CGI Consulting
Menu

AI News

Week of 1 June 2026

Updated 1 June 2026

This week's developments cluster around a single theme: AI is moving from capability to consequence. European and UK regulators both firmed up the rules that govern how AI can be built and deployed - the EU agreeing the first amendments to its AI Act, and the UK's compliance picture consolidating across criminal, privacy and online-safety law. For anyone advising on AI adoption, the regulatory baseline shifted.

Alongside the rules, the commercial reality sharpened. A landmark security disclosure showed AI finding software flaws faster than teams can fix them, enterprises began openly questioning deployment costs, and Microsoft prepared to make the operating system itself an agent platform. The signal for UK firms is consistent: strategy now means governing AI as deliberately as adopting it.


The stories in detail

1.

Regulation · European Union

EU agrees the first amendments to the AI Act and starts high-risk enforcement

  • EU institutions reached provisional agreement on a "Digital Omnibus" - the first amendments to the AI Act since 2024 - and the European AI Office began enforcing across many high-risk categories from 26 May.
  • Key high-risk (Annex III) obligations are deferred from August 2026 to December 2027, giving providers and deployers materially more runway, while new prohibitions on non-consensual intimate imagery and CSAM take effect from December 2026.
  • For UK firms touching the EU market the extra time is real but conditional: AI-literacy duties and high-risk registration remain, and breaches of value-chain information obligations now carry fines of up to 3% of global turnover.

Inside Global Tech (Covington & Burling) - 28 May 2026 →

2.

Regulation · United Kingdom

UK AI rules harden across criminal, privacy and online-safety law

  • The Crime and Policing Act 2026 (Royal Assent 29 April) creates new criminal offences around AI tools optimised to generate CSAM and deepfake "intimate image" generators, with liability extending to companies as well as individuals.
  • The King's Speech put AI regulatory sandboxes onto a statutory footing via a Regulating for Growth Bill, while the ICO issued five practical steps for organisations facing AI-powered cyber threats such as phishing, deepfake social engineering and prompt injection.
  • The takeaway: with no single "UK AI Act", compliance now sits at the intersection of online-safety, equalities, privacy and criminal law - a layered burden UK adopters need to map deliberately rather than assume away.

Resultsense (via Osborne Clarke) - 28 May 2026 →

3.

Security · Frontier capability

AI finds 10,000 software flaws in a month - and resets the security conversation

  • Anthropic's Project Glasswing reported that a preview model and around 50 partner organisations surfaced more than 10,000 high- or critical-severity vulnerabilities in widely used software in roughly 30 days - including decades-old flaws in OpenBSD and FFmpeg (widely covered 25–26 May).
  • Partners saw step-changes: Cloudflare found 2,000 bugs in its own systems, and Mozilla fixed 271 Firefox vulnerabilities at around ten times its previous AI-assisted rate.
  • The strategic point for adopters: the bottleneck is shifting from finding vulnerabilities to fixing them - AI raises both your defensive capability and your exposure if you can't remediate at pace.

Anthropic (Project Glasswing update) - 22 May 2026 →

4.

Platforms · Enterprise tooling

Microsoft prepares to make Windows an agent platform

  • At Build (2–3 June) Microsoft is set to unveil a Windows Agent Framework - APIs that embed autonomous agents into the OS shell, scheduler and security model - plus a Windows Agent Store and an autonomous "Agent Mode" for GitHub Copilot.
  • Azure AI Foundry is expected to formally add Anthropic's Claude alongside OpenAI with full enterprise SLAs, reinforcing multi-model procurement as the corporate norm.
  • For integration work the direction of travel is clear: agents are becoming first-class citizens of the platforms staff already use, which lowers deployment friction and raises the governance stakes in equal measure.

Build Fast with AI - 29 May 2026 →

5.

Strategy · Adoption

Enterprise AI enters its discipline phase

  • A run of late-May stories - enterprises publicly scrutinising AI spend, high-profile tooling switches, and leaders walking back their most bullish job claims - marks a shift from "adopt everything" to measured ROI.
  • The emerging discipline is to tie each deployment to a defensible cost-per-outcome rather than seat counts, and to expect procurement to ask harder questions before signing.
  • For UK SMEs this is encouraging: it favours the targeted, workflow-level automation that delivers measurable payback over sweeping platform rollouts.

Build Fast with AI - 29 May 2026 →


← Back to the latest AI News