Tag: finance
-
Large Enterprises Targeted in Fake Merger & Acquisition Scams
Threat actors behind the Phantom Deal campaign are studying companies in extreme detail, aiming to dupe midlevel employees into initiating large financial transfers. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/large-enterprises-fake-merger-acquisition-scams
-
Financial firms face ‘vulnerability bottlenecks’ from frontier AI
The Financial Conduct Authority warns that frontier AI models are finding security vulnerabilities faster than firms can patch them First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366650080/Financial-firms-face-vulnerability-bottlenecks-from-frontier-AI
-
412,000 The Town 2025 Ticket Buyers’ Data Hits the Dark Web
412,000 The Town 2025 festival buyer records are being sold for $10,000, with Brazil’s data openly marketed for bank fraud, loans and SIM registration. A seller on a Russian-language data-trading forum listed what they’re calling a Ticketmaster database on September 2, claiming over 412,000 Latin American purchase records with a heavy concentration of Brazilian data.…
-
‘Breeze Comet’ Tears Into Brazilian & Global Financial Systems
Brazil’s most sophisticated threat group is making light work of the country’s financial systems, putting money directly into its own pocket. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/breeze-comet-brazilian-global-financial-systems
-
Breeze Comet threat actor targets Brazilian financial sector with sophisticated attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/breeze-comet-threat-actor-targets-brazilian-financial-sector-with-sophisticated-attacks
-
Five Men Tried to Make Kansas ATMs Spit Out Cash
Five men pleaded guilty after targeting Kansas ATMs with jackpotting malware as the FBI warns of a nationwide rise in attacks and financial losses. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cybersecurity/news-kansas-atm-jackpotting-malware-guilty-pleas/
-
Hackers Abuse Legitimate IT Management Tool to Sneak Into Business Networks
Cybersecurity researchers at Huntress have uncovered a phishing campaign that abuses Faronics Deploy, a legitimate endpoint management platform used by businesses, schools, and government offices to remotely install software and run scripts across their networks. According to the security firm, threat actors sent victims phishing emails disguised as invoices, tax documents, financial records, and event…
-
Hackers Abuse Legitimate IT Management Tool to Sneak Into Business Networks
Cybersecurity researchers at Huntress have uncovered a phishing campaign that abuses Faronics Deploy, a legitimate endpoint management platform used by businesses, schools, and government offices to remotely install software and run scripts across their networks. According to the security firm, threat actors sent victims phishing emails disguised as invoices, tax documents, financial records, and event…
-
Critical Infrastructure Security
Critical infrastructure supports the systems and services that modern society depends on every day. Electricity generation and distribution, water treatment, transportation, telecommunications, healthcare, financial services, energy production, and other essential sectors rely on increasingly connected digital technologies. As these environments… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/critical-infrastructure-security/
-
Revolut scam wave steals £180,000 from Jersey residents in just four weeks
If you live in Jersey and bank with Revolut, you should be on your guard against scam phone calls. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/revolut-scam-jersey
-
Palo Alto Acquires Console to Expand Cortex Agentic Security
Palo Alto Networks announced it has acquired the AI automation startup Console to expand what AI agents can do inside its Cortex security platform. Financial terms of the deal were not disclosed. The company said it plans to bring Console’s technology into Cortex to help security teams investigate activity, prioritize work and take action across..…
-
Technical Due Diligence: Why 85% of Tech Deals Fail Without It, and What a Real Assessment Actually Looks Like
You are about to write a check. Invest in a startup, acquire a SaaS company, fund a healthtech platform, or bring on a technology vendor that will run a core part of your business. The financials look clean. The pitch… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/technical-due-diligence-why-85-of-tech-deals-fail-without-it-and-what-a-real-assessment-actually-looks-like/
-
Nutex Health Says Patient Data Stolen, Hackers Threaten Leak
The US healthcare provider confirmed that sensitive patient and employee data, alongside financial and business information, were exfiltrated by a third party First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nutex-patient-data-stolen/
-
Hackers Breach Brazilian Financial Firms and Execute Hundreds of Fraudulent Transactions
A financially motivated threat actor tracked as BREEZE COMET has breached Brazilian financial, retail, and eCommerce organizations, using privileged access to payment platforms to execute hundreds of fraudulent transactions in tightly timed waves. The activity overlaps with clusters publicly identified as Plump Spider and SHADOW-AETHER-064, although GTIG’s reporting frames this as operational overlap rather than…
-
Anthropic’s Enterprise Frontier Safeguards lets your Claude logs stay in your cloud
Eight members of the Analysis and Resilience Center for Systemic Risk, a group whose roster includes the CISOs of Goldman Sachs, Morgan Stanley, Citi, Bank of America, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/02/anthropic-enterprise-frontier-safeguards/
-
Why yesterday’s identity security standards no longer work for banks
First seen on scworld.com Jump to article: www.scworld.com/perspective/why-yesterdays-identity-security-standards-no-longer-work-for-banks
-
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet (formerly UNC5669) since 2024.Google Threat Intelligence Group (GTIG) and Mandiant teams described the threat actor as “specializing in manipulating payment systems and banking software in Brazil to conduct fraudulent transfers.” The adversary First seen on…
-
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet (formerly UNC5669) since 2024.Google Threat Intelligence Group (GTIG) and Mandiant teams described the threat actor as “specializing in manipulating payment systems and banking software in Brazil to conduct fraudulent transfers.” The adversary First seen on…
-
Liquibase Brings Database Change Governance to Germany’s Most Regulated Enterprises
Germany’s enterprise IT organizations, from DAX-listed manufacturers to highly regulated banks, insurers, and pharmaceutical companies, are under the same pressure driving digital transformation everywhere: deliver software and AI-powered products faster, without sacrificing the compliance and audit standards regulators demand. Application… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/liquibase-brings-database-change-governance-to-germanys-most-regulated-enterprises/
-
Cyber risk from frontier AI poses ‘most immediate concern’ to global financial system, watchdog warns
Andrew Bailey, chair of the Financial Stability Board, called on financial institutions and technology providers to “prepare for more severe scenarios involving simultaneous disruption across multiple firms or shared technology dependencies.” First seen on therecord.media Jump to article: therecord.media/cyber-risk-from-frontier-ai-most-immediate-concern-to-global-finance
-
Cyber risk from frontier AI poses ‘most immediate concern’ to global financial system, watchdog warns
Andrew Bailey, chair of the Financial Stability Board, called on financial institutions and technology providers to “prepare for more severe scenarios involving simultaneous disruption across multiple firms or shared technology dependencies.” First seen on therecord.media Jump to article: therecord.media/cyber-risk-from-frontier-ai-most-immediate-concern-to-global-finance
-
Five Plead Guilty to Using ATM Jackpotting Malware in Cash Theft Scheme
Five Venezuelan nationals have pleaded guilty in a federal case involving attempts to deploy ATM jackpotting malware against cash machines in Kansas. This case highlights a growing cyber-physical threat targeting financial institutions across the United States. The case arose from an FBI investigation into an alleged scheme to force automated teller machines (ATMs) to dispense…
-
Financial Stability Board Sounds the Alarm Over Frontier AI Risks
The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/financial-stability-board-alarm/
-
Financial Stability Board Sounds the Alarm Over Frontier AI Risks
The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/financial-stability-board-alarm/
-
Why Enterprises Need AI FinOps, Security to Scale Responsibly
Enterprises Need Unified Cost and Security Controls to Scale AI Agents Responsibly AI agents can run up costs and expand security risks faster than traditional governance can respond. Companies need real-time visibility into every model call, tool invocation and agent action, linking spending, access and outcomes so finance and security teams can control AI jointly…
-
AI could cause global economic downturn, Bank of England governor tells G20
Andrew Bailey, in role as financial stability watchdog chief, warns advanced models risk destabilising systemThe Bank of England’s governor, Andrew Bailey, has joined the throng of figures warning about the global risks posed by the most advanced artificial intelligence technology.In a two-page letter sent to international finance ministers and central bank governors as part of…
-
Advanced AI threatens global financial stability, says Bank of England boss
Andrew Bailey warns G20 members about risk of cyber-disruption spreading ‘across jurisdictions’The Bank of England’s governor, Andrew Bailey, has joined the throng of figures warning about the global risks posed by the most advanced artificial intelligence technology.In a two-page letter sent to international finance ministers and central bank governors as part of his role as…
-
LACMA Data Breach: A 4-Day Attack, a Year of Fallout
LACMA says a four-day cyberattack may have exposed Social Security, financial, and medical data, prompting public disclosure and a proposed lawsuit. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-lacma-data-breach-four-day-attack-year-fallout/
-
AI Governance Has a Control Problem, Not a Policy Problem
Tags: access, ai, business, control, credentials, cybersecurity, data, finance, governance, identity, least-privilege, risk, technology, toolWe’re getting good at writing policies about how AI should be used. Responsible AI principles. Acceptable-use policies. AI risk frameworks. Approval processes. Governance committees. All of these have a place. But there is a harder question that I think organisations need to start asking: What evidence proves those controls actually work? Because AI is changing…
-
What Enterprise Continuous Compliance Software Misses
<div cla Key Takeaways: What Enterprise Continuous Compliance Software Misses Visibility gaps prevent your security team from detecting control failures until audits expose them months later. Weak control mapping disconnects your framework compliance from actual risk exposure, leaving critical gaps unaddressed. Executive reporting fails when dashboards show activity metrics instead of financial impact your board…