9 stories from 7 sources

Critical infrastructure risk meets cybersecurity consolidation

Day’s Recap

Supporting Articles

12:20 PMCNBC

U.S. warns Siemens devices can be hacked amid fears Iran is breaching water plants

Summary

U.S. officials warned that Siemens devices used in water infrastructure contain vulnerabilities that attackers could exploit. The warning comes as cyber incidents targeting U.S. water systems raise suspicions of Iranian involvement.

The risk has moved from suspected intrusion to a specific, exploitable technology weakness. Water utilities

Why it matters

A widely deployed industrial device can turn a suspected geopolitical campaign into a direct operational risk for local water systems.

Link to Story

5:48 AMBBC

US charges 17 Iranians over 'massive' cyber theft campaign

Summary

The US has charged 17 Iranian nationals over an alleged large-scale cyber theft campaign. The Department of Justice says many of the attacks were conducted on behalf of the Iranian government.

The charges turn a broad cyber campaign into a formal state-linked criminal case. The defendants

Why it matters

The case raises the cost of state-backed cyber theft and signals tougher US action against the people accused of carrying it out.

Link to Story

2:58 AMFortune

Inside the $8 billion cybersecurity acquisition that helped ServiceNow’s stock buck the ‘Saaspocalypse’ fears

Summary

ServiceNow agreed to acquire cybersecurity startup Armis for $8 billion, in what became Israel’s second-largest technology startup exit. The deal was framed as a rescue for ServiceNow amid the market’s broader SaaS downturn.

The acquisition shows cybersecurity assets becoming strategic enough to support major software companies beyond their

Why it matters

Cybersecurity is becoming a central vehicle for software companies seeking durable growth in a harsher SaaS market.

Link to Story

Other Developments

A curated list of other prominent stories from this day.

2:46 PMTechCrunch

Researchers say OpenAI revoked their access to limited cyber program

Summary

OpenAI's Trusted Access for Cyber program gives selected security researchers access to stronger models so they can identify and report vulnerabilities. Researchers say OpenAI revoked their access, raising questions about how the program is being managed.

The immediate shift is from expanded research access to restricted participation for some defenders. That

Why it matters

A cyber-safety program cannot reliably surface vulnerabilities if the researchers expected to find them lose access without clear, trusted terms.

Link to Story

12:20 PMPYMNTS

Abnormal AI Expands OpenAI Partnership to Boost Cybersecurity

Summary

Abnormal AI is expanding its use of OpenAI technology in behavioral security products that detect attacks and compromised accounts. The company says its systems protect more than 4,500 organizations, including over a quarter of the Fortune 500, by analyzing identity and behavioral signals.

The expanded partnership pushes generative AI deeper into automated detection of abnormal user behavior and

Why it matters

More security decisions will increasingly depend on AI systems interpreting user behavior at enterprise scale.

Link to Story

11:30 AMPolygon

Marvel's Wolverine Director Addresses Massive Insomniac Hack In New Interview

Summary

Marvel's Wolverine director Mike Daly discussed Insomniac Games' 2023 data breach in a new interview. The hack exposed a large volume of internal files, including information related to the studio's projects.

The breach remains consequential because leaked development files can expose years of plans, unreleased content,

Why it matters

The incident shows how a single studio breach can compromise both corporate data and the secrecy that protects major entertainment releases.

Link to Story

10:27 AMPolygon

Pokemon Center Hit By Data Breach That Leaks Customer Information

Summary

The official Pokémon Center merchandise website suffered a data breach that exposed customer information.

Customer data is now potentially in the hands of unauthorized parties, while the available details

Why it matters

Even a retail breach can put customers at risk of targeted scams, credential abuse, and identity theft.

Link to Story

6:40 AMIGN

The Pokémon Company Cancels 30th Anniversary Card Orders Following 'Cyber Incident,' Warns of Customer Data Breach

Summary

The Pokémon Company is canceling orders for its 30th Anniversary Cards after a cyber incident. It warns that customer details may have been exposed.

The incident has disrupted a high-demand product and created a potential data breach for customers

Why it matters

The breach risk extends beyond canceled orders because customer information may now be exposed.

Link to Story

4:00 AMPYMNTS

Plaid Study Links Account Checks to Faster Fraud Detection

Summary

A new study found that 47% of surveyed firms cannot detect suspected fraud in real time or within minutes, even though most use automated defenses such as rules-based scoring. The research links account checks with faster fraud detection.

The decisive gap is speed: deploying fraud controls does not ensure firms can act before

Why it matters

Fraud prevention is shifting from static transaction screening toward real-time account intelligence.

Link to Story

Make it yours

Build Your First Pass.

Pick your topics, set your cadence, and receive your personalized First Pass in your inbox. It’s that simple!