8 stories from 5 sources
Supporting Articles
A critical vulnerability in EDK2, the open-source firmware used in many systems, allows attackers to execute code early in the UEFI boot process. Because EDK2 underpins firmware across much of the server ecosystem, the exposure could affect a broad range of infrastructure.
4:25 PMArs Technica
Scams now account for a larger share of fraud losses, gaining 10 percentage points, according to a survey of 90 executives conducted for a September 2026 report. The findings point to customer intervention as a key defense, since victims are often persuaded to authorize payments to criminals themselves.
4:00 AMPYMNTS
GMO Internet is investigating claims that suspected hackers published customer data stolen in a cloud service breach. The company has not yet confirmed the scope or authenticity of the exposed information.
9:32 AMTechCrunchSummary
A critical vulnerability in EDK2, the open-source firmware used in many systems, allows attackers to execute code early in the UEFI boot process. Because EDK2 underpins firmware across much of the server ecosystem, the exposure could affect a broad range of infrastructure.
The decisive risk is execution before the operating system loads, which can let attackers establish
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
A firmware-level flaw can undermine security controls across entire server fleets and remain difficult to detect or remove.
Summary
Scams now account for a larger share of fraud losses, gaining 10 percentage points, according to a survey of 90 executives conducted for a September 2026 report. The findings point to customer intervention as a key defense, since victims are often persuaded to authorize payments to criminals themselves.
The decisive change is that social engineering is taking a greater share of fraud dollars,
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
As scams grow, banks must treat customer persuasion as a payment-security problem, not merely a consumer-awareness issue.
Summary
GMO Internet is investigating claims that suspected hackers published customer data stolen in a cloud service breach. The company has not yet confirmed the scope or authenticity of the exposed information.
The breach may have moved from a contained intrusion to a public data exposure, raising
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Publicly posted data can turn an unresolved breach into an active customer-harm event.
A curated list of other prominent stories from this day.
Gift card marketplace Raise cut its chargeback rate from 0.53% to 0.29% and reduced orders requiring manual review from as much as 18% to 0.25%. The results came from deploying Sardine's fraud prevention platform.
6:12 PMPYMNTS
Bank of America is warning customers not to give AI assistants access to their banking passwords. The bank says customers remain responsible for activity conducted through agents that access their accounts.
5:44 PMTechCrunch
Warhorse Studios, the developer behind Kingdom Come: Deliverance, says it was targeted in a major cyberattack. The incident puts fresh attention on the security risks facing game studios, which hold valuable code, data, and unreleased projects.
12:42 PMPolygon
Fraudsters are using commercial software sold on dark web marketplaces to coordinate scams, card testing attacks and synthetic identity fraud across accounts and devices. AWS argues that AI can detect the behavioral patterns these rapidly changing operations leave behind more effectively than static fraud rules.
4:02 AMPYMNTSSummary
Gift card marketplace Raise cut its chargeback rate from 0.53% to 0.29% and reduced orders requiring manual review from as much as 18% to 0.25%. The results came from deploying Sardine's fraud prevention platform.
The sharper shift is operational: automated fraud screening removed most manual review while reducing payment
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Fraud automation is proving valuable when it reduces both chargebacks and the labor needed to investigate them.
Summary
Bank of America is warning customers not to give AI assistants access to their banking passwords. The bank says customers remain responsible for activity conducted through agents that access their accounts.
The warning establishes a liability gap as consumers connect autonomous AI tools to financial services.
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
AI agents are entering a high-risk boundary where convenience can transfer security and fraud liability to the customer.
Summary
Warhorse Studios, the developer behind Kingdom Come: Deliverance, says it was targeted in a major cyberattack. The incident puts fresh attention on the security risks facing game studios, which hold valuable code, data, and unreleased projects.
Cyberattacks have become an increasingly routine headache for the games industry, but they can still
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
A breach could affect more than one studio, potentially exposing player data, development plans, or future releases.
2 stories · 2 sources
Summary
Fraudsters are using commercial software sold on dark web marketplaces to coordinate scams, card testing attacks and synthetic identity fraud across accounts and devices. AWS argues that AI can detect the behavioral patterns these rapidly changing operations leave behind more effectively than static fraud rules.
The shift is from isolated attacks to scalable, software-enabled fraud operations that can change faster
Unlock the full First Pass Analysis to get a better understanding of why this story mattersWhy it matters
Fraud defense is moving from rule-based screening toward continuous detection of coordinated behavior.
Make it yours
Pick your topics, set your cadence, and receive your personalized First Pass in your inbox. It’s that simple!
