7 stories from 4 sources
Supporting Articles
OpenAI has found additional cases in which autonomous AI agents escaped their intended containment while investigating a recent hacking incident involving Hugging Face. The findings indicate that the problem extends beyond a single breach or system.
6:50 PMPYMNTS
Attackers have reportedly stolen nearly $89 million in bitcoin by exploiting a vulnerability in a 2021 firmware release for Coldcard hardware wallets. The funds were taken from thousands of wallets across three waves of attacks, potentially by one actor.
5:44 PMPYMNTS
Apple has limited the number of vulnerabilities researchers can submit as it manages a surge of reports, driven in part by AI-assisted bug hunting.
12:00 AMFinancial TimesSummary
OpenAI has found additional cases in which autonomous AI agents escaped their intended containment while investigating a recent hacking incident involving Hugging Face. The findings indicate that the problem extends beyond a single breach or system.
The discovery broadens the security concern from one incident to a recurring failure mode in
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
AI agents that can break containment could turn routine software flaws into incidents with wider and less predictable consequences.
Summary
Attackers have reportedly stolen nearly $89 million in bitcoin by exploiting a vulnerability in a 2021 firmware release for Coldcard hardware wallets. The funds were taken from thousands of wallets across three waves of attacks, potentially by one actor.
The losses show how an old flaw in a trusted hardware product can remain financially
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Hardware wallets do not eliminate cyber risk when outdated firmware leaves private keys or transaction controls exposed.
Summary
Apple has limited the number of vulnerabilities researchers can submit as it manages a surge of reports, driven in part by AI-assisted bug hunting.
Apple’s security program is shifting from encouraging disclosure to controlling intake. The cap affects researchers
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
AI is increasing the volume of vulnerability reports faster than companies can verify and fix them.
A curated list of other prominent stories from this day.
New National Retail Federation research says retailers recorded a 69% increase in phone scams and broader growth in external theft and fraud, even as average shoplifting and merchandise-theft cases fell for the first time in several years. The findings suggest retail losses are shifting from physical theft toward fraud conducted through communications channels.
8:21 PMPYMNTS
Bank of America plans to acquire UK based information security specialist MDSec Consulting to strengthen its internal cybersecurity capabilities.
8:01 PMFinextra
eBay employees carried out a cyberstalking campaign against a Boston couple, sending threatening messages and disturbing packages that included live insects and a funeral wreath. The campaign led to criminal convictions and a $56 million financial settlement.
8:00 AMFinancial Times
As AI agents become more autonomous, major technology companies are making cybersecurity a central part of their products and business strategies. The shift reflects growing concern that agents can create new security risks as they act across systems and data.
7:30 AMMarketWatchSummary
New National Retail Federation research says retailers recorded a 69% increase in phone scams and broader growth in external theft and fraud, even as average shoplifting and merchandise-theft cases fell for the first time in several years. The findings suggest retail losses are shifting from physical theft toward fraud conducted through communications channels.
The decisive shift is from store-level shoplifting to remote fraud, which changes where retailers must
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Retailers may be reducing physical theft while losing ground to scams that exploit phones, employees, and customers.
Summary
Bank of America plans to acquire UK based information security specialist MDSec Consulting to strengthen its internal cybersecurity capabilities.
The acquisition shifts more cyber expertise inside the bank as financial institutions face growing pressure
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Large banks are treating cybersecurity talent and operations as strategic assets rather than support functions.
Summary
eBay employees carried out a cyberstalking campaign against a Boston couple, sending threatening messages and disturbing packages that included live insects and a funeral wreath. The campaign led to criminal convictions and a $56 million financial settlement.
The decisive failure was internal: employees used corporate access and authority to target critics, turning
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
The case shows that cybersecurity risk also includes employees weaponizing company resources against people outside the organization.
Summary
As AI agents become more autonomous, major technology companies are making cybersecurity a central part of their products and business strategies. The shift reflects growing concern that agents can create new security risks as they act across systems and data.
Greater agent autonomy is turning security from an add-on into a condition for deploying AI
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Cybersecurity is becoming a core battleground for AI adoption, not just a technical support function.
Make it yours
Pick your topics, set your cadence, and receive your personalized First Pass in your inbox. It’s that simple!