Corporate AI Governance

JPMorgan Chase CEO Jamie Dimon told business leaders that cyber risk has grown since new AI models emerged, calling it the company's biggest risk "by far." In a WSJ Leadership Institute conversation with Alan Murray, he urged firms to act immediately: segment their networks, tighten identity and access management, and use their strongest AI tools to find weaknesses before attackers do. He also said companies must get better at fixing the flaws they find and should make remediation a standing item in management meetings. Dimon is focused on critical infrastructure and the supplier networks companies rely on. He chairs the Alliance for Critical Infrastructure on an interim basis. The group includes about 50 companies, among them JPMorgan and Mastercard, and he has been recruiting more CEOs to join. He has linked the escalation to Anthropic's Mythos model, saying in an October 6 Bloomberg TV interview that risk rose tenfold after Mythos. Separately, the same day brought news of doubleAI, a Tel Aviv startup backed by Nvidia, which launched Maxwell, a product it describes as a code execution model that runs inside live programs to improve performance. The company says Maxwell cut an early customer's compute costs by 67% and that it plans to charge customers a share of the savings.

The Wall Street Journal reported on October 18 that Anthropic has disclosed little about how its five-seat Long-Term Benefit Trust works, even as it prepares what could be one of the largest IPOs ever attempted. The trust can seat four of the company's seven directors and remove them without cause. It must receive five days' notice before Anthropic takes on more than routine debt, sells half or more of itself, or transfers control of a frontier model to another party. The trust holds no equity, and removing it requires support from 85% of shareholders' voting power, according to a person familiar with the structure.

Former staff from Anthropic, OpenAI, and Google DeepMind testified at a New York City Council hearing on October 5, 2026, after the companies sent representatives following a warning from the council's office that subpoenas would follow. Jacob Coxon, Daniel Kokotajlo, and Alex Turner spoke at the hearing. In a separate development, Robinson, OpenAI's former safety leader, wrote in an essay for The Atlantic that the "trial and error" approach favored by AI companies has to end, describing the wave of departures as a "parade of former colleagues" leaving over concerns about the technology or how it is used. Council Speaker Julie Menin says the council will go to court, alleging that one company is in direct violation of its subpoena.

Freshfields LLP apologized "unreservedly" on Monday, October 19, 2026, for a remark by Ethan Klingsberg, co-head of the firm's US corporate and M&A team. In an internal email exchange with global managing partner Alan Mason, Klingsberg said the firm would approach "sophisticated investors" and that this "probably" ruled out "Middle Eastern sovereign wealth money." The firm said the remark "does not reflect the position or beliefs of the firm" and that it holds its Middle East clients in the highest regard. The Financial Times first reported the exchange, which also shows leadership weighing a spin-off of Freshfields Lab, the firm's in-house legal tech arm, into a standalone business the emails describe as potentially worth "billions."

Google made its Gemini 4 Argon model generally available on October 13, 2026. Developers can access it through the API in AI Studio and the Gemini platform. Google AI Ultra subscribers get it in Antigravity, and Ultra and Pro subscribers get it in the Gemini app and AI Mode in Search. Google is pitching Argon for multi-step "deep work" in coding, finance, law, cybersecurity and science. Launch API pricing is $2 per million input tokens and $10 per million output tokens, and those rates double after November 30. Google also expanded its Fairwind cybersecurity program to hundreds of additional partners, offering them a version of Argon without its cyber guardrails. Separately, 10,000 scientists get six months of free access to Antigravity's highest usage tier. Reuters named early testers including Deloitte, LexisNexis, Ambience Healthcare and Isomorphic Labs.

The White House secured a voluntary AI safety pact on Oct. 1, 2026. Representatives of OpenAI, Anthropic, Meta, Google, SpaceXAI and Nvidia signed the Joint Commitment on Frontier Responsibilities, pledging internal controls and independent external auditors, according to Fortune. The pact fits a broader light-touch approach. Trump rescinded Biden's Executive Order 14110 within hours of taking office on January 20, 2025. On March 20, 2026, the White House proposed a national framework that urges Congress not to create new federal AI rule-making bodies and to preempt state laws that "impose undue burdens" on companies. Trump also named National Intelligence Director Jay Clayton and FTC Chairman Andrew Ferguson to his new "Super Intelligence Force." The administration has taken one binding step. On Oct. 9, officials announced that AI companies must notify and correct security incidents, following Anthropic's disclosure of unintended model actions involving government systems. A White House statement called the requirement "not optional" and "a critical national security obligation."

Gartner released a survey on October 19, 2026, at its IT Symposium/Xpo in Orlando. It found that only 13% of CIOs say their enterprise has gained significant or transformational value from AI so far. The survey covered 2,002 CIOs and technology executives, fielded from May to July 2026. Gartner analyst Alicia Mullery argued that spending and adoption are not the same as results. Only 17% of respondents have rules for abandoning low-value AI projects already in production, and 31% have criteria for halting pilots before they reach production. Separately, Abu Dhabi-based CNTXT AI announced its first U.S. office, in Milpitas, California, which it describes as part of Silicon Valley.

Hogan Lovells Cadwalader announced on October 16, 2026 a firmwide AI strategy built around a new AI Board. The board will evaluate ideas from the firm's practice groups and sectors on where AI can improve the delivery of legal services, and it will decide whether each tool is built in-house or bought, then oversee its development and deployment. The firm signed agreements with legal AI vendors Harvey and Legora, and its in-house legal technology unit, ELTEMATE, will continue building proprietary tools. Washington partner Paul Otto was named managing partner for legal technology and AI, and London-based Oliver Campbell was named chief transformation officer. CEO Miguel Zaldivar said no single AI solution will meet every need of a modern global law firm. Per Law.com, the firm is pursuing a hybrid of custom-built and commercial products. Zaldivar also predicted that pricing will shift toward fixed or alternative fee arrangements by 2029.

Fast Company has published an opinion column arguing that the gains AI brings to B2B marketing, including more content, personalization, segments, and channels, should be weighed against trust. The author's central point is that trust matters more as AI shifts from generating outputs to taking actions. The column points to a Cloud Security Alliance and Token Security report, published April 21, 2026, which found that 65% of organizations experienced at least one cybersecurity incident in the past year caused by AI agents operating on corporate networks. It also cites a Security Boulevard account of an attacker who used Anthropic's Claude Code alongside OpenAI's GPT-4.1 to breach nine Mexican government agencies between December 2025 and February 2026.

IBM's 2026 Cost of a Data Breach Report finds that security incidents involving unapproved AI tools, known as shadow AI, more than doubled this year, rising from 20% to 43% of breached organizations. Those incidents cost more. Average costs climbed from $4.63 million to $5.39 million, compared with a global average breach cost of $4.99 million. Regulatory fines followed in roughly one in five cases. Forty-nine percent of shadow AI incidents led to data loss or compromise, and 42% caused operational disruption. An opinion column on shadow AI cites these figures and argues that companies should first examine why employees turn to unapproved tools before restricting them.

Debevoise & Plimpton is preparing a new version of STAAR, its Suite of Tools for Assessing AI Risk, for 2027, according to Law360 Pulse. The firm presents the update as a way to help clients with their AI projects. STAAR is a paid service sold on monthly subscriptions. It gives clients continuously updated AI legal resources, including policies, training materials, governance lessons, regulatory trackers, and descriptions of generic AI use cases. The 2027 version follows STAAR 2.0, announced March 9, 2026. That release is built on Legora's AI Portal and is designed to help in-house legal and compliance teams evaluate, govern, and deploy AI. Blackstone, Capital One, Evercore, GSK, and New York Life are in the early-adopter beta, which runs through August 31, 2026.

Above the Law published an episode of its "Adventures in Legal Tech" podcast on October 13, 2026, in which host Jared Correia interviews Rachel Shields Williams about the state of most firms' data and how the industry can manage it better. Williams, director of AI and knowledge management at Bass, Berry & Sims and 2026 president of the Legal Marketing Association's International Board, argues that AI alone will not fix disorganized information. The episode uses a swimming analogy to describe the risks of legal technology. It is part of a recurring series that has covered practice management, intake, and AI for small firms since 2025.

Anthropic said Sunday, October 18, 2026, that it will commit 5% of its shares to a new Public Benefit Fund, effective immediately and subject to stockholder approval. The company also said it would add 2% more at the board's discretion for every 50% increase in its value. The fund could make donations to nonprofits or direct distributions to specific populations, and Anthropic named labor market disruption caused by AI as one possible cause it could address. The fund would be organized as an LLC wholly owned by Anthropic, not as a nonprofit, and no equity it holds can be directed to lobbying or political donations in the U.S. or overseas. Elon Musk, who runs rival xAI, posted on X that he recommended "giving the shares directly to the public." No government agency or legislation is involved in the announcement.

Figma general counsel Brendan Mulligan told Law360 Pulse that he is building a more technical legal team, with a focus on legal operations so the company can get as much efficiency as possible out of Figma's own AI tools. He says the department is hiring toward legal ops and lawyers with greater technical fluency to prepare for what comes next. Mulligan has led Figma's legal function since February 2024. He joined the company in July 2019 as Director of Legal, later served as VP of Legal, and previously held legal roles at Uber and worked as an associate at Morrison & Foerster.