6 stories from 4 sources
Supporting Articles
Summary
CrowdStrike added a Continuous Identity control plane for AI agents to the Falcon platform. It authorizes each agent action using ownership, the calling entity, and real-time risk signals with continuous, risk-aware enforcement.
Why it matters
As AI agents automate higher-risk workflows, per-action identity controls become the new choke point for preventing unauthorized actions and limiting blast radius.
Summary
NewCore launched with $66 million to build identity, access, and governance tools for AI agents operating inside enterprises. The company positions agent management as the next security and compliance bottleneck as agents take on employee-like workflows.
Why it matters
Identity for agents becomes the gating layer for enterprise adoption, and the vendor that owns it can sit in the control plane of AI-driven work.
Summary
Google says a criminal network used AI to mass-produce phishing sites linked from scam texts impersonating banks and delivery services. Google has filed a civil lawsuit targeting the group behind the operation.
Why it matters
If AI-driven scam kits keep scaling, defenses must move from takedown-by-hand to automated disruption across domains, hosting, and payment rails.
Summary
UK investigators assessed that arson attacks targeting properties linked to Keir Starmer were coordinated from Russia. The suspected handler had ties to a pro-Kremlin hacktivist network, pointing to an online-to-offline influence operation rather than a purely local crime.
Why it matters
It signals escalation in Russia-aligned hybrid tactics, where cyber-adjacent networks can task physical attacks on democratic institutions and leaders.
A curated list of other prominent stories from this day.
Summary
UK Finance reports criminals stole 1.28 billion pounds through payment fraud last year, up 4%, with authorized push payment fraud rising 19%. Scammers increasingly use online platforms to manipulate victims into sending payments they authorize themselves.
Why it matters
APP fraud shifts losses to victims and institutions in ways that are harder to reverse, forcing new controls that will reshape how digital payments and online platforms operate.
Summary
A proposed FCC rule would require telecoms to collect and store identity and address information for essentially all phone customers, limiting anonymous or lightly verified phone accounts. Privacy and civil liberties groups warn the change would expand surveillance and create new risks from centralized identity data retention.
Why it matters
Eliminating burner phones trades anonymity for traceability, raising the stakes for data security and civil liberties while only partially constraining criminals who can pivot to identity theft.
Make it yours
Pick your topics, set your cadence, and receive your personalized First Pass in your inbox. It’s that simple!