On February 20, 2025, the SEC announced the creation of the Cyber and Emerging Technologies Unit (“CETU”), replacing the existing Crypto Assets and Cyber Unit, in an effort to combat cyber-related misconduct and to protect retail investors from bad actors in the technologies space.
The SEC announced on January 17, 2025, that they have filed a total of 200 enforcement actions in the first quarter of fiscal year 2025, including 118 standalone enforcement actions. The Division filed 75 actions in the month of October alone.
On November 13, 2024, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (“FinCEN”) issued an alert to help financial institutions identify fraud schemes associated with the use of deepfake media (“deepfakes”) created with generative artificial intelligence (“GenAI”).
On October 16, 2024, the New York State Department of Financial Services (“NYDFS”) published an industry letter (the “Guidance”) discussing the increasing reliance on artificial intelligence (“AI”) and its associated cyber risks. This is one of the most detailed state laws regarding cybersecurity.
On October 21, 2024, the SEC’s Division of Examinations (“EXAMS”) published its 2025 Examination Priorities, which includes annual priorities viewed by EXAMS as presenting heightened risks to investors and markets overall.