Mercury Brief

The EU AI Act makes boards accountable for AI risk. Here’s what leaders need to know — and a 30-day plan that builds trust with regulators & investors.

Cybersecurity misstatements are now securities law violations.

You don’t have to get hacked to get fined anymore.

In July 2025, the U.S. passed the One Big Beautiful Bill Act as part of a federal reconciliation package. The original version included a shocking provision…

1. Introduction The 2023 National Cybersecurity Strategy Implementation Plan (NCSIP) marks a turning point in how the United States approaches digital defense. Rather than laying out vague promises, it provides a structured, actionable roadmap aligned with the National Cybersecurity Strategy (NCS). With clear goals, timelines, and shared responsibilities across federal agencies, the plan centers…

In a rare twist here is some good Cybersecurity news.  The Guardian put an article out on Feb 5th that there was a decline in ransomware payments.  So, does this mean the threat is over? Not quite. The data comes from blockchain analytics firm Chainalysis, which tracks cryptocurrency transactions linked to ransomware groups. Their…