Australia – Truyu app warns of ‘Stolen Identity Validation’ tactic as criminals test compromised IDs for wider fraud

Source: Commonwealth Bank of Australia

Unexpected identity checks could be an early sign fraudsters are verifying stolen personal information before exploiting it, with Australians urged to take unfamiliar activity seriously.

27 August 2026

Truyu, the identity protection app built by CommBank, is urging Australians to be vigilant about a tactic it calls “Stolen Identity Validation”, where criminals test stolen personal information through small-scale acts of identity fraud before exploiting those same details further.

Personal information is highly sought-after by criminals because it allows them to pass identity checks required to open bank accounts, apply for credit cards and take out personal loans – leaving victims to deal with the consequences.

Truyu alerts customers when their identity details are checked by a majority1 of Australian merchants, prompting them to confirm whether they recognise the activity. Analysis of those customer responses found that nearly a third (32%) of unauthorised identity checks had been preceded by an earlier telco-related identity check.

“Criminals are constantly looking for ways to test and exploit stolen identity information before using it for wider fraud. Activating prepaid SIM cards is one method we’re seeing used,” said James Roberts, CommBank Scam Prevention Officer.

While the pattern identified by Truyu suggests criminals are taking a considered – even cautious – approach to validating stolen identity details, they waste little time exploiting those details once confirmed. In almost half of those cases (47%), a second unauthorised identity check occurred within a week of the first.

“This ‘Stolen Identity Validation’ technique is about what comes next,” continued Roberts. “Once criminals confirm your details are accurate, they can reuse them across services to open accounts, apply for credit, or impersonate you.”

“Unexplained account openings, credit enquiries, or identity verification notifications can be early signs your details are being tested – even if no money has been stolen at that point,” said Melanie Hayden, Truyu Managing Director.

“Don’t ignore the warning signs,” continued Hayden. “If you notice unexpected activity involving your personal information, take it seriously. Act quickly to secure your accounts and report it to your bank, telco or relevant provider.”

Alongside Identity Check Alerts, Truyu’s app includes a range of other features to help protect Australians from fraud, including:

  • Credit Activity Alerts: Alerts when your credit file is accessed or updated – for example, if a new bank account, loan or credit card is opened in your name.
  • Email Leak Alerts: Notifies you if your email address appears in known data breaches, so you can secure affected accounts.
  • Card Leak Alerts: Check if your debit or credit card details have been exposed, including on the dark web.
  • Password Leaks: Scans dark web sources for exposed passwords linked to your email address and prompts you to act if they’re found.
  • Scam Checker: A free, AI-powered tool that analyses screenshots of text messages to help identify potential scams and provide guidance on next steps.

Developed by CommBank’s venture scaling arm, x15ventures, and launched in May 2024, Truyu has since helped prevent an estimated $51 million in potential fraud losses, by:

  • Issuing more than 105,000 Email Leak Alerts
  • Detecting and alerting customers in the moment to nearly 25,000 identity checks
  • Identifying more than 10,000 leaked passwords

The Truyu app can be downloaded from the Apple App Store and Google Play. Truyu is also available to organisations as a breach response and cyber remediation service to help protect customers affected by a data breach.

Truyu features are not available on desktop or web.

For more, visit: truyu.com.au

1 Truyu covers 63% of identity checks in Australia.

Things you should know

Media releases are prepared without considering an individual reader’s objectives, financial situation or needs. Readers should consider the appropriateness to their circumstances. Visit Important Information to access Product Disclosure Statements or Terms and Conditions which are currently available electronically for products of the Commonwealth Bank Group, along with the relevant Financial Services Guide. Target Market Determinations are available here. Loan applications are subject to credit approval. Interest rates are correct at the time they are published and are subject to change. Fees and charges may apply.

About x15ventures

x15ventures is a venture scaler powered by CommBank. Founded in 2020, x15 builds, buys and invests in startups that would benefit from connections to Australia’s leading bank, and could improve the lives of its more than 15 million customers, by either reimagining existing CommBank products or services, or offering solutions not traditionally classed as finance, but that could extend the bank’s relationship and relevance with customers.

x15’s platform model combines the latest cloud technology (running on a separate tech stack to CommBank) with enterprise grade controls, enabling ventures to innovate at pace in a 'bank safe' environment, and scale through access to CommBank assets – including capital, brand, and customer distribution – once ready.

For more, please visit: x15ventures.com.au.

Official release

US PCE inflation: US economy flashing a stagflation warning, warns deVere CEO

Source: deVere Group

August 26 2026

US consumers pulled back sharply in July while inflation stayed stuck well above target, a combination the CEO of global financial advisory deVere Group says investors are not taking seriously enough.

New Commerce Department data released today shows inflation adjusted consumer spending was flat in July, a sharp slowdown from a 0.4% gain in June.

At the same time, the Personal Consumption Expenditures (PCE) price index, the gauge the Federal Reserve uses for its 2% inflation target, held its annual rate at 3.7%, above the 3.6% economists had forecast.

Core PCE, which strips out food and energy, came in at 3.3% annually.

He says: “Growth is stalling while inflation refuses to fall. Put those two trends together and you get the looming spectre of stagflation.

Nigel Green says the combination puts the Federal Reserve in a genuinely difficult position heading into its next decision.

“A central bank can fight high inflation by raising rates, or it can support weakening growth by cutting them, but not both. This data suggests the US economy may now need both at once.”

The Fed's target range currently sits at 3.50% to 3.75%, and its next rate decision lands on 16 September. Ahead of today's inflation data, futures markets were already leaning toward a hold rather than a cut or a hike.

Nigel Green says this report makes a hold even more likely, but for the wrong reasons.

“Markets are reading a hold as caution. I read it as a Fed that's run out of good options.

“Cutting into inflation this sticky risks reigniting price pressures investors thought were behind them. Hiking into spending this weak risks tipping an already slowing consumer over the edge.”

He says the flat spending figure deserves more attention than it is getting.

“Consumers pulling back while prices keep climbing is the clearest signal you can get that household budgets are being squeezed from both directions.

“Wages aren't stretching as far, and now people are buying less to compensate. This is not a resilient economy absorbing higher rates comfortably, and investors treating it as one are misreading the data in front of them.”

The deVere CEO warns against assuming the current calm in markets will hold until September. “Stagflation scares tend to arrive quietly and then move fast once bond markets start repricing growth and inflation expectations at the same time.

“The label alone should encourage investors around the world to revise how their portfolios are built heading into autumn.

“America has not seen this combination take hold since the 1970s, and it took years of policy mistakes to shake off back then.

“Investors treating today's inflation data as a temporary blip are gambling on history not repeating itself.”

deVere Group is one of the world's largest independent advisors of specialist global financial solutions to international, local mass affluent, and high-net-worth clients. It has a network of offices around the world, more than 80,000 clients, and $14bn under advisement.

deVere launches live global pricing hub as one war moves gold, oil, silver, dollar at once

Source: deVere Group

26 August 2026

Four of the world's most closely watched markets are being pulled in different directions by the same conflict, says the CEO of one of the world's largest independent financial advisory organisations.

Nigel Green of deVere Group's comments come as oil, gold, silver and the US dollar all carry the fingerprints of the Iran war, six months on, moving in ways few forecasters called at the start of the year.

In direct response to demand, deVere Group has built and launched live pricing and analysis pages across all four markets, designed for investors managing money across borders and currencies rather than sitting inside a single market.

He says: “We built these pages because our investors are living across dozens of countries, and they were checking four different markets through four different sources just to get a full picture.

“Each page now shows live pricing in multiple currencies, an explanation of what's actually driving that market, and where serious analysts expect it to go next.

“Investors get one home for that, updated in real time, in the currency they actually use.

“Investors keep asking for one number, one market, one signal that explains what is happening right now. There isn't one this year.

“Oil, gold, silver and the dollar are all being pushed by the same war, and each one is telling a different part of the story.”

Brent crude touched $126 a barrel in April, a 65% jump in a single month, before easing back toward $90 as supply adjusted and shipping through the Strait of Hormuz slowed rather than stopped outright, according to deVere's live oil price tracker .

“Oil doing that in four weeks shows how thin the market's patience has become. A single chokepoint and a handful of missiles were enough to throw out pricing assumptions built up over years.”

Gold has cooled from its own highs, deVere's gold price page shows. The median forecast for the metal has been downgraded twice this year, slipping from $4,916 to $4,509 an ounce, even as it still trades close to $4,680.

“Gold usually thrives on uncertainty like this. This year the dollar got there first. A stronger dollar has done some of the safe haven work gold normally handles alone, and that has capped it more than most forecasters expected in January.”

Silver has told the opposite story. Data on deVere's silver price page shows the metal trading near $70 an ounce on a sixth straight year of supply deficits, with demand from solar and AI infrastructure adding pressure a currency story alone cannot explain.

The deVere CEO says silver has outgrown its usual role. “Silver is not just riding gold's coattails anymore. Solar panels and AI infrastructure need physical silver, and six years of deficits have left very little slack in the market. This is a structural story, not a sentiment one.

“The dollar has done the one thing almost nobody predicted in January, it has strengthened through a war rather than weakened against it.

“Higher rates for longer and safe haven flows have kept it firm, and that alone has reshaped what gold, oil and every other dollar priced asset is doing,” he adds, pointing to deVere's US dollar exchange rate page for the latest moves.

He concludes: “None of these four markets can be read in isolation right now. Investors who are only watching one of them are missing most of the picture, and that gap tends to get expensive.”

Wall Street has priced Nvidia for perfection, that might not be enough: deVere CEO

Source: deVere Group

August 26 2026

Nvidia doesn't need to beat earnings expectations today, it needs to shatter them, warns the CEO of one of the world's largest independent financial advisory organisations.

Nigel Green of deVere Group's comments come as Nvidia prepares to report after the US market closes today (26 August), with Wall Street forecasting quarterly revenue near $92 billion and options traders pricing a swing of more than 5% in the shares once results land, worth close to $280 billion in market value in either direction.

He says: “A company can post one of the best quarters in corporate history and still watch its share price fall the next morning.

“Markets are showing investors exactly how dangerous herd priced perfection has become.”

The backdrop into tonight's report looks unusually calm on the surface. Oil has fallen sharply this week, with US crude down more than 3% and Brent easing below $90 a barrel, while the 10 year Treasury yield has drifted toward 4.6% after weeks near its highs.

Both trends normally help expensive growth stocks such as Nvidia, since cheaper energy eases inflation pressure and lower yields make future profits easier to justify at today's prices.

Nigel Green says calm conditions can be deceptive going into a report this large. “Softer oil and softer yields are giving investors permission to feel comfortable right before the one event that could upend that comfort in seconds. Nvidia has grown large enough that its results ripple through pension funds, index trackers and retirement accounts far beyond anyone who consciously chose to own the stock.”

A fresh reading on US inflation lands earlier in the day, before markets even get to Nvidia.

The deVere CEO says the order of events matters more than investors realise.

“A cool inflation print keeps yields low and gives Nvidia room to disappoint slightly and still hold its ground.

“A hot print does the opposite. It raises the cost of every dollar of future profit the market is paying up for tonight, and Nvidia is priced on more future profit than almost any company on earth.”

The scale of what is already priced in is the part Nigel Green wants investors to focus on.

“Wall Street's roughly $92 billion revenue estimate implies growth few companies of any size have sustained this long, and guidance for the following quarter is expected to push higher still.

“Beating that bar by a small margin, he argues, has stopped counting as good news. It simply confirms what the market had already assumed.

He continues: “Nine years of extraordinary growth has become the baseline expectation, not the upside case.

“When perfection is the floor, a small crack in guidance or margins can do more damage than a modest miss would to almost any other stock.”

Recent reactions across other companies linked to AI reinforce his caution. Several have posted strong quarters this year only to fall sharply because guidance, margins or spending plans landed a fraction below what an increasingly demanding market wanted to see.

Nigel Green says the lesson from those moves should not be ignored tonight.

“Good numbers are not automatically good news anymore. Investors have shown repeatedly this year that they will punish a great quarter if the future looks even slightly less great than they had convinced themselves it would be.

“Nvidia can be an outstanding company and an unforgiving stock in the same 24 hours.”

Australia – More Australians than ever are investing, but each generation is doing it differently

Source: Commonwealth Bank of Australia

New CommSec Pulse insights show Millennials dominate investor ranks, while Gen Z leads the pack on trading activity.

26 August 2026

Key points

  • Australia’s investing boom is getting a boost from younger generations entering markets earlier.
  • Millennials are Australia’s largest investing generation, accounting for 37 per cent of active CommSec Customers.
  • Gen Z holds 1.6 per cent of wealth but now outpaces Baby Boomers in active trading.
  • Female investors accounted for 42 per cent of first-time investors in FY26, up from 36.3 per cent two years earlier.
  • Total trading activity rose 27 per cent as Australians increasingly invest beyond domestic stocks.

Australia’s investor base is getting bigger, younger and is increasingly looking to international markets.

New analysis of investment trends across more than two million CommSec customers shows Australians are opening more brokerage accounts, trading more frequently and increasingly looking beyond domestic stocks for investment opportunities. CommSec recorded 11.5 per cent growth in active customers over the past financial year, with trading volumes up 27 per cent and traded value up 33 per cent.

But while investing has become more mainstream, how Australians approach the market can depend on their age, with the biggest shift occurring among younger investors.

Generation Z accounts for just 1.6 per cent of wealth on the CommSec platform yet represents 19 per cent of active market participants in FY26, making it a larger investor group than Baby Boomers. More than two-thirds of Gen Z investors hold exchange-traded funds, the largest proportion of any generation.

Gillian Bowen, Head of Media and Markets at CommSec, said the data shows investing is becoming increasingly embedded in Australians' financial lives. “Australians are investing in greater numbers than ever before, but the path they're taking increasingly reflects their life stage, priorities and financial circumstances,” she said. “Younger investors are entering the market earlier and are highly engaged, while older generations continue to hold significant pools of wealth built over decades. Together, that paints a fascinating picture of how wealth creation is evolving in Australia.”

Younger Australians are increasingly turning their focus to offshore markets. CommSec data shows that Gen X, Millennials and Gen Z each hold 10 per cent in international shares, double that of Baby Boomers. No matter the generation, global technology companies feature prominently among the most-traded securities for all investor groups, highlighting growing investor interest in offshore markets and themes such as artificial intelligence.

“What unites all generations is a growing willingness to use investing to build long-term financial security,” Ms Bowen said. “The investments may differ, but investors across every age group are becoming more engaged, more informed and more active.”

Across the generations, CommSec data show:

  • Women are a bigger force in the trading market. Female investors accounted for 42 per cent of first-time investors in FY26, up from 36.3 per cent two years earlier, and now represent 34 per cent of active investors.
  • Investors are getting younger. Traded value for customers under 40 increased 54.9 per cent, compared with 30.3 per cent for customers aged 40 and above. The under‑40 share of first‑time investor activity climbed from 63.2% in FY24 to 66.2% in FY26.
  • Portfolio values generally increase with age and time invested. The average Gen Z investor holds a portfolio of around $20,000, compared with $66,000 for Millennials, $233,000 for Generation X and $541,000 for Baby Boomers. The average number of holdings also rises steadily across generations, from three stocks for Gen Z investors to eight for Baby Boomers.

Commonwealth Bank of Australia | 250/2026

Things you should know

Data referenced in this media release is drawn from CommSec’s analysis of more than two million customers and is current as of 30 June 2026, unless otherwise stated. The information on this page has been prepared without taking into account your objectives, financial situation or needs. For this reason, any individual should, before acting on this information, consider the appropriateness of the information, having regards to their objectives, financial situation or needs, and, if necessary, seek appropriate professional advice.

About CommSec Pulse

CommSec Pulse benchmarks customer trading behaviour against the broader CommSec ecosystem to identify meaningful moments, trends and behavioural insights. Drawing on analysis of more than two million CommSec customers, the series explores how different demographic groups invest, what they trade, how they build portfolios and how investment behaviours evolve across generations. The insights are designed to help customers better understand their position relative to their peers and support more informed investing decisions.

Official release: https://www.commbank.com.au/articles/newsroom/2026/08/More-Australians-than-ever-are-investing.html

France Becomes First Official Participant at Expo 2030 Riyadh

Source: Expo 2030 Riyadh

PARIS – France is the first country to officially sign its Participation Contract for Expo 2030 Riyadh, a major milestone in its preparations and growing international momentum. The signing took place on the sidelines of the visit to France by His Royal Highness Prince Mohammed bin Salman bin Abdulaziz Al Saud, Crown Prince and Prime Minister.

The ceremony in Paris was attended by H.H. Prince Faisal bin Farhan Al Saud, Minister of Foreign Affairs of the Kingdom of Saudi Arabia, and Dimitri S. Kerkentzes, Secretary General of the BIE. The Participation Contract was signed by Talal Al-Marri, Chief Executive Officer of Expo 2030 Riyadh, and Jacques Maire, Chairman of the Compagnie Française des Expositions (COFREX).

The agreement formally establishes France's participation in Expo 2030 Riyadh, providing the framework for its presence throughout the six-month event. It specifies the location and space allocated to the France Pavilion, outlines the Pavilion's theme, and sets out the broad lines of the experience offered to visitors and businesses.

Commenting on the milestone, Talal Al-Marri, Chief Executive Officer of Expo 2030 Riyadh, said: “France becoming the first country to sign its Participation Contract is an important milestone for Expo 2030 Riyadh and a strong demonstration of the momentum behind international participation. France brings a rich history of engagement with World Expos, together with deep expertise across culture, innovation and the creation of compelling visitor experiences. We look forward to working closely with France and COFREX as their plans take shape and to seeing the ambition they bring to Riyadh in 2030. This milestone brings us another step closer to delivering an extraordinary World Expo that will bring the world together at an unprecedented scale in 2030.”

Jacques Maire, Chairman of COFREX, said: “Expo 2030 Riyadh provides an exceptional platform to showcase French creativity, innovation and know-how with audiences from around the world. We are grateful to Expo Riyadh for offering France an exceptional space, both in its location and its scale. Located within the 'Planet' district, the Pavilion's theme is 'Under One Sky.' Built around the four elements — sky, earth, fire and water — it has a dual ambition: to offer the public an immersive and meaningful experience, and to allow our businesses to demonstrate their capabilities, particularly in service of protecting the planet and the ecological transition. We will play our part in Expo's ambition to foster new opportunities for exchange, collaboration and dialogue. We are proud to be part of this global gathering and look forward to contributing fully to its success in Riyadh in 2030.”

The milestone builds on a period of continued progress for Expo 2030 Riyadh, from the recent signing of the See Agreement between the Kingdom of Saudi Arabia and the Bureau International des Expositions (BIE) to ongoing site development and operational preparations.

Expo 2030 Riyadh will take place from 1 October 2030 to 31 March 2031 under the theme “Foresight for Tomorrow.” The six-month event is expected to bring together more than 200 official participants and welcome 42 million visits. Through national pavilions, cultural programming, innovation and immersive experiences, Expo 2030 Riyadh will provide a global platform for countries and organisations to exchange ideas, build partnerships and explore solutions to shared challenges. Following the event, the site is planned to evolve into a permanent global village, creating a lasting legacy for Riyadh, the Kingdom of Saudi Arabia and the world.

About Expo 2030 Riyadh

Running from 1 October 2030 to 31 March 2031, Expo 2030 Riyadh will be among the most ambitious World Expos ever conceived with a 6 million square meter site that will bring together more than 200 official participants and 42 million visits across 5 distinct districts.

Held under the theme “Foresight for Tomorrow,” and hosted in Riyadh – a city of action and ambition – Expo 2030 Riyadh will provide a platform for participants to exchange ideas, shape solutions, and build partnerships that drive real impact, address global challenges, and unlock new opportunities. The World Expo will feature immersive cultural zones, daily activations, and AI-powered interactions, blending traditional Saudi hospitality with cutting-edge technology. Following the six-month event, the site will evolve into a global village, leaving a lasting legacy for Riyadh, Saudi Arabia and the world.

For more information: https://www.expo2030riyadh.sa/en/

About Compagnie Française des Expositions (COFREX)

Founded in January 2018, COFREX is a publicly-owned company and the first permanent structure dedicated to preparing, organising and delivering France's participation in World Expos and International Expositions. Its sustainable approach draws on the experience of previous expositions to ensure optimal organisation, at the best cost and with the lowest possible environmental impact. It is built on a partnership between public and private stakeholders, serving the image and attractiveness of France.

https://www.cofrex.fr/

Saudi Arabia and BIE Sign See Agreement for Expo 2030 Riyadh, Advancing Framework for International Participation

Source: Expo 2030 Riyadh

PARIS – The Kingdom of Saudi Arabia and the Bureau International des Expositions (BIE) have signed the See Agreement for Expo 2030 Riyadh, formally establishing the legal and administrative framework that will support Official Participants throughout their journey to the World Expo. The signing took place on the sidelines of the visit to France by His Royal Highness Prince Mohammed bin Salman bin Abdulaziz Al Saud, Crown Prince and Prime Minister.

The ceremony was attended by H.H. Prince Faisal bin Farhan Al Saud, Minister of Foreign Affairs of the Kingdom of Saudi Arabia, Dimitri S. Kerkentzes, Secretary General of the BIE, and Talal Al-Marri, CEO of Expo 2030 Riyadh.

The See Agreement sets out the legal and administrative conditions under which countries and international organizations will participate in Expo 2030 Riyadh. With the Agreement now in place, participants have the formal framework they need as they advance through the design, construction and operational stages of their Expo journey.

The signing follows the approval of the See Agreement by the General Assembly of the BIE in Paris in June 2026 and reinforces Expo 2030 Riyadh's commitment to a transparent and collaborative approach to international participation. By providing a clear and well-defined framework, it gives countries and international organizations greater confidence in the support and coordination they can expect as their preparations advance.

Commenting on the milestone, Dimitri S. Kerkentzes, Secretary General of the BIE, said: “The signing of the See Agreement marks an important milestone in preparations for Expo 2030 Riyadh. It further strengthens the institutional framework between the BIE and the Kingdom of Saudi Arabia and establishes the conditions and privileges that will support Official Participants as they prepare for the next World Expo. International participants are at the heart of every World Expo, and this Agreement reflects our shared commitment to providing them with the framework and support required for successful participation in Riyadh.”

Talal Al-Marri, CEO of Expo 2030 Riyadh, said: “Expo 2030 Riyadh represents the Kingdom's ambition to bring the world together around a shared belief in dialogue, cooperation and progress. The signing of the See Agreement marks an important step in fulfilling our commitment to welcome countries and international organisations from around the world, providing a clear framework to support their journey towards 2030 and enable them to bring their ambitions to life. As preparations advance, we are committed to ensuring that participants have the guidance, systems and support they need to contribute meaningfully to this global gathering. We are proud to be building a World Expo that will strengthen connections between nations, showcase the progress and capabilities of Saudi Arabia, and create a lasting impact for Riyadh, the Kingdom and the world.”

The framework covers areas that directly support Official Participants and their teams, including travel and visa arrangements, tax and customs measures, mobility support, and other technical and administrative requirements. Together, these provisions are designed to simplify key administrative processes and support an efficient participation experience in the lead-up to and during Expo 2030 Riyadh.

The signing further strengthens the foundations for international participation and supports the Kingdom's preparations to welcome the world in 2030. Expo 2030 Riyadh will take place from 1 October 2030 to 31 March 2031 under the theme “Foresight for Tomorrow.” The six-month event is expected to bring together more than 200 official participants and welcome 42 million visits. Through national pavilions, cultural programming, innovation and immersive experiences, Expo 2030 Riyadh will provide a global platform for countries and organisations to exchange ideas, build partnerships and explore solutions to shared challenges. Following the event, the site is planned to evolve into a permanent global village, creating a lasting legacy for Riyadh, the Kingdom of Saudi Arabia and the world.

About Expo 2030 Riyadh

Running from 1 October 2030 to 31 March 2031, Expo 2030 Riyadh will be among the most ambitious World Expos ever conceived with a 6 million square meter site that will bring together more than 200 official participants and welcome 42 million visits across 5 distinct districts.

Held under the theme “Foresight for Tomorrow,” and hosted in Riyadh – a city of action and ambition – Expo 2030 Riyadh will provide a platform for participants to exchange ideas, shape solutions, and build partnerships that drive real impact, address global challenges, and unlock new opportunities. The World Expo will feature immersive cultural zones, daily activations, and AI-powered interactions, blending traditional Saudi hospitality with cutting-edge technology. Following the six-month event, the site will evolve into a global village, leaving a lasting legacy for Riyadh, Saudi Arabia and the world.

For more information: https://www.expo2030riyadh.sa/en/

About World Expos

World Expos are held under the auspices of the Bureau International des Expositions (BIE), the intergovernmental organisation responsible for overseeing and regulating international exhibitions ('Expos') and for fostering their core values of Education, Innovation and Cooperation. Today, four types of Expos are organised under the BIE's auspices: World Expos, Specialised Expos, Horticultural Expos and the Triennale di Milano.

For more information: https://bie-paris.org/site/en/

ONEKEY Study: Businesses Still Have Significant Ground to Cover on Cyber Resilience Act Readiness

Source: ONEKEY GmbH

  • CEO Jan Wendenburg: “German industry is on the right track when it comes to the Cyber Resilience Act, but implementation should be significantly accelerated.”
  • “AI-driven cyberattacks will increasingly target industrial machines and systems.”
  • Far fewer than half of companies are focused on the September 11, 2026 deadline.

Düsseldorf, 25 August 2026 – According to an alarming finding in the new “IoT & OT Cybersecurity Report 2026” presented by the Düsseldorf-based cybersecurity company ONEKEY, the German business community is neglecting the Cyber Resilience Act (CRA). The report is based on a survey of 200 German industrial companies regarding their strategies for implementing the EU's latest cybersecurity regulation relating to operational technology (OT). OT is used to control physical systems and processes, as well as connected devices that exchange data over the internet (the Internet of Things, or IoT). The report is available online: https://www.onekey.com…eport-2026.

A significant proportion — 45 per cent — stated that they were either barely familiar with or completely unfamiliar with the requirements. This is noteworthy because the first CRA obligations will take effect on 11 September this year. From this date onwards, manufacturers, importers and distributors of connected devices, machines and systems will be required to report any actively exploited vulnerabilities in their products, as well as any related serious security incidents.

ONEKEY CEO Jan Wendenburg clarified: “With a few exceptions, this also applies to all products already on the market, not just new developments as is often mistakenly assumed.” The 'IoT & OT Cybersecurity Report 2026' provides the following examples:

  • Connected machines and control systems
  • Routers, firewalls, and network devices
  • IoT and smart home devices
  • Operating systems, apps, and other software
  • Industrial control software
  • Cloud functions, if necessary for product operation

According to the new ONEKEY report, industrial companies that view themselves solely as users may still be affected and fall under the Cyber Resilience Act. For example: A company that buys connected machines solely for its own production, but imports them directly from Asia, may be considered an importer under the CRA if it transfers the machines to a subsidiary or sister company.

Only One-third Are Familiar With The Deadlines

Nevertheless, 46 per cent of the companies surveyed said they were familiar with the Cyber Resilience Act, and 21 per cent said they were very familiar with it. The survey also found that 43 percent are aware that the first phase of CRA requirements will take effect in September. However, 60 per cent admit that they are not familiar with subsequent phases and deadlines of the EU security regulation. 'In fact, there are three additional CRA implementation deadlines in the EU before the Cyber Resilience Act takes full effect on 11 December 2027,' said ONEKEY CEO Jan Wendenburg. According to the report, however, only one-third of the companies surveyed are aware of these deadlines.

Slow Implementation of The CRA

According to the 'IoT & OT Cybersecurity Report 2026', the implementation of the Cyber Resilience Act (CRA) in the business sector is proceeding at a correspondingly slow pace. As part of the survey, ONEKEY sought to determine how well-prepared companies are regarding the CRA.

The survey found that 25 percent of respondents described themselves as 'very well prepared' in terms of risk management, 22 percent in terms of security requirements, 20 percent in terms of documentation and the security updates required by the CRA throughout the entire product lifecycle, and 17 percent in terms of internal processes and technical evidence. Meanwhile, 39 per cent have addressed technical evidence but have only partially implemented it, while 37 per cent have done the same for documentation, 34 per cent for internal processes and security updates, and 26 per cent for risk management.

Conversely, according to the report, approximately one-third of companies are not yet prepared for the Cyber Resilience Act in terms of their internal processes, risk management or security update management. Thirty percent have barely begun to address the security requirements that the EU will soon make mandatory, nor have they initiated the technical verification process.

ONEKEY CEO Jan Wendenburg summed up the situation: “The results show a wide range: A small proportion considers itself very well prepared; many companies are in the midst of implementation; and about one-third has barely begun.”

The Biggest Challenges

One of the key questions in the ONEKEY survey was: What are the biggest challenges that businesses face when trying to comply with the requirements of the Cyber Resilience Act? The 'IoT & OT Cybersecurity Report 2026' provides the answers. According to 62 percent of the companies surveyed, the greatest difficulty stems from the requirement to report security incidents within 24 hours, which takes effect on 11 September this year. Thirty percent stated that this aspect is causing them serious problems. For 30 per cent of companies, assessing compliance with the EU directive — that is, determining whether their product portfolio complies with the Cyber Resilience Act, or if there is still work to be done — proves extremely problematic. Similarly, creating software bills of materials (SBOMs) is the main hurdle for just as many companies, with at least 60 percent of those surveyed having not yet resolved this issue.

“Having a complete overview of all the software used in a company's own products is fundamental to CRA compliance,” said Jan Wendenburg, emphasizing this point. He elaborated: 'If you don't have a complete understanding of your software, you won't know what security vulnerabilities might exist within it.' In fact, vulnerability management — that is, identifying and addressing vulnerabilities in software — remains an unresolved problem for 62 per cent of companies. For nearly a quarter of firms, it is one of the biggest challenges on the path to CRA compliance.

Two-thirds of the companies surveyed are struggling with the 'Security by Design/Security by Default' approach required by law, with 24 per cent considering it a critical factor. This means that cybersecurity must be integrated into a product's development from the outset, and the product must be shipped with secure default settings. Nearly a quarter of companies view security throughout the entire product lifecycle as a serious problem, while another 40 per cent see it as a surmountable hurdle. According to the report, only around 15 percent do not view any of these aspects as a challenge, possibly because they have not yet examined them in detail.

One-fifth Will Be CRA-compliant by 2027

Despite the many challenges involved, one-third of companies are aiming to achieve full compliance with the EU regulation by 11 December next year, when the Cyber Resilience Act comes into full effect. From that date onwards, all newly placed devices, machines and systems containing digital elements must fully comply with the CRA's cybersecurity requirements. More than a quarter (26 per cent) are aiming to achieve this by the end of this year, while eight per cent believe they are already compliant. Currently, 13 percent of companies fear that they will not have adapted their product range in time for the Cyber Resilience Act to take full effect on 11 December 2027.

“The Pace of Implementation Would Need to Be Significantly Accelerated.”

Jan Wendenburg concluded: “While the German industry is moving in the right direction with their approach to the Cyber Resilience Act, the implementation process should be significantly accelerated.” This is not only true in light of the approaching regulatory deadlines. The threat landscape is intensifying due to increasingly automated and AI-powered cyberattacks. Recent incidents at OpenAI and Anthropic demonstrate just how real this risk has become. During security tests, AI models escaped the test environments and attacked real external systems. “These incidents make it clear that powerful AI agents are already capable of independently executing multi-stage attack chains and exploiting vulnerabilities,” said Jan Wendenburg. According to the CEO of ONEKEY, in the future, not only will data centres and traditional IT systems be at risk, but networked machines, production facilities and industrial control systems will be too. A successful attack could result in data theft, production outages, process manipulation and, in the worst case, physical damage.

“Companies should not view the implementation of the CRA as a mere compliance task, but rather as an important component of their operational risk management,” explained Jan Wendenburg.

CRA Fast Start for a Structured Approach

ONEKEY's “CRA Fast Start” program enables manufacturers of connected devices, machines and systems to assess their products for CRA compliance in a structured manner, eliminating lead times. The concept is based on three pillars: CRA Readiness Assessment; systematic vulnerability management; and continuous monitoring. The first step is to analyze a company's current level of readiness regarding CRA requirements. Moving forward, continuous vulnerability management and ongoing monitoring ensure that vulnerabilities are identified, transparency is created for software supply chains, and sustained compliance with CRA requirements is guaranteed. This supports not only compliance with CRA obligations, but also internal governance and risk management processes. ONEKEY has explained the approach and scope of the program in this regard.

“With CRA Fast Start, we enable manufacturers to quickly and systematically start working towards achieving the CRA compliance required by law,” said Jan Wendenburg, ONEKEY's CEO, when explaining the offering.

ONEKEY is the leading European specialist in Product Cybersecurity & Compliance Management and part of the investment portfolio of PricewaterhouseCoopers Germany (PwC). The unique combination of the automated ONEKEY Product Cybersecurity & Compliance Platform (OCP) with expert knowledge and consulting services provides fast and comprehensive analysis, support, and management to improve product cybersecurity and compliance from product purchasing, design, development, production to end-of-life.

Critical vulnerabilities and compliance violations in device firmware are automatically identified in binary code by AI-based technology in minutes – without source code, device, or network access. Proactively audit software supply chains with integrated Software Bills of Materials (SBOMs) generation. “Digital Cyber Twins” enable automated 24/7 post-release cybersecurity monitoring throughout the product lifecycle.

The integrated ONEKEY Compliance Wizard already supports compliance with requirements from IEC 62443-4-2, ETSI EN 303 645, UNECE R155, and many other standards and regulations.

As part of the EU-funded CRACoWi (Cyber Resilience Act Compliance Wizard) project, ONEKEY is collaborating with 13 European partners to develop an AI-powered assistant for the automated implementation of the EU Cyber Resilience Act (CRA).

The solution will guide companies through the entire compliance process—from the initial CRA scope assessment to the generation of the required Declaration of Conformity.

The Product Security Incident Response Team (PSIRT) is effectively supported by the integrated automatic prioritization of vulnerabilities, significantly reducing the time to remediation.

Leading international companies in Asia, Europe and the Americas already benefit from the ONEKEY Product Cybersecurity & Compliance Platform (OCP) and ONEKEY Cybersecurity Experts.

Energy Sector – Fewer countries, higher output from reshaped international portfolio – Equinor

Source: Equinor

25 August 2026 10:00 (CEST)

“Equinor’s international oil and gas portfolio is simplified, improved and set for significant growth. We are on track to grow equity production outside Norway to 950,000 barrels of oil equivalent per day (boepd) by 2030 while generating around USD 20 billion of free cash flow from 2026 to 2030,” said executive vice president Philippe Mathieu at an Offshore Northern Seas (ONS) press briefing in Stavanger today.

Equinor’s equity production outside Norway was 750,000 boepd in the second quarter (Q2) 2026, more than 10% growth in two years, despite exits from legacy positions with world class assets in Azerbaijan and Nigeria.

The portfolio is becoming more focused and competitive through portfolio high-grading, including the creation of Adura in the UK, and investments in next-generation developments across the international business.

“This is not just about production growth. Through portfolio high grading we are building a business with stronger margins and higher cash flow. Cash flow from production is expected to grow around 80% towards 2030, significantly faster than production, reflecting a more competitive and resilient portfolio,” said Philippe Mathieu.

US business transformed

Equinor’s equity production from the US was 433,000 boepd in Q2 2026, around 100,000 boepd more than in the same quarter 2024.

“The US is by far our largest country outside Norway in terms of production. We have deepened our position in onshore natural gas assets in a growing demand region where we also can utilise the company’s marketing, trading and power exposure to capture more value across the gas value chain. The recently announced power position in the US is another example of this strategy in action,” said Mathieu.

“Offshore, we are excited to support operator Shell to progress the Sparta project, where we have 49% equity. Planned to come on stream in 2028, Sparta will become a new corner stone for us in the US Gulf.”

New opportunities in Angola

Angola has been important for Equinor ever since country entry in 1991 and remains a core country with high production and new opportunities.

“We are supporting the operators in their efforts to extend the life of producing fields and develop new opportunities. Our Norwegian Continental Shelf experience is very relevant as Angolan fields are maturing,” said Mathieu.

In June, Equinor along with operator Azule Energy, sanctioned the Greater PAJ (Palas, Astrea and Juno) project. Planned to come on stream in 2029, it will unlock around 250 million barrels of resources and contribute to sustaining Angola as an important production hub for Equinor.

Brazil growth engine

Brazil is expected to be a major driver of Equinor's international growth towards 2030, with equity production approaching 200,000 boepd.

The Equinor operated Bacalhau field, the first Brazilian pre salt field ever developed by an international company, came on stream late 2025 and is continuing to ramp up production from wells that are exceeding expectations.

The Raia field development is progressing well towards start-up in 2028. Once in operation, it can potentially supply around 15% of Brazil’s total projected gas demand.

Both Bacalhau and Raia use combined-cycle gas turbine technology to improve energy efficiency and reduce emissions intensity, with expected CO₂ emissions of less than 6 kg per barrel for Raia and around 9 kg per barrel for Bacalhau.

Installation of the deepwater section of Raia’s natural gas pipeline was completed this summer. At its deepest point, the pipeline reaches 2,735 metres below sea level, making it the deepest gas pipeline in the world.

Stepping up exploration

For future growth, Mathieu pointed to the important Bay du Nord project in Canada as well as targeted exploration.

“We are pursuing exploration opportunities in Brazil and Angola and hope to mature and test several drilling candidates over the next couple of years,” Philippe Mathieu said.

“Last week we entered a Chevron operated exploration licence in Namibia, with a drill-ready prospect that is planned to be tested already by the end of the year. We are also assessing and maturing exploration opportunities in Argentina and the US. We are gradually stepping up our exploration activity to support a focused strengthening and replenishment of our international portfolio.”

Related links

EQUINOR@ONS 2026

United States

Brazil

Angola

United Kingdom

Canada

Namibia

Official release: https://www.equinor.com/news/20260825-fewer-countries-higher-output

China: Maximum sentence for artist Gao Zhen is an assault on artistic freedom

Source: Amnesty International

25 August 2026

Responding to news that Chinese artist Gao Zhen has been convicted of the offence of “slandering China’s heroes and martyrs” and sentenced to three years in prison, Amnesty International’s China Director Sarah Brooks said:

“The lengthy pre-trial detention and, ultimately, decision to convict Gao Zhen and sentence him to the maximum three-year prison term under this offence illustrate the authorities’ determination to deter others from engaging in independent artistic expression.

“No artist should face criminal punishment for creating work that challenges official narratives or encourages critical reflection on history.

“This trial demonstrates how broadly worded and politically motivated laws are used – and worse, in this case, used retroactively – to silence artists, activists and other individuals who dare to express views that differ from those of the Chinese government.”

The repressive outreach of the authorities has extended beyond Gao Zhen himself. His wife and child have not been accused of any crime, yet they have reportedly been subject to harassment and intimidation and have been unable to leave China since his detention.

Brooks added, “The retaliation against Gao Zhen’s family members is a deeply troubling tactic and amounts to a form of collective punishment.

“Gao Zhen’s conviction should be overturned, all charges against him should be dropped, and he should be released immediately and unconditionally. Harassment and threats against Gao Zhen’s family must end, and his wife and child should be allowed to leave the country freely.

“The Chinese authorities must repeal the law on heroes and martyrs unless they can ensure that it is in line with international human rights standards, and must cease criminalizing peaceful expression and artistic creation.”

Background

Chinese artist and US permanent resident Gao Zhen was detained in August 2024 on suspicion of the offence of “infringing upon the reputation and honour of heroes and martyrs”. The charges relate to artistic works, dating back a decade or more, that authorities claim insulted revolutionary figures.

On 25 August 2026, the Sanhe City People’s Court in Hebei Province sentenced him to three years’ imprisonment, with his sentence due to end on 25 August 2027. Gao Zhen has decided to appeal the conviction and sentence.

Gao Zhen is part of the internationally known Gao Brothers artistic duo. The brothers are renowned for their contemporary artworks examining Chinese history, state power and social change.

There are also concerns about his health and well-being in detention. Gao Zhen, now 70, reportedly suffers from multiple health conditions, including lumbar spine disease and fluid accumulation in his knees. According to reliable information, he has collapsed several times during his detention. His communication with family has also reportedly been severely restricted since May 2025.

According to reports, Gao’s wife is subject to exit ban on alleged national security grounds, preventing both her and their son from leaving China. In August 2026, Amnesty International highlighted Gao Zhen’s case in a letter to European Union leadership concerning the use of exit bans against human rights defenders and their family members in China.