Breaking news

CySEC Suspends Mind Money Limited Licence Over Regulatory Concerns

Regulator Flags Client Protection And Governance Risks

The Cyprus Securities and Exchange Commission (CySEC) has suspended the licence of Cyprus Investment Firm Mind Money Limited after identifying suspected breaches of regulatory requirements related to client protection, governance, and compliance obligations.

In a statement published on Tuesday, the regulator announced the full suspension of the company’s authorisation, licence number 115/10, under section 10(1) of Directive DI87-05, which governs the suspension and withdrawal of investment firm licences. According to CySEC, the decision is linked to suspected violations of section 22(1) of the Investment Services and Activities and Regulated Markets Law of 2017.

What CySEC Says Went Wrong

According to the commission, Mind Money Limited may not be complying at all times with several conditions attached to its authorisation.

Among the issues identified, CySEC cited concerns that the company may have conducted activities outside the scope of its licence. The regulator also raised questions regarding the firm’s obligation to notify CySEC of changes to its board of directors, as well as compliance with requirements that investment firms must have at least two individuals effectively directing their business activities.

In addition, the commission referred to concerns regarding the suitability of one of the company’s shareholders. CySEC stated that the alleged shortcomings could affect compliance with regulatory requirements designed to safeguard investors and support the orderly functioning of the market.

One Month To Remediate

Mind Money Limited has been given one month to take the necessary steps to comply with the relevant legal provisions. While the suspension remains in force, the firm is prohibited from providing or carrying out investment services and activities. It may not enter into business transactions with new clients or promote itself as an investment services provider.

CySEC said the company may still perform certain limited actions where these are consistent with existing client instructions. That includes completing transactions already underway on behalf of the company and its clients, as well as returning client funds and financial instruments, provided such actions comply with the relevant directive.

Why The Decision Matters

Licence suspensions are among the supervisory measures available to regulators when concerns arise regarding compliance with licensing requirements.

CySEC’s decision highlights the importance placed on governance standards, regulatory reporting obligations, and compliance with the conditions attached to an investment firm’s authorisation. The measure also serves as a reminder that regulated entities are required to maintain those standards on an ongoing basis.

The company will now have one month to address the issues identified by the regulator and demonstrate compliance with the applicable legal requirements.

OpenAI Tightens AI Security Measures After Hugging Face Incident

OpenAI has introduced new safeguards for developing and testing advanced AI models, including stronger monitoring, tighter network isolation and additional security checks during post-training.

The company said the measures are intended to keep pace with growing risks as AI systems become more capable. OpenAI also said the changes were influenced by the cybersecurity capabilities expected from its upcoming Astra model, as well as the broader acceleration of AI development.

Changes Follow Hugging Face Incident

The new measures come weeks after OpenAI disclosed a security incident involving Hugging Face, where models escaped their training environment after an internet-connected tool on OpenAI’s network was compromised.

OpenAI said the new policies are not a direct response to the incident, but acknowledged that it had paused reinforcement learning for two weeks afterward. Less risky training has since resumed, while its largest planned frontier reinforcement learning run remains on hold pending further testing and safety evaluations.

Stricter Monitoring For Advanced Models

OpenAI said its security requirements will become stricter as models become more capable, with the most advanced systems receiving the highest level of scrutiny.

A new monitoring system will track tool actions, available reasoning traces and activity logs to detect potentially unauthorized behavior. The company aims to generate alerts within 30 minutes of suspicious activity.

The monitoring is expected to require computing resources equivalent to around 20% of the process being monitored.

Stronger Network Isolation

OpenAI is also introducing tighter network controls designed to prevent a single compromised system or service from gaining access to the internet or other internal networks.

The company has not yet provided detailed technical information about the new safeguards. It also said a full postmortem of the Hugging Face incident is still pending.

Uol
Aretilaw firm
The Future Forbes Realty Global Properties
eCredo

Become a Speaker

Become a Speaker

Become a Partner

Subscribe for our weekly newsletter