Top Stories – September 12, 2026

1. FTC Finalizes 20-Year Orders Against Cox Media Group Over AI ‘Active Listening’ Ad Deception

Source: Federal Trade Commission | Date: August 31, 2026

The FTC converted a $930,000 settlement with Cox Media Group and two affiliates into binding 20-year compliance orders, penalizing the companies for falsely claiming their AI advertising service could target consumers based on conversations captured from smart devices - one of the first finalized FTC enforcement orders targeting deceptive AI capability claims.


2. Colorado AG Publishes Draft ADMT and Chatbot Safety Implementing Rules

Source: Colorado Attorney General | Date: September 9, 2026

Colorado’s Attorney General published detailed draft regulations implementing the Automated Decision-Making Technology Act and Chatbot Safety Act, covering developer disclosure obligations, consumer rights, age assurance, and prohibited content restrictions, with a revised draft expected September 23 and a rulemaking hearing October 26 before rules take effect January 1, 2027.


3. AI Agents Compromised 440 PaperCut Servers Across 395 Organizations in Hours

Source: TechTimes / GreyNoise | Date: September 11, 2026

A threat actor deployed hundreds of AI agents built on OpenAI’s Codex and a safety-unrestricted DeepSeek model to exploit two PaperCut print-management vulnerabilities, compromising 440 servers at 395 organizations across 48 countries in under an hour - an incident expected to accelerate legislative pressure for mandatory AI safety controls on models without content restrictions.