Daily Brief, October 31, 2026
Daily Brief, October 31, 2026
Top Story
Fitch moved France's credit outlook to negative while keeping its A+ rating
Fitch expects French government debt to rise from nearly 115.7% of economic output in 2025 to 124% in 2028.
Source: Le Monde (English edition)
United States
Enforcement & Liability
General Motors will pay $220 million to settle a 36-attorney-general case over selling drivers' behavior and location data
The attorneys general said General Motors sold driver behavior and location data to third parties including data brokers, who resold it to insurance companies that used it in part to set rates.
Source: Washington State Attorney General
A Honeywell Aerospace shareholder sued the company, its chief executive and its finance chief after an approximately $2.04 million cybersecurity settlement
The complaint, filed September 22nd in Arizona federal court, says investors learned of the cybersecurity investigation only when the settlement was announced on September 1st.
Source: The D&O Diary
More than 20 US states sued the federal government after the US Treasury Department stopped requiring US companies to report who really owns them
Treasury dropped the requirement in August, calling it a burdensome reporting rule. The states argue that a law Congress passed in 2021 to stop criminals hiding money behind anonymous shell companies cannot be undone by an agency rule.
Source: OCCRP
Cyber Threats
A tampered copy of Anthropic's Claude Code, an AI coding assistant, tried to plant a backdoor on developers' machines after appearing for a few hours in the marketplace of the Cursor code editor
Cursor says versions 2.1.312 and 2.1.313 were served on October 29th; Microsoft says its own Visual Studio Code marketplace and npm never carried them. The loader tries to write a remote-login key and startup entries outside the extension's folder, so Microsoft advises removing those too. Anthropic says it did not make the package.
Source: Microsoft Security Blog
Supply Chain Risk
Polymarket, the prediction-market betting site, says it will repay users after a compromised outside vendor led to losses that blockchain security firms put at more than $2.1 million
Hudson Rock, a security company, names the vendor as DebugBear, a website-performance service that told customers to remove its code from their sites. Neither Polymarket nor Hudson Rock names an attacker.
Source: The Record
A strike by about 250 maritime security watchmen at Los Angeles and Long Beach terminals is postponed until at least November 4th as their union and the terminal employers extend talks
The employers' group, the Pacific Maritime Association, says the watchmen work at terminals handling about 85% of Long Beach cargo and a third of Los Angeles cargo, and that other dockworkers are unlikely to cross the watchmen's picket lines. Talks continue with federal mediators; the last contract expired in July 2025.
Source: gCaptain
Infrastructure & Capacity
The Federal Reserve's inspector general called the central bank's information security program ineffective
The inspector general scored the program 2 out of 5, down from 4 in fiscal 2024 and 3 in fiscal 2025, and gave the Consumer Financial Protection Bureau the same 2 this week.
Source: FedScoop
Around the World
Enforcement & Liability
FATF, the global anti-money-laundering standard-setter, took Bulgaria, Cote d'Ivoire, DR Congo and Monaco off its increased-monitoring list
FATF's separate call-for-action statement kept Iran, North Korea and Myanmar on its high-risk list, urging countermeasures against Iran and North Korea and extra checks for Myanmar.
Source: Financial Action Task Force
Cyber Threats
Two cryptocurrency-tracing firms, Chainalysis and TRM Labs, say North Korea's Lazarus Group is the likely culprit in the $6.3 billion theft from crypto exchange Binance
Binance first pointed to a compromised engineer's laptop, then said its investigation had found more points of breach.
Source: BBC News
Supply Chain Risk
Russia's deputy prime minister says the country will export 2.15 million metric tons of diesel in November, up from 510,000 in October
[RU · Kommersant]
Alexander Novak says an order covering diesel supplies through the end of January is being prepared. Kommersant, a Russian business daily, reports Russia's ban on diesel exports by producers stays through year-end, but several oil companies already hold permits to export set amounts.
Source: Kommersant
Copper concentrate exports from Rio Tinto's Oyu Tolgoi mine in Mongolia fell about 70% after Chinese border restrictions
Daily truck convoys at the Mongolia-China border crossing fell to about four from 12 or 13, the mine operator told the Associated Press.
Source: Mining.com
Italian inflation hit 5.4% in October, with energy prices up 31.4%, while truckers and farmers blockaded roads, ports and fuel depots over diesel costs
A temporary diesel tax discount expired earlier in October, with energy prices already 31.4% above a year earlier.
Source: Fortune (via DNyuz)
China's commerce ministry opposed a US ban on device testing in Chinese labs and warned of supply chain disruption
The US Federal Communications Commission's decision bars device testing in China by 2028, and the SCMP describes it as barring Chinese labs from certifying smartphones and computers.
Source: South China Morning Post
Andy Yen, chief executive of privacy-focused email provider Proton, dismissed an employee's request to security-test new code before release as 'loser thinking'
He wrote it in the company's security Slack channel at the end of August and told the employee to 'stop lovingly handcrafting all our code and use AI more.' On Friday he called off AI 're-interviews' planned for nearly all staff, 404 Media reports. Many users say they are canceling paid plans.
Source: 404 Media
Geopolitical Shocks
Iran's Revolutionary Guard says three tankers, one a supertanker, hit mines and caught fire in the Strait of Hormuz on a route Tehran calls unauthorized
Iran names no ship or operator, and the claim is unverified. US Central Command, the US military's Middle East command, says the recognized shipping lanes through the strait are clear of mines. Separately, Oman evacuated 25 crew from a Panama-flagged ship after an attack set it on fire off its Musandam coast.
Source: Caspian Post
The Kremlin says about 150 documents were signed on the sidelines of the Russia-Africa summit
[RU · Sputnik, Russian state media]
The Kremlin separately counted 53 government-to-government and agency-to-agency documents, plus a military cooperation agreement between the Russian and South Sudanese defense ministries.
Source: Sputnik
Also Today
Christine Lagarde will step down as European Central Bank president on February 7th, 2027
Source: European Central Bank
Central African Republic stepped up border screening as the Ebola outbreak centered in DR Congo passed 10,000 cases
Source: Africanews (AFP)
Tanzania's president said Tanzania and Angola agreed to link their Atlantic and Indian Ocean freight corridors by rail
Source: Reuters
Get the full risk analysis every Sunday. Manage your subscription.
