A live, filtered feed drawn from regulators and industry press. Every headline is on-topic: business email compromise, wire and ACH fraud, check fraud, AML, banking risk, and consumer scams.
The "FrostyNeighbor" advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives.
The Federal Trade Commission’s (FTC) battle against impersonation scams has included the removal of websites that impersonated the FTC itself, the agency said in a Thursday (Oct. 29) press release. The FTC sent letters to domain registrars and other website pr
Prediction market firm Polymarket took its international exchange offline briefly on Thursday (Oct. 29) as it dealt with an issue related to a third-party provider, the company said in a post on X. “We’ve identified [and] fixed an issue impacting our internati
Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.
Researchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.
Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.
Mail bombing is getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.
Threat actors don't need to rely on malware to breach organizations anymore. They're simply calling help desks and politely asking for access, with a little help from artificial intelligence.
Fixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself.
One campaign targets 105 sites using open-weight models; in another, public models gained full domain control for $12. Cyber-defense will have to change.
The region is demonstrating what happens when exploits accelerate but assurance does not.
Rising AI, social engineering, and cloud risks are pushing carriers beyond risk transfer and deeper into cybersecurity itself.
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the unseen information comes to light.
Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilient communities.
When Bank of America released third-quarter financials on Oct. 14, shareholders took note of a $1.2 billion non-tax-deductible blow to earnings. The anti-money laundering , or AML, and sanctions penalty shaved 17 cents off its per-share net income. But the fin
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group
The United Kingdom has issued economic sanctions against Cryptomus , a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested an executive at a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of ag
