CrowdStrike added a Continuous Identity control plane for AI agents to the Falcon platform. It authorizes each agent action using ownership, the calling entity, and real-time risk signals with continuous, risk-aware enforcement.
8:08 PMPYMNTS6 stories from 4 sources
AI Expands Both the Attack Surface and Security Control Plane
Day’s Recap
Supporting Articles
NewCore launched with $66 million to build identity, access, and governance tools for AI agents operating inside enterprises. The company positions agent management as the next security and compliance bottleneck as agents take on employee-like workflows.
9:00 AMTechCrunchGoogle says a criminal network used AI to mass-produce phishing sites linked from scam texts impersonating banks and delivery services. Google has filed a civil lawsuit targeting the group behind the operation.
4:07 PMPYMNTSUK investigators assessed that arson attacks targeting properties linked to Keir Starmer were coordinated from Russia. The suspected handler had ties to a pro-Kremlin hacktivist network, pointing to an online-to-offline influence operation rather than a purely local crime.
7:36 AMFinancial Times8:08 PMPYMNTS
CrowdStrike Launches Continuous Identity Solution to Police AI Agents
Summary
CrowdStrike added a Continuous Identity control plane for AI agents to the Falcon platform. It authorizes each agent action using ownership, the calling entity, and real-time risk signals with continuous, risk-aware enforcement.
Why it matters
As AI agents automate higher-risk workflows, per-action identity controls become the new choke point for preventing unauthorized actions and limiting blast radius.
9:00 AMTechCrunch
As AI agents become employees, NewCore emerges with $66M to give them identities
Summary
NewCore launched with $66 million to build identity, access, and governance tools for AI agents operating inside enterprises. The company positions agent management as the next security and compliance bottleneck as agents take on employee-like workflows.
Why it matters
Identity for agents becomes the gating layer for enterprise adoption, and the vendor that owns it can sit in the control plane of AI-driven work.
4:07 PMPYMNTS
AI Scam Surge Prompts Google to File Lawsuit
Summary
Google says a criminal network used AI to mass-produce phishing sites linked from scam texts impersonating banks and delivery services. Google has filed a civil lawsuit targeting the group behind the operation.
Why it matters
If AI-driven scam kits keep scaling, defenses must move from takedown-by-hand to automated disruption across domains, hosting, and payment rails.
7:36 AMFinancial Times
Arson targeting Keir Starmer properties originated in Russia
Summary
UK investigators assessed that arson attacks targeting properties linked to Keir Starmer were coordinated from Russia. The suspected handler had ties to a pro-Kremlin hacktivist network, pointing to an online-to-offline influence operation rather than a purely local crime.
Why it matters
It signals escalation in Russia-aligned hybrid tactics, where cyber-adjacent networks can task physical attacks on democratic institutions and leaders.
Other Developments
A curated list of other prominent stories from this day.
UK Finance reports criminals stole 1.28 billion pounds through payment fraud last year, up 4%, with authorized push payment fraud rising 19%. Scammers increasingly use online platforms to manipulate victims into sending payments they authorize themselves.
10:58 AMPYMNTSA proposed FCC rule would require telecoms to collect and store identity and address information for essentially all phone customers, limiting anonymous or lightly verified phone accounts. Privacy and civil liberties groups warn the change would expand surveillance and create new risks from centralized identity data retention.
7:01 AMSchneier on Security10:58 AMPYMNTS
UK APP Fraud Jumps 19% as Scammers Abuse Online Platforms
Summary
UK Finance reports criminals stole 1.28 billion pounds through payment fraud last year, up 4%, with authorized push payment fraud rising 19%. Scammers increasingly use online platforms to manipulate victims into sending payments they authorize themselves.
Why it matters
APP fraud shifts losses to victims and institutions in ways that are harder to reverse, forcing new controls that will reshape how digital payments and online platforms operate.
7:01 AMSchneier on Security
The FCC Wants to Eliminate Burner Phones
Summary
A proposed FCC rule would require telecoms to collect and store identity and address information for essentially all phone customers, limiting anonymous or lightly verified phone accounts. Privacy and civil liberties groups warn the change would expand surveillance and create new risks from centralized identity data retention.
Why it matters
Eliminating burner phones trades anonymity for traceability, raising the stakes for data security and civil liberties while only partially constraining criminals who can pivot to identity theft.
Make it yours
Build Your First Pass.
Pick your topics, set your cadence, and receive your personalized First Pass in your inbox. It’s that simple!