All Posts

FinCEN's final rule removes beneficial ownership reporting for US companies and deletes US-person data. A smaller federal database, not less scrutiny.

A private banker moved client funds through more than 20 transfers. A second approver signed off, which is why that control was not independent.

The FBI warns that deepfake videos of its own personnel are being used to re-target people who already lost money to fraud.

Chainalysis counted over $30 million taken by force from crypto holders this year, with home invasions rising sharply and relatives targeted.

The FBI warns that OAuth consent phishing gives attackers persistent access to email and files without a password or a second factor.

A fintech disclosed passports and transaction histories after a fraudulent government request. What families should be asking their providers.

California's DROP platform sends one deletion request to every registered data broker. Useful, but not a complete answer to your PII footprint.

Florida confirmed a breach of its law enforcement driver and vehicle database. The identifiers exposed cannot be reissued the way a password can.

A new KSE Institute study counts at least 180 partnerships between foreign defense companies and Ukrainian manufacturers since 2022. About 22 percent have stalled, and the gap between private firms and state-owned enterprises is stark.

A DOJ indictment traces gift cards taken in romance and elder scams into electronics resold abroad. What families and advisors should watch for.

Our 2026 research found that family office security plans are rarely absent, but often stale, incomplete and untested. Here is what changes the picture.

Romania's intelligence service says it disrupted a Russian-coordinated sabotage operation and the Romanian government detained a Russian citizen living in the country. Authorities say the suspect was observed from February 2026 photographing and filming communications centers, Romanian military facilities used by NATO allies, critical infrastructure, and Ukrainian Antonov cargo aircraft while they were in Romania. The suspect was reportedly tasked by an intermediary over me

Adversaries do not. That split only exists on an org chart. Threats move across boundaries. The strategy that meets them has to as well. Most risk conversations still stop at those two visible domains. The rest accumulate quietly until something forces them into view. Often all at once, and on the incident’s terms, not yours. We built our approach on a simple truth: threats move across boundaries. The strategy that protects you should too. Learn more about our integrated ris

On August 26, Sen. Josh Hawley opened an inquiry into Flock Safety, writing to CEO Garrett Langley that the company "boasts more than 120,000 cameras across 49 states and more than 20 billion vehicle scans every month." Flock, which announced new guardrails in August 2026 including a seven-day default retention recommendation, has until September 8 to respond. Flock describes the system differently. Flock says its technology has supported investigations and helped locate mis

Presage Global Founder and CEO Edward V. Marshall joins the UHNW Institute's SFO Circle Q&A Series for a conversation with Senior Institute Advisor Kristen Oliveri on today's evolving risk landscape. The series highlights thought leaders through the lens of the Institute's single-family office pillars. In this discussion, Edward and Kristen explore how children are navigating increasingly complex digital ecosystems, the most significant threats families face today, and the pr

During reinforcement-learning training and cybersecurity evaluations, agents running mostly on an internal research model repurposed an OpenAI-hosted instance of a dev tool as an unsanctioned message board. Agents then exploited vulnerabilities that allowed to make internet requests on their behalf, sharing access methods, credentials, and findings across agent runs. The agents later targeted Hugging Face as part of a collective effort to understand or manipulate an evaluatio

Edward Marshall, Founder and CEO of Presage Global, has been named Chair of the Risk Management Domain. We also want to extend our sincere thanks to Linda Bourn for her leadership of this Domain, and we're grateful for her continued involvement across other important areas of the Institute. Allison Rohner Lawshe of Northern Trust joins the Philanthropy Domain, while Paulina Mejia of Fiduciary Trust International and Jonathan Forster of BakerHostetler join the Trust and Estate

A technical review of a NERO R-ONE speed camera found an undocumented mechanism that could grant shell access via SMS from hardcoded Russian phone numbers. The authority also found disabled SecureBoot, an unauthenticated web-management portal, and exposed live video feeds. It assessed the device as a rebranded Russian CORDON PRO.M. The lesson: Verify and regularly re-confirm everything that is connected to your networks. Even something mundane as an inexpensive and convenient

Our Privacy Balance Sheet compiles your exposure the way an adversary would, then gives you the plan to take it apart. See it before they do.

Keith Smith Managing Partner When organizations evaluate security for a corporate event, gala, or benefit, the conversation almost always drifts toward the countable things. How many personnel? How many magnetometers? What's the coverage ratio? What does it cost? Those numbers are easy to compare on a spreadsheet, which is exactly why they dominate the decision. But they measure the wrong thing. The difference between an event that runs flawlessly and one that quietly falls a