Snippings

xxx

Most agent frameworks treat policy as an application-layer concern. The AI decides whether a transaction should happen, checks some rules in code, hopefully works within prescribed guardrails, and proceeds. This is fine for demos. It is not fine for real money.

The problem is straightforward: application-layer policy is only as secure as the application. If someone compromises the server, jailbreaks the model, or finds a bug in your policy-checking code or guardrails framework, the money moves. You’ve built a lock out of suggestions.

What agents actually need are two layers:

Layer 1 is intelligence. This is the application layer — the part that answers the questions you’d want answered before any money moves. Who controls this agent? Are they a verified entity? What’s their track record? You can see this in the demo: before the treasury agent pays another agent for research services, it resolves their identity, checks their reputation score, and evaluates whether they meet the policy threshold. An agent with a verified owner, a score of 87/100, and 142 attestations clears. An unverified agent with a dispute flag doesn’t. This is the kind of automated standards-based trust infrastructure that the agentic economy needs — not platform-specific API keys, but portable, verifiable identity that works across any agent framework.

Layer 2 is enforcement. In this example, this part runs in Turnkey’s secure enclave. Has the required approval been obtained? The enclave signs the transaction only if every policy condition is met. This isn’t running in our application code. It’s running in hardware that neither we nor Turnkey can tamper with after deployment.

Intelligence without enforcement is just prompt suggestions. Enforcement without intelligence is just a dumb access list. You need both.

Even if our entire backend is compromised, the enclave won’t sign transactions that violate policy. That’s not a promise — it’s math.

From: What Agents Need Before They Handle Real Money – Catena Labs.

xxx

xxx

France’s Ministry of Economics, Finance and Industrial and Digital Sovereignty last week revealed the incident took place in January, after unknown attackers used stolen credentials to access the database.

The Ministry said the attacker’s access was restricted immediately upon discovery of the attack, but that the miscreant still managed to access personal information about 1.2 million accounts, including account numbers, account holder’s addresses, and tax identification numbers.

From: Attacker gets into France’s DB listing all bank accounts • The Register.

These purloined personal parameters will undoubtedly be used for social engineering attacks against account holders.

xxx

police launched an appeal after someone sold a bike for £4,700 in fake cash.

From: Police warning over fake £20 notes. – BBC.

xxx

xxx

On a larger scale, the entire agentic world is wrestling with that trade-off: At what point will agents be secure enough to be useful?

From: Is a secure AI assistant possible? | MIT Technology Review.

xxx

xxx

Dark Reading reported this week on Operation DoppelBrand, a campaign by the GS7 cyberthreat group deploying near-perfect imitations of U.S. financial institution login portals. These aren’t phishing emails with typos. These are pixel-perfect clones of major bank portals hosted on lookalike domains, designed to steal credentials and establish remote access.

Most brand protection tools focus on domain monitoring—watching for typosquatting and lookalike URLs. But these attacks exploit user trust in visual design, not just domain names. And let’s face it, who REALLY checks the URL when they go to their bank’s website? Me neither.

From: This Week in Fraud (2/17).

xxx

xxx

Figure Technology, a $5 billion blockchain-based lender that tokenizes home equity loans on its own distributed ledger, just learned the hard way that you can have the most secure vault in the world, but that’s pointless if your employees give out the keys. 
On February 13th, Figure confirmed a data breach after an employee fell victim to a voice phishing (vishing) attack. The attacker impersonated IT support, tricked the employee into surrendering their Okta single sign-on credentials, and used a real-time Adversary-in-the-Middle (AiTM) phishing kit to bypass multi-factor authentication entirely. ShinyHunters, one of the most prolific ransomware groups operating today, published roughly 2.5 gigabytes of stolen data after Figure refused to pay the ransom demand.

From: This Week in Fraud (2/17).

xxx

xxx

Amazon Web Services experienced a 13-hour interruption to one system used by its customers in mid-December after engineers allowed its Kiro AI coding tool to make certain changes, according to four people familiar with the matter.

The people said the agentic tool, which can take autonomous actions on behalf of users, determined that the best course of action was to “delete and recreate the environment”.

 

AWS, which accounts for 60 per cent of Amazon’s operating profits, is seeking to build and deploy AI tools including “agents” capable of taking actions independently based on human instructions.

From: Amazon service was taken down by AI coding bot.

xxx

Ex-JPM Andrew Dresner

Collectively, the 7 Zelle owners have closer to 60% Retail share, and the full Zelle membership brings that to 80%. Whether the method ends up as stablecoins or tokenized deposits, the banks either hang together or hang separately.

From: Venmo falls further behind Zelle – by Andrew M. Dresner.

xxx

xxx

The company has revived a previously shelved smartwatch project, now code-named Malibu 2, and intends to release it later this year with health-tracking features and a built-in Meta AI assistant. The watch will put Meta in direct competition with Apple, which has a popular line of smartwatches, as well as other companies such as Google.

From: Meta Revives Plan for Smart Watch, Targets 2026 Launch — The Information.

xxx

xxx

Concerns over payment sovereignty are bubbling up in the U.K., where a group of banks are drawing attention to an effort to build a local payment network.

From: Olympics boost spending in Italy, UK banks push new card rail | PaymentsSource | American Banker.

xxx