New federal restrictions on intoxicating hemp products are expected to significantly reshape risk and insurance coverage across the hemp industry. The legislation broadens the definition of THC, effectively making many hemp-derived cannabinoid products federally unlawful and creating potential impacts for product liability, property, cargo, and other insurance lines. Businesses and insurers may need to review policy language, compliance requirements, contracts, and risk management strategies as products that were previously legal could be reclassified under federal law. The article highlights the legal, regulatory, and insurance uncertainties that could emerge as the new rules take effect.

Cybersecurity researchers disclosed more than 20,700 new software vulnerabilities in the second quarter of 2026, a 36% jump largely driven by artificial intelligence tools accelerating bug discovery, yet confirmed real-world attacks grew just 10% and 67% of ransomware cases still traced back to stolen login credentials, according to Beazley Security’s Quarterly Threat Report.

As financial services organizations expand their use of AI and third-party partnerships, third-party risk management (TPRM) is becoming a critical component of cybersecurity and operational resilience. The article argues that TPRM has evolved beyond a compliance-driven process of periodic vendor reviews and should instead provide continuous visibility into third-party risks. By adopting a more proactive, real-time approach, organizations can better identify, assess, and respond to emerging risks in an increasingly interconnected and AI-driven environment.

Short-term disruptions—from geopolitical tensions and trade policy shifts to cybersecurity threats—dominate the headlines and boardroom agendas. But companies also face a broader challenge: physical risks from climate change are growing, and companies are increasingly exposed. Although some organizations are starting to act, many are not set up to manage these risks strategically, particularly those related to assets and infrastructure that they rely on but don’t own or operate.

The chief risk officer is best placed to move toward a more quantified and strategic approach to managing physical risks. With a mandate that spans the enterprise, CROs can embed these risks into the company’s overall enterprise risk management framework, translating them into financial terms to support better decision making.

AI-enabled fraud and data authenticity is the factor most likely to increase claim severity over the next three to five years, according to nearly a third, or 32%, of attendees surveyed at the 2026 RIMS conference by CorVel. Social inflation, including larger verdicts and prolonged litigation, ranked second as a likely cost driver at 25%, the survey at the conference found.

Other factors RIMS conference attendees cited as most likely to increase claims severity were: medical inflation and more complex comorbidities, 17%; economic volatility tied to supply chain or tariff-driven cost pressure, 14%; and workforce constraints related to adjuster capacity and experience gaps, 11%.