On May 21, 2026, the New York State Department of Financial Services issued Guidance on measures regulated entities should consider when cybersecurity risks become elevated, such as upon the release of frontier AI models. It recommends practices to reduce the attack surface, improve threat detection, and strengthen resilience, including by remediating known exploited vulnerabilities, employing phishing-resistant multifactor authentication, validating AI-generated code, and working with third-party providers.May 21, 2026