Daily Brief, October 15, 2026

Top Story

The US Justice Department says its fall tax enforcement push took prosecutorial action against 76 defendants whose alleged and proven crimes were meant to cause an estimated loss of more than $490 million in federal revenue

The Justice Department calls this its first-ever National Tax Enforcement Surge, announced October 14th, with 35 US Attorneys' Offices, the federal prosecutors' offices around the country, taking part. One listed case is Ephantus Mwangi, a Missouri businessman sentenced to 51 months for withholding $331,404 in taxes from his employees' wages from at least mid-2017 through 2018 and willfully failing to pay it to the IRS.

Source: US Department of Justice

United States

Enforcement & Liability

The Office of the Comptroller of the Currency, the US regulator of national banks, found that all nine of the largest national banks it supervises had policies restricting certain industries' access to financial services, including firearms, coal and digital assets

The report covers 2020 to September 2025 and faults broad reputation-risk policies that lacked clear, objective, risk-based criteria. The comptroller's office announced no enforcement action; it says it is considering actions to stop banks discriminating on political or religious beliefs and will assess changes to the rules for the largest banks.

Source: Office of the Comptroller of the Currency

Supply Chain Risk

Attackers stole configuration files, encrypted passwords and private keys from a console that managed more than 500 FortiGate firewalls a telecom provider ran for itself and its clients, in September 2024, Palo Alto Networks' Unit 42 reports

Palo Alto Networks' Unit 42 threat research team reports the intruders exploited a flaw in the provider's central FortiManager console, which manages Fortinet firewalls, and that some of their tactics overlap with suspected nation-state intrusions. Unit 42 did not examine the clients' networks. What it confirms stolen is configuration and credential material, not a break-in at the clients.

Source: Unit 42

Regulatory Horizon

Starting October 19th, contractors that sell AI language-model tools to federal agencies can't use government data to train or improve AI models, under a new clause from the General Services Administration, the government's buying agency

Nextgov, a federal-government news site, reports the clause also bars using the data to inform advertising or selling it to a third party. The clause adds licensing the data and using it for sales, strategy or other business decisions, and applies only where the AI is a material feature and government data goes into or comes out of it; tools contractors use internally are exempt.

Source: Nextgov

Around the World

Supply Chain Risk

The Panama Canal Authority is raising the daily slots for its largest locks to 10 starting October 15th, for 33 across the canal

It bases the increase on the present and projected level of Gatun Lake, part of the canal itself, and set the maximum draft in those locks, how deep a loaded ship may sit, at 14.94 meters (49 feet). It says the water deficit continues, so a reservation remains the only way to guarantee a transit date and ships without one may face indefinite delays.

Source: Hellenic Shipping News

Mexico exempted imported car-assembly kits from its 10% tariff for five years, for automakers with a customs bonded-warehouse permit

[ES - Expansion]

The exemption covers parts from any country, El Economista, a Mexican business daily, reports. Eric Ramírez, an analyst quoted by Expansión, another business daily, says the decree's text sets no minimum local-content requirement, which Expansión frames as opening the door to assembling Chinese cars in Mexico.

Source: Expansion

Geopolitical Shocks

Two Singapore-registered container ships were reportedly hit by unknown projectiles a day apart in the Strait of Hormuz, the Gulf's oil-shipping chokepoint, and one, the GFS Pride, has sunk, Singapore's port authority says

The GFS Pride was hit on October 13th, Singapore time, caught fire and sank; all 21 crew were evacuated. The second ship, GFS Giselle, was hit the next day and reached a safe anchorage under its own propulsion with all 22 crew safe. The authority names no one responsible.

Source: Maritime and Port Authority of Singapore

Regulatory Horizon

The US Federal Maritime Commission, the shipping regulator, proposed a $200,000 fee each time a Spanish-flagged ship enters a US port, plus import limits on Spanish goods from cosmetics to ceramics

gCaptain, a maritime news site, puts the five product categories at $3.1 billion of US imports from Spain in 2025. The notice says initial reports indicated Spain refused port access in November 2024 to three US-flag ships on the grounds that they were carrying cargo bound for or coming from Israel. Comments are due December 14th.

Source: gCaptain

Also Today

King Khalid International Airport in Saudi Arabia's capital, Riyadh, is closed to flights until 2100 GMT, or 5 p.m. US Eastern, on October 17th after attacks by the Houthis, the Yemeni armed group, one of which killed 13 people

Source: ProPakistani

Bulgaria summoned Russia's ambassador after a second drone attack in a week sank a ship in its Black Sea waters

Source: Balkan Insight

The US Supreme Court seemed ready to let a lawsuit go forward accusing Paramount Global, the media company, of breaking a 1988 video-privacy law by sharing a man's viewing history with Facebook

Source: SCOTUSblog

NSO Group, the Israel-based maker of the Pegasus spyware Poland's last government used, kept full access to the system, including the power to change its software, Polish prosecutors say

Source: The Record

The chatbot company Character.ai filed for Chapter 11 bankruptcy on Monday, with Disney agreeing to open the sale process with a $20 million bid to license some of Character.ai's intellectual property

Source: CNBC

More than two dozen House Democrats asked the Federal Aviation Administration to pause SMART, an AI tool that pulls 200 data streams into one view to cut flight delays, which went live in limited form last month at three Washington-area airports

Source: FedScoop

Microsoft says the criminals behind three phishing kits from one Chinese-language network have facilitated more than a billion scam emails and texts to over 75,000 organizations since January 2026

Source: Microsoft Security

Get the full risk analysis every Sunday. Manage your subscription.