Tag: finance
-
Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud
The popular phishing-as-a-service platform used AI throughout the attack chain, allowing cybercriminals to steal tokens for account takeover and business email compromise. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-eviltokens-cybercrime-service-takedown/
-
DORA Year Two: Can Your SOC Actually See the Attack?
When the Digital Operational Resilience Act (DORA) became enforceable across the European Union in January 2025, it triggered an administrative sprint. Financial entities spent the first year establishing risk governance, assessing third-party service providers, updating contract clauses, and documenting incident escalation workflows.Now in its second year, the harder part of DORA is First seen on…
-
Using Paybis as a Crypto On-Ramp in 2026: Fees, Wallets and Checks
Paybis offers crypto on-ramp and off-ramp services with cards, bank transfers and wallets. Learn about its fees, verification, security and regional availability. First seen on hackread.com Jump to article: hackread.com/using-paybis-as-crypto-ramp-2026-fees-wallets-checks/
-
Cyberattack hits University of Munich, potentially exposing student financial data
The university, commonly known as LMU Munich, said Saturday that an attacker accessed enrollment data stored on one of its IT systems. First seen on therecord.media Jump to article: therecord.media/cyberattack-hits-university-of-munich-potentially-exposing-data
-
AI-Powered RatHat Android Trojan Steals Bank Credentials, PINs and MFA Codes
Researchers have identified a new Android banking Trojan called RatHat that utilizes artificial intelligence to automate device compromise and steal financial credentials, PINs, and one-time passcodes. Zimperium’s zLabs researchers analyzed this malware, which represents a significant evolution in Android threats. AI-Powered RatHat Android Trojan Unlike traditional malware that relies on fixed scripts, RatHat offers a…
-
Now AI Puts Financial Crime Within Anyone’s Reach
Eliminate Silos to Better Combat AI-Driven Crime, Says Global Payments’ Shola Akeju. Financial crime might be nothing new, but artificial intelligence is making it faster to execute and harder to detect by putting sophisticated tools within reach of almost anyone, said Shola Akeju, director of global financial crime program implementation at Global Payments First seen…
-
AI Is Redefining Threat-Led Penetration Testing
Crest CEO Nick Benson on Governance, Ethics and AI-Driven Pen Testing Risk. Artificial intelligence is reshaping penetration testing, expanding both its capabilities and risks. Crest CEO Nick Benson says financial institutions need stronger governance, ethical guardrails and tightly controlled threat-led testing to keep pace with AI-driven change. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-redefining-threat-led-penetration-testing-a-32851
-
GISEC Global highlights growing influence of women leaders in cyber resilience
Female cyber security leaders from government, finance, research and international organisations share how opportunity, inclusion and confidence are helping shape the next generation of cyber talent across the Middle East and beyond First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366650552/GISEC-Global-highlights-growing-influence-of-women-leaders-in-cyber-resilience
-
GISEC Global highlights growing influence of women leaders in cyber resilience
Female cyber security leaders from government, finance, research and international organisations share how opportunity, inclusion and confidence are helping shape the next generation of cyber talent across the Middle East and beyond First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366650552/GISEC-Global-highlights-growing-influence-of-women-leaders-in-cyber-resilience
-
New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data
Researchers at Zimperium have uncovered a new Android malware strain, dubbed RatHat, with spyware and backdoor capabilities First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/rathat-android-malware-ai-steal/
-
CISOs to Watch in Charlotte: From Theme Parks to Financial Services
Charlotte’s reputation runs on banking, but the security leaders in this piece protect a far wider slice of American consumer life: aircraft engines and building controls, a lending marketplace, packaging for half the products on a grocery shelf, payroll software,… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/cisos-to-watch-in-charlotte-from-theme-parks-to-financial-services/
-
KI-Agenten rücken beim Insider-Risiko in den Fokus
Eine internationale Befragung unter 600 Security- und Finance-Entscheidern zeigt: KI-Agenten mit zu weitreichenden oder unbeabsichtigten Zugriffsrechten werden zunehmend als Risiko wahrgenommen. Gleichzeitig fehlen vielen Unternehmen noch belastbare Daten, um technisches Verhalten in geschäftliche Risiken zu übersetzen. KI-Agenten verschieben die Debatte über Insider-Risiken Management Summary KI-Agenten werden zum Insider-Thema: 48 % der befragten Security-Verantwortlichen… First seen…
-
Anthropic wants Claude to analyze your bank account and financial data
Anthropic is testing a new personal finance feature called “Claude Money” that will allow you to connect your bank accounts directly to Claude and “understand your money.” First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/anthropic-wants-claude-to-analyze-your-bank-account-and-financial-data/
-
Treasury’s Scott Bessent says no liability exemptions for AI labs
The secretary told House Financial Services Committee lawmakers that the “best way to guarantee safety” is for AI creators to be held “liable for what they build and generate.” First seen on fedscoop.com Jump to article: fedscoop.com/treasury-scott-bessent-ai-labs-liability-exemptions/
-
Smishing Triad Hackers Use JWR Phishing Kit to Steal Cards, OTPs and Bank Credentials
A large-scale SMS phishing campaign linked to the Smishing Triad is using a sophisticated phishing kit dubbed JWR to harvest payment-card data, one-time passwords, online-banking credentials, identity information, and digital-wallet logins. Group-IB attributed the activity to an operator sub-cluster tracked as Outsider, which appears to operate as a customer within the wider phishing-as-a-service ecosystem rather…
-
Cyber-Attacks Cost Organizations $52,000 on Average
Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cyberattacks-cost-organizations/
-
Cyber-Attacks Cost Organizations $52,000 on Average
Hiscox highlighted the huge financial and operational costs of cyber-attacks, with the average cost of an incident at $52,000 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cyberattacks-cost-organizations/
-
FinCEN Says the Quiet Part Out Loud: Banks Can Share Fraud Alerts in Real Time
FinCEN guidance clarifies how financial institutions can share fraud-related intelligence in real time under Section 314(b), while maintaining AML, privacy, SAR and antitrust controls. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/fincen-says-the-quiet-part-out-loud-banks-can-share-fraud-alerts-in-real-time/
-
KREMLIN Banking Malware Bypasses Chrome Security to Steal Banking Sessions
A Brazilian banking malware operation, dubbed KREMLIN, that can silently implant malicious extensions in Google Chrome and Microsoft Edge, bypassing Chromium’s built-in integrity protections to steal credentials, cookies, and active banking sessions. Despite its name, the KREMLIN toolkit shows no apparent Russian connection. The campaign relies on Portuguese-language artifacts, lures impersonating 12 Brazilian banks, and…
-
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Tags: banking, browser, chrome, credentials, cybersecurity, finance, google, malicious, malware, threatCybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN.Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersonate a dozen Brazilian banks and install a malicious browser extension on Google…
-
(g+) Cybersecurity: Das italienische Start-up Exein sammelt 270 Millionen US-Dollar, um …
Ein Unternehmen aus Rom will Roboter, Drohnen, Leuchtmittel vor KI-Hacks schützen. Das Investoreninteresse ist riesig, die Financial Times hat mit dem Gründer gesprochen. First seen on golem.de Jump to article: www.golem.de/news/cybersecurity-das-italienische-start-up-exein-sammelt-270-millionen-us-dollar-um-ki-hacker-mit-ki-zu-bekaempfen-2609-213040.html
-
Google Search Makes It Harder to See Where a Link Really Goes Before You Click
Google has begun routing some organic Search result links through opaque google.com/goto?url=… redirects, reducing users’ ability to independently inspect a destination URL before clicking. The change appears designed to raise the technical and financial cost of mass scraping. However, it also weakens a long-standing, basic anti-phishing habit: hovering over a link to verify where it…
-
Google Search Makes It Harder to See Where a Link Really Goes Before You Click
Google has begun routing some organic Search result links through opaque google.com/goto?url=… redirects, reducing users’ ability to independently inspect a destination URL before clicking. The change appears designed to raise the technical and financial cost of mass scraping. However, it also weakens a long-standing, basic anti-phishing habit: hovering over a link to verify where it…
-
Kura Appoints Acumen Cyber to Deliver 24/7 Cyber Defence
Customer experience provider Kura has appointed Acumen Cyber to provide 24/7 security monitoring, threat detection and incident response across its operations in the UK and South Africa. Kura supports more than 50 brands across financial services, utilities, healthcare and the public sector, operating from Glasgow, Sunderland and Durban. The company handles millions of customer interactions…
-
Google Search Makes It Harder to See Where a Link Really Goes Before You Click
Google has begun routing some organic Search result links through opaque google.com/goto?url=… redirects, reducing users’ ability to independently inspect a destination URL before clicking. The change appears designed to raise the technical and financial cost of mass scraping. However, it also weakens a long-standing, basic anti-phishing habit: hovering over a link to verify where it…
-
Suspected Black Axe gang leaders face cybercrime charges in the US
Five alleged leaders of the Black Axe cybercrime syndicate, known for its involvement in global-scale cyber-enabled financial fraud, have been extradited to the United States to face wire fraud and money laundering charges. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/black-axe-gang-members-extradited-to-us-face-cybercrime-charges/
-
Agentic SOC Platforms for Financial Services, Judged on What the Examiner Asks For
Vendor claims below are dated at first sourcing and re-checked periodically; see the Source & Date column in the comparison table. Third-party positions are quoted from each vendor’s public materials, with dates as labeled. We hold D3 Morpheus to the… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/agentic-soc-platforms-for-financial-services-judged-on-what-the-examiner-asks-for/
-
Revolut Reveals Data Breach Tied to Faked Official Request
Financial Platform Was Socially Engineered Into Disclosing Sensitive Customer Data. Digital financial platform Revolut is notifying customers that it suffered a data breach exposing their personal details after it fell for an official-looking impersonation scam involving a request for customer information sent using a legitimate government agency domain email. First seen on govinfosecurity.com Jump to…
-
Revolut Reveals Data Breach Tied to Faked Official Request
Financial Platform Was Socially Engineered Into Disclosing Sensitive Customer Data. Digital financial platform Revolut is notifying customers that it suffered a data breach exposing their personal details after it fell for an official-looking impersonation scam involving a request for customer information sent using a legitimate government agency domain email. First seen on govinfosecurity.com Jump to…
-
Revolut discloses data breach exposing financial info, passports
Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/revolut-discloses-data-breach-exposing-financial-info-passports/