[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Tips & Guides · markdown

operational guidance (SDNY indictment details, Nov 5)

Tip: a face and voice on a call no longer prove it's your CEO, so require a callback to an on-file number and a second approver for every new-payee wire

  • Finance rule: no new beneficiary or changed bank details without a callback to a number from your own records, not one given on the call or in the email.
  • Two people approve wires above a set amount; 'keep this confidential' is a reason to escalate, not to skip steps.
  • Agree a private verbal code or ticket number for executive payment requests.
  • Ask your bank for payee-name checks and holds on first-time international wires.

Sources: U.S. Attorney's Office SDNY press release, Nov 5 (DOJ text via Forth mirror)