Tag: finance
-
Toy-making giant Hasbro disclose data breach affecting employees
Hasbro, one of the world’s largest toy and game companies, has disclosed that attackers have accessed the personal and financial information of an undisclosed number of employees. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/toy-making-giant-hasbro-disclose-data-breach-affecting-employees/
-
Cryptohack Roundup: Term Finance Hack
Also: Fraud Convictions for Profit Connect and Block Bits Capital. This week, hackers stole $8.5M from Term Finance, BounceBit to shutter blockchain after hack, Profit Connect and Block Bits Capital founders convicted in fraud cases, Roman Storm’s retrial delayed and AI use in crypto-linked crime jumped 40%. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cryptohack-roundup-term-finance-hack-a-32668
-
StrongestLayer: Move Past The ‘Noisy’ Attack Zone, Just 3.6% of Phishing Is Behind (Nearly) All Risk
StrongestLayer research points to what the company calls a “stark disconnect” between the attacks companies see most often, when compared to those that pose the greatest financial risk. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/strongestlayer-phishing-genome-report-risk-analysis/
-
UK airports operator hit by cyber-attack and customer data accessed
Company that runs Manchester, Stansted and East Midlands airports says passenger safety is unaffected<ul><li><a href=”https://www.theguardian.com/business/live/2026/aug/27/asian-technology-shares-ride-high-ai-optimism-nvidias-stunning-results-jackson-hole-live-updates”>Business live latest updates</li></ul>Three UK airports have been hit by a “cybersecurity incident” in which the data of about 8.7 million customers was accessed, Manchester Airport Group (Mag) has said.The company, which operates Manchester Airport, London Stansted and East Midlands airport,…
-
Stop Building a 2003 SOC with AI: Local Context, Failure Modes and Your Path (Part 3)
In Part 1 of this series, we dumped a pile of uncomfortable questions on you and promised answers. In Part 2 of the series, we talked about why 1990s-2000s alert triage must die. The core thesis, if you recall: if you add AI agents into a legacy, swivel-chair SOC structure, you are essentially building a robotic…
-
Boston Scientific says cyberattack disrupted order processing, shipping
The medical device-maker says it cannot yet determine any financial impact from the attack it suffered this week. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/boston-scientific-cyberattack-disrupted-order-processing-shipping/828816/
-
Boston Scientific says cyberattack disrupted order processing, shipping
The medical device-maker says it cannot yet determine any financial impact from the attack it suffered this week. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/boston-scientific-cyberattack-disrupted-order-processing-shipping/828816/
-
Treasury to help financial firms transition to quantum-resistant encryption
The government is concerned that hackers someday will be able to decrypt financial information and other secrets using code-breaking quantum computers. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/quantum-cryptography-treasury-task-force-financial-industry/828732/
-
AI-Powered Balonx Sistema PhaaS Harvests Credentials From Over 1,100 Banking Users
Mexico’s financial sector is facing an industrialized phishing Balonx Sistema, a Mexico-focused Phishing-as-a-Service (PhaaS) platform that has harvested credentials and financial data from more than 1,100 banking users since at least October 2025. The service targets over 20 Mexican financial institutions and combines live phishing, Android malware, and AI-driven voice fraud in one subscription-based operation.…
-
Banks Face the Penalty But Scammers Exploit the Gaps
Australian Scam Rules Impose Tough Penalties But Leave Critical Players Unregulated Australia’s new Scams Prevention Framework promises shared responsibility for scam prevention. But gaps in coverage could leave banks exposed and victims asking who ultimately reimburses the for their fraud losses. The rules take effect in March 2027. First seen on govinfosecurity.com Jump to article:…
-
US Treasury sets up quantum readiness unit
The US Treasury has established a quantum readiness taskforce to help financial services institutions through the transition to post-quantum cryptography. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366649693/US-Treasury-sets-up-quantum-readiness-unit
-
Employee benefits platform Paylogix says hackers stole financial and health data
The benefits management firm Paylogix told regulators that hackers stole sensitive information on tens of thousands of people from its systems. First seen on therecord.media Jump to article: therecord.media/paylogix-cyberattack-akira-ransomware
-
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an “unprecedented, whole-of-government, economic campaign” against the nation and its enablers.”We are launching an economic onslaught against Iran’s financial connections around the globe. Our objective is to sever every economic lifeline that sustains this tyrannical…
-
ToxicPanda 2.0 Blocks Google Play as Android Malware Targets 349 Financial Apps
ToxicPanda 2.0 now targets 349 financial apps across 16 countries while abusing VPN, Accessibility and Android debugging features for deeper control. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-toxicpanda-2-android-malware-349-financial-apps/
-
Interpol targets Black Axe’s illicit financial web in latest international sting
The multi-country sting targeted Black Axe financial networks, seizing millions in assets and uncovering Crime-as-a-Service infrastructure across four continents. First seen on cyberscoop.com Jump to article: cyberscoop.com/interpol-operation-jackal-iv-black-axe-arrests/
-
ZeroTokens Phishing Platform Steers Attacks in Real Time
ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/
-
Why Financial Services Is the Canary in the Code Mine
<div cla Organizations have long known that attackers publish malicious packages to public open source registries. The more consequential question is if those packages are actually reaching enterprise development environments. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/why-financial-services-is-the-canary-in-the-code-mine/
-
Australian Regs Make Scam Victims Prove Lapses by Banks
Fraud Expert Ken Palla on Why It’s So Hard to Show a Bank’s Controls Have Failed. Australia ties scam reimbursement to whether banks, telecoms and digital platforms have met their obligations for anti-fraud controls. Fraud expert Ken Palla says many of the roughly 30 required controls are hard to define, making compliance and victim reimbursement…
-
Australian Regs Make Scam Victims Prove Lapses by Banks
Fraud Expert Ken Palla on Why It’s So Hard to Show a Bank’s Controls Have Failed. Australia ties scam reimbursement to whether banks, telecoms and digital platforms have met their obligations for anti-fraud controls. Fraud expert Ken Palla says many of the roughly 30 required controls are hard to define, making compliance and victim reimbursement…
-
ToxicPanda 2.0 Targets 349 Financial Apps and Steals Android Lock Credentials
ToxicPanda 2.0 is going after Android users in 16 countries, stealing banking and unlock credentials while taking control of devices through Wireless Debugging. First seen on hackread.com Jump to article: hackread.com/toxicpanda-2-0-app-steals-android-lock-credentials/
-
ToxicPanda Banking Trojan Matures into Enterprise Threat
The latest version of the Android malware has new features that expand its global reach and put more than users’ financial applications at risk. First seen on darkreading.com Jump to article: www.darkreading.com/mobile-security/toxicpanda-banking-trojan-matures-enterprise-threat
-
Gunra ransomware: what you need to know
The ransomware gang Gunra has been creating havoc – exploiting unpatched VPNs and firewalls to steal data, encrypt systems, and extort victims across healthcare, finance, manufacturing, and more. First seen on fortra.com Jump to article: www.fortra.com/blog/gunra-ransomware-what-you-need-know
-
Google and Bing Search Results Used to Deliver Hidden Banking Phishing Pages
Threat actors are increasingly using Google and Bing as phishing delivery channels, employing a cloaking technique that presents harmless pages to security scanners while serving credential-harvesting banking portals to genuine search users. The campaigns target users of major financial institutions and combine search-engine optimization abuse, recently registered lookalike domains, and referral-aware payload delivery to extend…
-
Fake bank websites play dead to evade security scanners
A phishing method, named Chameleon SEO Poisoning, that uses manipulated search results and cloaked fake banking websites to steal credentials while evading security scanners … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/24/chameleon-seo-poisoning-fake-banking-websites-phishing/
-
Phishing-Kit klont PayPal und Apple: ‘JWR” stiehlt Daten live beim Tippen
Das Phishing-Kit JWR klont Seiten von PayPal und Apple. Es überträgt Eingaben wie Kreditkarten und Passwörter live an Angreifer. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/phishing-kit-klont-paypal
-
US Bank investigates LockBit ransomware claims of data breach
First seen on scworld.com Jump to article: www.scworld.com/brief/us-bank-investigates-lockbit-ransomware-claims-of-data-breach
-
ISO 42001 AI Certification Audits by Lazarus Alliance Experts
Tags: ai, compliance, control, defense, finance, framework, governance, healthcare, lazarus, nist, risk, serviceIn 2026, forward-thinking organizations recognize that ISO 42001 certification transcends checkbox compliance, emerging as the strategic convergence point where AI governance meets rigorous multi-framework risk management. Lazarus Alliance experts observe that AI systems now underpin critical operations across defense, healthcare, and financial services, demanding controls that simultaneously satisfy ISO 42001, NIST 800-53, CMMC, and FedRAMP”¦…
-
ToxicPanda 2.0 Gets a Major Upgrade, Expanding Attacks Across 16 Countries
ToxicPanda 2.0 targets 349 financial apps and abuses Android Wireless Debugging to gain deeper device access and steal banking credentials. ToxicPanda used to be a Europe-focused nuisance targeting a manageable list of banks. That version is gone. Zimperium’s zLabs team just documented ToxicPanda 2.0, and the numbers alone tell the story: 349 targeted financial institutions…