U.S. officials warned that Siemens devices used in water infrastructure contain vulnerabilities that attackers could exploit. The warning comes as cyber incidents targeting U.S. water systems raise suspicions of Iranian involvement.
12:20 PMCNBC9 stories from 7 sources
Critical infrastructure risk meets cybersecurity consolidation
Day’s Recap
Supporting Articles
The US has charged 17 Iranian nationals over an alleged large-scale cyber theft campaign. The Department of Justice says many of the attacks were conducted on behalf of the Iranian government.
5:48 AMBBC
ServiceNow agreed to acquire cybersecurity startup Armis for $8 billion, in what became Israel’s second-largest technology startup exit. The deal was framed as a rescue for ServiceNow amid the market’s broader SaaS downturn.
2:58 AMFortune12:20 PMCNBC
U.S. warns Siemens devices can be hacked amid fears Iran is breaching water plants
Summary
U.S. officials warned that Siemens devices used in water infrastructure contain vulnerabilities that attackers could exploit. The warning comes as cyber incidents targeting U.S. water systems raise suspicions of Iranian involvement.
The risk has moved from suspected intrusion to a specific, exploitable technology weakness. Water utilities
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
A widely deployed industrial device can turn a suspected geopolitical campaign into a direct operational risk for local water systems.
5:48 AMBBC
US charges 17 Iranians over 'massive' cyber theft campaign
Summary
The US has charged 17 Iranian nationals over an alleged large-scale cyber theft campaign. The Department of Justice says many of the attacks were conducted on behalf of the Iranian government.
The charges turn a broad cyber campaign into a formal state-linked criminal case. The defendants
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
The case raises the cost of state-backed cyber theft and signals tougher US action against the people accused of carrying it out.
2:58 AMFortune
Inside the $8 billion cybersecurity acquisition that helped ServiceNow’s stock buck the ‘Saaspocalypse’ fears
Summary
ServiceNow agreed to acquire cybersecurity startup Armis for $8 billion, in what became Israel’s second-largest technology startup exit. The deal was framed as a rescue for ServiceNow amid the market’s broader SaaS downturn.
The acquisition shows cybersecurity assets becoming strategic enough to support major software companies beyond their
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Cybersecurity is becoming a central vehicle for software companies seeking durable growth in a harsher SaaS market.
Other Developments
A curated list of other prominent stories from this day.
OpenAI's Trusted Access for Cyber program gives selected security researchers access to stronger models so they can identify and report vulnerabilities. Researchers say OpenAI revoked their access, raising questions about how the program is being managed.
2:46 PMTechCrunch
Abnormal AI is expanding its use of OpenAI technology in behavioral security products that detect attacks and compromised accounts. The company says its systems protect more than 4,500 organizations, including over a quarter of the Fortune 500, by analyzing identity and behavioral signals.
12:20 PMPYMNTS
Marvel's Wolverine director Mike Daly discussed Insomniac Games' 2023 data breach in a new interview. The hack exposed a large volume of internal files, including information related to the studio's projects.
11:30 AMPolygon
The official Pokémon Center merchandise website suffered a data breach that exposed customer information.
10:27 AMPolygon
The Pokémon Company is canceling orders for its 30th Anniversary Cards after a cyber incident. It warns that customer details may have been exposed.
6:40 AMIGN
A new study found that 47% of surveyed firms cannot detect suspected fraud in real time or within minutes, even though most use automated defenses such as rules-based scoring. The research links account checks with faster fraud detection.
4:00 AMPYMNTS2:46 PMTechCrunch
Researchers say OpenAI revoked their access to limited cyber program
Summary
OpenAI's Trusted Access for Cyber program gives selected security researchers access to stronger models so they can identify and report vulnerabilities. Researchers say OpenAI revoked their access, raising questions about how the program is being managed.
The immediate shift is from expanded research access to restricted participation for some defenders. That
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
A cyber-safety program cannot reliably surface vulnerabilities if the researchers expected to find them lose access without clear, trusted terms.
12:20 PMPYMNTS
Abnormal AI Expands OpenAI Partnership to Boost Cybersecurity
Summary
Abnormal AI is expanding its use of OpenAI technology in behavioral security products that detect attacks and compromised accounts. The company says its systems protect more than 4,500 organizations, including over a quarter of the Fortune 500, by analyzing identity and behavioral signals.
The expanded partnership pushes generative AI deeper into automated detection of abnormal user behavior and
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
More security decisions will increasingly depend on AI systems interpreting user behavior at enterprise scale.
11:30 AMPolygon
Marvel's Wolverine Director Addresses Massive Insomniac Hack In New Interview
Summary
Marvel's Wolverine director Mike Daly discussed Insomniac Games' 2023 data breach in a new interview. The hack exposed a large volume of internal files, including information related to the studio's projects.
The breach remains consequential because leaked development files can expose years of plans, unreleased content,
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
The incident shows how a single studio breach can compromise both corporate data and the secrecy that protects major entertainment releases.
10:27 AMPolygon
Pokemon Center Hit By Data Breach That Leaks Customer Information
Summary
The official Pokémon Center merchandise website suffered a data breach that exposed customer information.
Customer data is now potentially in the hands of unauthorized parties, while the available details
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Even a retail breach can put customers at risk of targeted scams, credential abuse, and identity theft.
6:40 AMIGN
The Pokémon Company Cancels 30th Anniversary Card Orders Following 'Cyber Incident,' Warns of Customer Data Breach
Summary
The Pokémon Company is canceling orders for its 30th Anniversary Cards after a cyber incident. It warns that customer details may have been exposed.
The incident has disrupted a high-demand product and created a potential data breach for customers
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
The breach risk extends beyond canceled orders because customer information may now be exposed.
4:00 AMPYMNTS
Plaid Study Links Account Checks to Faster Fraud Detection
Summary
A new study found that 47% of surveyed firms cannot detect suspected fraud in real time or within minutes, even though most use automated defenses such as rules-based scoring. The research links account checks with faster fraud detection.
The decisive gap is speed: deploying fraud controls does not ensure firms can act before
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Fraud prevention is shifting from static transaction screening toward real-time account intelligence.
Make it yours
Build Your First Pass.
Pick your topics, set your cadence, and receive your personalized First Pass in your inbox. It’s that simple!