Between late September and early October, one operator breached at least seven Korean financial firms in a matter of weeks. They most likely used an open source AI pentest agent. The core payment systems were reportedly untouched. The attacker came in through side systems instead: a loan broker portal, an employee mobile app and a sales support system.
US financial institutions run the same kinds of systems, and most annual pentests never look at them. The budget pays for testing the front door, and compliance scoping leaves the side doors out.
In this session, Kay Kwak explains how these AI-driven attacks work and what signs show one is probing your perimeter. Jeff Martin then applies it to US teams: where your side doors are, why they get scoped out, and how to test them at a cost that makes sense.
