30
55
60
30
55
NYS DFS Issues New Cybersecurity Guidance on Risk Assessments for Financial Services Entities
New York DFS issued cybersecurity guidance defining expectations for risk assessments that regulated financial services entities must conduct.
On September 10, 2026, NYS DFS Acting Superintendent Kaitlin Asrow issued new cybersecurity guidance on conducting risk assessments sufficient to inform cybersecurity programs. The guidance covers scope, frequency, and the role of assessments for DFS-regulated financial services entities. It does not describe any incident or vulnerability, but sets regulatory compliance expectations under DFS cybersecurity rules.
22
30
42
55
60
30
30
30
42
30
42
30
30
60
42
55
30
60
New York Seizes a Dozen Celebrity Deepfake Websites
Manhattan DA seized 12 domains hosting nonconsensual celebrity deepfake videos depicting about 1,200 victims, the largest such takedown to date.
The Manhattan District Attorney's Office seized 12 domains used for sharing and selling nonconsensual deepfake sexual videos, depicting around 1,200 people, mostly women, including influencers, politicians, and celebrities. The seizures under New York criminal procedure law represent the largest takedown of explicit deepfake websites to date, aided by the US Take It Down Act. Much of the content appeared to be reposts from the MrDeepFakes platform, and investigations into operators and uploaders are ongoing.
35
NYS Comptroller DiNapoli releases more municipal cybersecurity audits
NY Comptroller DiNapoli released municipal audits including three cybersecurity reviews covering local government controls.
New York State Comptroller Thomas DiNapoli released a batch of municipal audits, three of which address cybersecurity practices in local governments. The public excerpts include the Town of Wilton cybersecurity audit (2026M-48), covering January 1, 2024 through August 8, 2025, for a workforce of 56 full-time and 13 part-time employees.
18
30
55
30
60
30
30
60
30
60
30
42
42
60
30
55