Tag: financial services
89 articles
Bank of America Bolsters Tech Staff to Address AI-Discovered Vulnerabilities
Bank of America is ramping up its tech squad by hiring 1,000 contractors to tackle a surge in security work sparked by AI-discovered vulnerabilities. The move comes as the bank faces a hefty remediation bill of over a couple of hundred million dollars to address the issues flagged by Anthropic's Mythos model.
Ransomware Gang Targets MoneyGram in Alleged Breach
Ransomware group The Gentlemen claims to have breached financial services giant MoneyGram, which boasts 60 million active customers, but the company has yet to confirm the incident. With no concrete evidence or data samples provided, the extent of the alleged breach remains unclear.
Financial Firms' Software Supply Chain Vulnerability Backlog Reaches Crisis Point
The financial services sector is facing a crisis point as a massive backlog of software supply chain vulnerabilities has finally caught up with it, with exploitation now overtaking phishing as the top breach threat. For years, firms tolerated this risk due to legacy systems, regulatory pressures, and the need for ultra-reliability, but attackers have changed the game.
Mandiant Exposes Citrix NetScaler Zero-Day Exploits by Suspected State Actors
Dozens of organizations across North America and Europe, spanning critical sectors like government, finance, and education, have been impacted by a massive cyberattack exploiting a zero-day vulnerability in Citrix NetScaler appliances. The stealthy campaign, suspected to be carried out by state actors, went undetected for at least three weeks, allowing attackers to compromise a wide range of industries.
Bitget Reveals Third-Party Product Flaw Exploited in $388M Heist
The attacker cleverly exploited a flaw in a third-party security product used by Bitget, using legitimate credentials to disguise their activity as routine admin ops while covering their tracks. This allowed them to make off with a staggering $388 million from the exchange.
Bitget Breach Exposes Third-Party Security Risk After $387.5m Wallet Hack
A whopping $387.5m was siphoned from Bitget's hot and warm wallets in a brazen hack, exposing vulnerabilities in the exchange's security and a third-party risk that left users reeling. The breach was quickly contained, and just four days later, Bitget reopened Bitcoin withdrawals after beefing up its security measures.
Bitget Resumes Bitcoin Withdrawals After $387.5 Million Crypto Heist
Bitget has resumed Bitcoin withdrawals after a brief pause, taken as a security measure following a $387.5 million crypto heist, and has shared a schedule to bring other withdrawal services back online. The exchange assured users that the temporary pause was not related to the availability of their assets.
Treasury Warns Against AI Liability Exemptions
Treasury Secretary Scott Bessent urges lawmakers to hold AI labs accountable, warning that giving them a blank check on liability could compromise safety. He argues that making creators liable for their AI developments is crucial to guaranteeing safety.
Revolut Breach Exposes Sensitive Data of Customers Worldwide
A cunning email scam has led to a massive data breach at Revolut, exposing sensitive information of customers globally, with the scammer posing as a legitimate government agency to trick the fintech firm into sharing customer data. Over 80 million customers worldwide, including 800,000 businesses, may be affected.
Hackers Return $265M in Bitcoin, Hold $47M in Dispute
In a surprise move, hackers claiming to be "whitehats" returned a whopping 3,400 bitcoin, valued at $265 million, to the Liquid Federation, leaving $47 million still in dispute. The mysterious intruders made their move on September 7, sending the funds back after a daring heist that stole nearly 4,000 bitcoin from the Liquid Network.
Breeze Comet Exploits Brazilian Payment Systems in Hundreds of Fraudulent Transactions
Meet Breeze Comet, a financially motivated threat actor that's been wreaking havoc on Brazilian payment systems with hundreds of fraudulent transactions, exploiting customized malware and compromised websites to siphon off tens of thousands of dollars. Their tactics are evolving, and Latin American countries should beware of potential expansion.
AI Coding Tools Exacerbate Open-Source Remediation Debt
AI coding tools are speeding up development, but at a hidden cost: they can quickly introduce a flood of new open-source components that security teams struggle to keep up with, multiplying remediation debt. This creates a downstream cycle of vulnerability assessments, licensing checks, and ownership questions that can be overwhelming.
SafePal Breach Exposes 39,798 Customer Records
Good news: SafePal's recent data breach didn't compromise wallet access or funds, but 39,798 customers had their personal info exposed, including names, emails, and shipping addresses. The breach appears to be limited, with sensitive credentials like wallet seed phrases and private keys remaining secure.
ExfilSquad Breaches 13 Organizations Via Misconfigured Microsoft Power Pages
Meet ExfilSquad, a notorious data-extortion group that's made off with a whopping 27 million records and 382.64 GB of sensitive data from 13 major organizations across government, education, finance, and manufacturing. The stolen treasure trove was dumped online for all to see, courtesy of a simple misconfiguration in Microsoft Power Pages.
Cybercriminals Exploit AI Tokens for Massive Financial Gains
Cybercriminals are raking in millions by exploiting AI tokens, a technique known as token jacking, which allows them to secretly run up huge bills on unsuspecting companies using commercial AI platforms. In one shocking example, token jacking led to nearly $1 million in unauthorized charges before being caught.
Phishing Scam Exploits Bank of America Brand to Install Remote Access Malware
Stay safe from phishing scams by being cautious of email origins and link destinations - it's your first line of defense against attacks like the recent Bank of America phishing scam. Pay attention to these details to avoid falling victim to remote access malware.
CAF Bank Reopens Online Service After Fraud Attempt
Good news: CAF Bank has reopened its online banking service after a 10-day disruption caused by a fraud attempt, and customers can now access their accounts online. The bank's CEO, Alison Taylor, confirmed that essential work with technology partners is complete, and an investigation into the incident is ongoing.
CAF Bank Outage Persists, Charities Struggle with Disrupted Payments
Thousands of UK charities are still reeling from a week-long online banking outage at CAF Bank, with £1.45 billion in customer deposits stuck in limbo and no end in sight for a resolution. The disruption has left 14,000 charity customers scrambling to manage their day-to-day transactions.
Toy Ghouls Unveils GenieLocker Ransomware
Meet GenieLocker, the latest ransomware threat from the notorious Toy Ghouls group, which has been wreaking havoc on businesses since March 2026, with a particular focus on Russian industries. The attackers are using clever tactics, like infiltrating through OpenVPN connections, to gain access and spread their malicious reach.
Hackers Target Hotel Wi-Fi to Steal Microsoft 365 Accounts
Hackers are targeting hotel Wi-Fi networks to steal Microsoft 365 accounts from unsuspecting travelers, with a widespread campaign affecting various industries across multiple countries. This sneaky tactic redirects visitors to attacker-controlled sites, putting business travelers at risk of having their sensitive information compromised.
Hackers Exploit Off-Chain Infrastructure, Steal $23.7 Million from Ostium
In a shocking attack, hackers swindled $23.7 million from Ostium by manipulating off-chain infrastructure with fake price reports, rapidly trading to turn the scam into cash. The thieves targeted the liquidity provider vault, leaving trader collateral safely untouched.
Russian Hackers Target Network Devices With Exploits
Russian hackers, linked to the Federal Security Service's Center 16, have been actively targeting critical US and foreign networks across multiple sectors, including defense, energy, and healthcare, for over a decade. This ongoing threat has compromised networks in various industries, posing significant risks to national security and global stability.
EvilTokens Exposes New Blind Spot in Email Security
A shocking 75.6% of consulting firms were exposed to phishing attacks in 2026, with other industries like financial services, manufacturing, and tech also falling prey to these threats. EvilTokens' ghost phishing campaign uses a sneaky Microsoft Device Code Phishing tactic to trick victims into giving hackers access to their Microsoft 365 accounts.
The Gentlemen Ransomware Gang Exposes Advanced Tactics
Meet The Gentlemen, a notorious ransomware gang that's made a name for itself with sophisticated tactics, ranking among the top 10 ransomware actors in just a few months. Since February 2026, they've been wreaking havoc across industries and geographies, with a strong presence in Brazil, China, Indonesia, Taiwan, and Thailand.