[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Industry News · markdown

official (U.S. Attorney's Office SDNY press release, Nov 5); charges are allegations, defendants presumed innocent; extraditions pending

SDNY charges three men with using AI to clone CEOs' and lawyers' voices and faces on calls, stealing about $129 million in wire transfers

  • Pattern to train on: a 'confidential acquisition' request from the CEO, then a call with outside counsel, then an urgent wire to a new account.
  • Control that breaks it: verify any new-payee or large wire by calling back a number already on file, with a second approver, no matter how real the voice or video looks.
  • The FBI asks companies that may be victims to come forward.

Sources: U.S. Attorney's Office SDNY press release, Nov 5 (DOJ text via Forth mirror) · AP: 3 charged in scheme to use AI to impersonate CEOs and attorneys to steal $129 million · The Record: CEO-spoofing scammers used AI to help steal more than $100 million (Nov 6)