compliance programs now.
Data Breach Today released an article regarding Progress Software issuing a security alert urging organizations that use self-managed ShareFile Storage Zone Controllers to immediately shut down those systems due to a credible external security threat.
A recent SEC document request letter could be indicative of a long-predicted sweep of firms for the SEC to evaluate compliance with Amended Regulation S-P, according to at least one news outlet. Thirty items gleaned from a new SEC document request letter focus on cybersecurity protections and breaches.
Fidelity Brokerage Services has agreed to pay $1.25 million after it failed to enforce “appropriate cybersecurity controls” in 2024, leading to a significant data breach affecting approximately 77,000 customers, according to an announcement by Secretary of the Commonwealth of Massachusetts William Galvin on April 27.
On February 2nd, 2026, the common text editor, Notepad++, shared an update to its initial announcement in December 2025 that it was the target of a software supply chain attack. According to the announcement, starting in June 2025, bad actors intercepted and redirected requests for updates to malicious infrastructure. These bad actors were then able to deliver malware through a software update channel that users trusted.
SonicWall, a popular network security company that advisers and other financial institutions use for its firewall or router products, recently confirmed a security incident resulting in unauthorized access to configuration backup files for customers using its cloud backup service.