Tag: fintech
13 articles
Robinhood's AI Trading Push Raises Accountability, Security Risks
As Robinhood rolls out AI-powered trading and credit card features, experts are sounding the alarm on potential accountability and security risks - but the company claims it's prioritizing safety with built-in controls. Can AI agents truly be trusted to make trades and purchases on our behalf?
Banking Trojan Targets Crypto Firms with Sophisticated Attacks
A new banking Trojan, dubbed TCLBanker, is wreaking havoc on crypto and finance platforms, allowing hackers to remotely control infected systems and steal sensitive info. This sophisticated attack, linked to North Korea's notorious Lazarus Group, has already led to the largest crypto platform hack of 2026.
TCLBanker Malware Spreads Rapidly via WhatsApp, Outlook
Beware of a rapidly spreading malware, TCLBanker, that's infecting 59 major banking, fintech, and cryptocurrency platforms through sneaky WhatsApp and Outlook attacks. This sneaky trojan uses a fake Logitech AI Prompt Builder installer to wreak havoc on your digital security.
Fintech Firm Exposes Database Credentials in Shared Spreadsheet
A fintech firm's most sensitive secrets were left exposed in a shared spreadsheet, with a password that was embarrassingly simple - literally a combination of the company's name and the year. The shocking discovery was made by Stanislav Kazanov during a routine compliance audit, when he stumbled upon a widely accessible SharePoint folder containing a file ominously titled Prod_DB_Root_Creds_DO_NOT_SHARE.xlsx.
Malicious NuGet Package Exclusive: Critical Stripe Risk
A Malicious NuGet Package targeting Stripe has been uncovered—if your projects use Stripe, find out how this critical risk could expose payments and what immediate steps you should take to secure your builds.
Prosper Marketplace Devastating 17.6M Breach — Urgent
Have I Been Pwned flags 17.6 million records tied to a suspected September hack of Prosper, leaving customers and regulators in the dark while the lender says it can’t yet verify the claims. Check whether your email appears in the database and take basic precautions like changing passwords and monitoring your credit.
insider data breach: Risky Fallout, Must-Have Fixes
FinWise Bank says an insider breach may have exposed data for about 689,000 customers — names, contact details and in some cases account info — and is working with law enforcement and cybersecurity experts to investigate. If you’re notified, act quickly: enroll in any monitoring offered, watch your accounts closely, and consider fraud alerts or a credit freeze to reduce identity-theft risk.
customer records Shocking Insider Breach Risky Exposure
Nearly 700,000 FinWise customers now face the unsettling possibility that their personal data was accessed for more than a year by an ex-employee. Act now: monitor accounts, enable MFA, and demand clearer disclosures and stronger offboarding controls.
supply-chain attack: Shocking Risky Breach Exposes 30K
Wealthsimple has confirmed a supply‑chain breach that exposed personal data for about 30,000 customers — while account balances and passwords weren’t affected, the incident is a sharp reminder to stay alert for phishing and to monitor your accounts. The firm says it’s notifying those impacted and working with the vendor to investigate and strengthen protections.
steal $130 million: Stunning Risky Heist Exposed
Sinqia, one of Brazil’s largest fintech providers, says it stopped an attempt to steal about $130 million from two B2B partners. The near‑heist shows how vulnerable software‑based vaults can be and why hardening third‑party financial systems is urgent.
Operation Serengeti 20: Stunning Success, Urgent Lessons
Interpol’s Operation Serengeti 2.0 scored a major win—1,209 arrests across Africa and $97.4 million recovered—but it also lays bare how much more cross-border cooperation, stronger safeguards, and support for victims are needed to turn tactical successes into lasting change.
APP fraud: Urgent National Risk — Must-Have Defenses
Think your bank’s “payment authorized” message guarantees safety? RUSI warns that APP fraud—exploiting gaps at smaller payment firms and mule networks—has evolved from a consumer nuisance into a national security risk, quietly funding organised crime, cyberattacks and covert influence operations.
ShinyHunters cybercrime group: Critical Exclusive Threat
When your bank calls about a transaction you didn’t make, it’s a stark reminder that the ShinyHunters cybercrime group is now homing in on banks, fintechs and their vendors to harvest credentials and personal data for large-scale fraud. Institutions must act fast—tightening credential defenses, shoring up vendor security, and boosting detection—to protect customers, reputation and regulatory standing.