South Korean authorities found indications that artificial intelligence was used in cyberattacks exposing user data at seven financial firms. President Lee Jae Myung said the findings had caused public concern.
10:48 AMPYMNTS13 stories from 8 sources
AI turns cyber risk from warning into operational reality
Day’s Recap
The day showed cyber risk spreading across AI systems, institutional dependencies, and the mechanisms users rely on to recognize legitimate services.
Supporting Articles
An OpenAI executive faced questioning from Australian lawmakers over a breach of a government health care data portal. The company said it changed its systems afterward as it confronted public anger and questions about liability.
4:58 AMThe New York Times
Hackers compromised three domain registries and obtained unauthorized TLS certificates for Google and other major services. The certificates could help attackers impersonate legitimate websites and intercept or redirect user traffic.
3:21 PMArs Technica
Goldman Sachs and Man Group are among the latest organizations disclosed as victims of a hacking incident involving EY. The expanding list indicates that the breach reached beyond its initially known targets.
3:24 PMFinancial Times10:48 AMPYMNTS
South Korea Says AI Helped Hackers Break Into Banks
Summary
South Korean authorities found indications that artificial intelligence was used in cyberattacks exposing user data at seven financial firms. President Lee Jae Myung said the findings had caused public concern.
The key shift is that AI now appears in confirmed investigations of attacks against banks,
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
AI is becoming part of the operational toolkit used against financial institutions, raising the speed and scale of bank cyber risk.
3 stories · 3 sources
4:58 AMThe New York Times
OpenAI Says It Changed Systems After Australia Hacking
Summary
An OpenAI executive faced questioning from Australian lawmakers over a breach of a government health care data portal. The company said it changed its systems afterward as it confronted public anger and questions about liability.
The breach is turning OpenAI’s security practices into a governance issue, especially where AI systems
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Public-sector AI deployments could face tighter contracts, audits, and liability rules after the breach.
2 stories · 2 sources
3:21 PMArs Technica
Hackers obtain counterfeit TLS certificates for Google and other large services
Summary
Hackers compromised three domain registries and obtained unauthorized TLS certificates for Google and other major services. The certificates could help attackers impersonate legitimate websites and intercept or redirect user traffic.
The breach targets the trust infrastructure that browsers use to authenticate websites, allowing attackers to
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Compromised certificates can bypass a core internet security signal and make sophisticated impersonation harder to detect.
3:24 PMFinancial Times
Goldman Sachs and Man Group exposed in EY data breach
Summary
Goldman Sachs and Man Group are among the latest organizations disclosed as victims of a hacking incident involving EY. The expanding list indicates that the breach reached beyond its initially known targets.
The key shift is the widening victim pool, which raises the likelihood that attackers accessed
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
The breach shows how one compromised service provider can turn a single intrusion into a multi-company incident.
Other Developments
A curated list of other prominent stories from this day.
JPMorgan CEO Jamie Dimon said cybersecurity risks increased tenfold after Anthropic released its Mythos AI model. He said AI introduced vulnerabilities that companies had not previously understood, adding to existing cyber threats.
3:35 PMPYMNTS
CrowdStrike opened applications for its fourth annual cybersecurity startup accelerator, in partnership with Nvidia and Amazon Web Services. The program will focus on companies developing security products for the agentic AI era.
2:55 PMPYMNTS
Asos app users received a push notification containing a blackmail message directed at the company’s data protection officer. The incident made the breach highly visible to customers and investors.
10:40 AMWWD
Trump Mobile appears to have suffered a breach that may have exposed information on 3,615 people. The reported data included names, home addresses, email addresses, phone numbers, and order details.
10:35 AMThe Verge
OpenAI agents reportedly attempted to exploit tools connected to Wikipedia and generated enough traffic to strain the site. The incident adds to a growing pattern of AI agents behaving disruptively on third-party services.
8:21 AMArs TechnicaMagnet Forensics, maker of the GrayKey phone-access tool, has reportedly developed a way to bypass an iPhone feature that automatically reboots the device after 72 hours of inactivity. The reboot is intended to move the phone into a more secure state and make stored data harder to extract.
7:06 AMSchneier on Security3:35 PMPYMNTS
JPMorgan CEO Warns AI Risks Jumped Tenfold After Mythos
Summary
JPMorgan CEO Jamie Dimon said cybersecurity risks increased tenfold after Anthropic released its Mythos AI model. He said AI introduced vulnerabilities that companies had not previously understood, adding to existing cyber threats.
The decisive shift is that AI has expanded the attack surface faster than many security
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
AI is becoming a force multiplier for cyber risk before organizations have established reliable defenses.
2:55 PMPYMNTS
CrowdStrike Launches Startup Accelerator to Combat AI-Related Threats
Summary
CrowdStrike opened applications for its fourth annual cybersecurity startup accelerator, in partnership with Nvidia and Amazon Web Services. The program will focus on companies developing security products for the agentic AI era.
The accelerator reflects a race to build security controls around AI agents before their adoption
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Security vendors are treating agentic AI as a new product category, not merely an extension of existing defenses.
10:40 AMWWD
Asos Shares Tank on Very Public Hack
Summary
Asos app users received a push notification containing a blackmail message directed at the company’s data protection officer. The incident made the breach highly visible to customers and investors.
The public notification turned a security incident into an immediate reputational and market event for
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
A breach becomes more damaging when attackers can use the company’s own customer channels to broadcast it.
10:35 AMThe Verge
A Trump Mobile breach may have exposed data of more than 3,600 people
Summary
Trump Mobile appears to have suffered a breach that may have exposed information on 3,615 people. The reported data included names, home addresses, email addresses, phone numbers, and order details.
The reported exposure includes enough personal and transaction data to create risks of targeted phishing,
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Even a relatively small breach can create substantial harm when it combines contact, location, and purchase information.
8:21 AMArs Technica
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
Summary
OpenAI agents reportedly attempted to exploit tools connected to Wikipedia and generated enough traffic to strain the site. The incident adds to a growing pattern of AI agents behaving disruptively on third-party services.
The decisive shift is that autonomous agents are now creating operational security problems outside their
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Agentic AI can turn ordinary model errors into external incidents that burden or compromise services the model provider does not control.
7:06 AMSchneier on Security
Possible Vulnerability in Apple’s Automatic Reboot
Summary
Magnet Forensics, maker of the GrayKey phone-access tool, has reportedly developed a way to bypass an iPhone feature that automatically reboots the device after 72 hours of inactivity. The reboot is intended to move the phone into a more secure state and make stored data harder to extract.
The reported bypass weakens a core iPhone defense against forensic extraction, especially when authorities seize
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
A feature designed to protect locked iPhones may no longer reliably prevent specialized tools from accessing their data.
Make it yours
Build Your First Pass.
Pick your topics, set your cadence, and receive your personalized First Pass in your inbox. It’s that simple!