5 stories from 5 sources
Supporting Articles
AI is making fraud operations substantially more profitable, allowing scammers to replace large, labor-intensive compounds with smaller schemes that can generate greater returns. FATF president Giles Thomson said AI has helped make fraud roughly 4.5 times as profitable for criminals.
9:57 AMPYMNTS
Microsoft’s September security update fixes roughly 972 vulnerabilities, including 112 classified as critical, setting a new monthly record. The total follows records of about 570 vulnerabilities two months ago and 620 last month, amid a broader rise in vulnerability disclosures across the technology industry.
7:03 AMSchneier on Security
Manhattan prosecutors seized 12 websites that allegedly used AI to create sexual images of about 1,200 real people, most of them women. No charges have been filed.
2:37 PMGothamistSummary
AI is making fraud operations substantially more profitable, allowing scammers to replace large, labor-intensive compounds with smaller schemes that can generate greater returns. FATF president Giles Thomson said AI has helped make fraud roughly 4.5 times as profitable for criminals.
The economics of fraud have shifted: scammers can now scale persuasion, targeting, and content production
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
AI is turning fraud into a higher-margin business that can expand faster than traditional enforcement models.
Summary
Microsoft’s September security update fixes roughly 972 vulnerabilities, including 112 classified as critical, setting a new monthly record. The total follows records of about 570 vulnerabilities two months ago and 620 last month, amid a broader rise in vulnerability disclosures across the technology industry.
The decisive shift is the scale and speed of Microsoft’s patch backlog, which now creates
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Organizations face a growing risk that patching capacity, rather than patch availability, will determine which vulnerabilities remain exposed.
Summary
Manhattan prosecutors seized 12 websites that allegedly used AI to create sexual images of about 1,200 real people, most of them women. No charges have been filed.
The seizure exposes a large-scale abuse network but also the limits of a site-by-site response:
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
The case shows how easily generative AI can scale sexual abuse faster than authorities can remove the services enabling it.
A curated list of other prominent stories from this day.
First American is expanding access to no-cost property title monitoring as cybercrime-related losses reached $20.9 billion, according to the FBI.
1:21 PMHousing WireRevolut disclosed sensitive customer information, including passport details, after employees acted on fraudulent requests sent from an authentic government agency email domain. The incident shows how attackers used trusted institutional channels to bypass normal scrutiny.
10:02 AMFinextraSummary
First American is expanding access to no-cost property title monitoring as cybercrime-related losses reached $20.9 billion, according to the FBI.
The key shift is broader access to a service designed to detect suspicious changes to
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Free monitoring may improve early detection of property fraud as cybercrime losses continue to rise.
Summary
Revolut disclosed sensitive customer information, including passport details, after employees acted on fraudulent requests sent from an authentic government agency email domain. The incident shows how attackers used trusted institutional channels to bypass normal scrutiny.
The breach shifts the security problem from detecting fake addresses to verifying whether a legitimate
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
A trusted government domain no longer guarantees that a data request is trustworthy.
Make it yours
Pick your topics, set your cadence, and receive your personalized First Pass in your inbox. It’s that simple!