Guidance on Managing Third-Party Cybersecurity Risks

The New York State Department of Financial Services issued guidance on managing cybersecurity risks associated with third-party service providers. The guidance clarifies existing requirements and recommends best practices for covered entities to strengthen their oversight of these providers.

DFS Alert: Phishing Scam Targeting Regulated Entities

The New York Department of Financial Services (DFS) issued an alert regarding a phishing scam targeting regulated entities. The notice advises entities to exercise caution with unexpected communications and verify legitimacy before taking action.

Cybersecurity Advisory on Targeted Vishing Attacks

The New York State Department of Financial Services (DFS) issued a cybersecurity advisory highlighting an increase in targeted vishing attacks. Regulated entities are urged to review their cybersecurity programs and implement enhanced measures to protect against credential theft and unauthorized access.

DFPI Enforcement Actions - November 2025

The California Department of Financial Protection and Innovation (DFPI) issued several enforcement actions in November 2025, including consent orders, settlement agreements, and license revocations. These actions address violations of California's Financial Code and Corporations Code related to lending, financing, and securities activities.

California DFPI Enforcement Actions - September 2025

The California Department of Financial Protection and Innovation (DFPI) issued 14 enforcement actions in September 2025. These actions targeted individuals and firms for violations including unlawful broker-dealer activity, investment adviser misconduct, and illegal digital financial asset activities.

DFPI Enforcement Actions and Orders - December 2025

The California Department of Financial Protection and Innovation (DFPI) issued a summary of enforcement actions and orders for December 2025. These actions include desist and refrain orders, accusations, and license revocations against individuals and entities for violations of securities, debt collection, escrow, and financing laws.

California DFPI Enforcement Actions Summary - October 2025

The California Department of Financial Protection and Innovation (DFPI) issued 7 enforcement actions against 7 entities and 4 actions against individuals in October 2025. These actions address violations of various financial laws, including the California Consumer Financial Protection Law, California Commodity Law, and California Financing Law.

California DFPI Enforcement Actions - August 2025

The California Department of Financial Protection and Innovation issued enforcement actions against 14 entities in August 2025 for violations including unlawful debt collection, investment adviser activity, and franchise investment law. Actions range from settlement agreements to desist and refrain orders.

FERC Order on Energy Resources in Capacity Auctions Affirmed

The U.S. Court of Appeals for the D.C. Circuit affirmed a Federal Energy Regulatory Commission (FERC) order concerning energy resources in capacity auctions. This decision upholds FERC's authority and previous rulings on the matter, impacting how energy resources are evaluated and procured in organized markets.

SEC v. Gessin, Equifunds, Ice Fleet - Securities Fraud Enforcement

The SEC announced final judgments by default against Equifunds, Inc., John David Gessin, and Ice Fleet LLC for a fraudulent scheme that raised over $1.6 million from retail investors. The judgments include disgorgement, prejudgment interest, and a civil penalty against Gessin.