The European Commission's AI Office sent its first-ever Article 91 requests for information to more than 30 general-purpose AI providers on September 1, 2026, probing safety practices and copyright compliance, with fines up to EUR 15 million for misleading answers.
Ireland's Data Protection Commission fined the Health Service Executive 645,000 euro on September 2, 2026, not for a cyberattack but for patient records left to rot in disused bathrooms, a shipping container, and derelict buildings, a case that extends GDPR enforcement into physical archive management.
Revolut received a preliminary conditional national bank charter from the US Office of the Comptroller of the Currency on September 3, 2026, but the regulator's own decision excludes retail foreign exchange and limits Revolut's stablecoin role, leaving Federal Reserve and FDIC approval still pending before a targeted 2027 launch.
Amsterdam-based Wonderful closed a $550 million Series C (about EUR 500 million) at a $5 billion valuation in September 2026, with Salesforce joining as a new investor even as it sells its own Agentforce agent platform to the same enterprise buyers. The deal signals that model-agnostic middleware is no longer a fringe bet against vendor lock-in.
ChatGPT, Claude, and Grok all suffered outages within the same five-hour window on 3 September 2026. Each vendor named a separate cause, but all three lean on Microsoft Azure - here is what that means for DORA and NIS2 concentration-risk registers.
Uber and Wayve launched the UK's first public autonomous ride-hailing service in London on 3 September 2026, but a licensed driver still supervises every trip. Fewer than 20 Ford Mustang Mach-E cars are live, and the real trigger to watch is when that driver requirement gets relaxed.
The UK's Subsidy Advice Unit reviewed DESNZ's GBP 1-5bn, 20-year subsidy plan to keep Sizewell B running to 2055 and found three unexplained compliance gaps, without blocking the deal. The findings preview how UK energy security policy trades procedural rigor for speed.
Cloudflare's new Vulnerability Discovery and Remediation service pairs Managed Defense network context with OpenAI's Daybreak and GPT-5.6 Cyber models to hunt vulnerabilities inside customer codebases. It proposes patches and evidence, not automatic fixes, but the source-code access itself is the real due-diligence question for EU operators.
The EU General Court dismissed Opera's case seeking to force Microsoft Edge into DMA gatekeeper status, citing Edge's 5.8 percent EU browser share against Chrome's 59 percent. The ruling is the first judicial test of a DMA non-designation decision and sets a real market-share bar for future challenges.
The EU's Cyber Resilience Act imposes a 24-hour vulnerability disclosure deadline from September 11, 2026, routed through a new ENISA-built reporting platform separate from the US-led CVE system. Freshfields' analysis warns the clock does not pause for weekends and stacks on top of NIS2 and GDPR duties.
Ofgem is consulting on a Data Centre Commitment Fee that would force UK data centre developers to post GBP 237,000 to GBP 712,500 per megawatt of grid capacity, forfeited if the project misses its energisation date. The consultation closes September 16, 2026.
At least eight laptops and a Steam Deck were stolen from indie exhibitors at Gamescom 2026. Organizers' September 4 statement admits their first response missed the mark, after CD Projekt RED, not Koelnmesse, replaced one victim's stolen gear.
Page 29 / 142
One considered note on infrastructure, governance, and measurement, most mornings. No theory.