✨ The Containment Era is here. Secure AI workloads before they breach. →The Containment Era is here. →The Containment Era is here. →Explore ✨
Financial Services
Breach intelligence, attack campaigns, and threat reports targeting the Financial Services sector.
Explore Other Sectors
Financial Services Threat Reports
Malicious SDKs on npm and PyPI Compromise Paysafe and Skrill Integrations
In July 2026, a coordinated supply-chain attack targeted developers integrating payment services by distributing at least 17 malicious packages on the npm and PyPI repositories. These packages masqueraded as legitimate SDKs for Paysafe, Skrill, and Neteller, aiming to steal sensitive credentials such as API keys, AWS keys, and GitHub tokens. The attackers employed typosquatting techniques, publishing packages with names closely resembling authentic ones, leading to unauthorized access and potential data breaches. This incident underscores the escalating threat of supply-chain attacks within open-source ecosystems. The attackers' ability to infiltrate multiple package managers simultaneously highlights the need for enhanced vigilance and security measures among developers and organizations to safeguard against such sophisticated threats.
2 weeks ago
Kill Chain
Understanding and Mitigating System Prompt Leakage in AI Applications
In July 2026, AWS Security highlighted the persistent issue of system prompt leakage in generative AI applications. System prompts, which guide the behavior of large language models (LLMs), often contain sensitive information such as role definitions, behavioral guidelines, and API responses. Threat actors can exploit vulnerabilities to extract these prompts, potentially exposing proprietary data and compromising application integrity. Despite various mitigation strategies, complete remediation remains elusive due to inherent limitations in current AI systems. This underscores the need for continuous vigilance and adaptive security measures in AI deployments. The increasing prevalence of system prompt leakage incidents, as noted in the 2025 OWASP LLM Top 10, reflects a broader trend of sophisticated attacks targeting AI systems. Organizations must prioritize robust security frameworks to safeguard against evolving threats in the AI landscape.
2 weeks ago
Kill Chain
Vidar Infostealer Exploits Malvertising to Target SMBs in 2026
In April 2026, a sophisticated malvertising campaign targeted consumers and small to midsize businesses (SMBs) globally by delivering the Vidar infostealer and XMRig cryptomining malware. Attackers lured victims with ads for cracked software, leading them to download password-protected archives that concealed a Go-based loader. This loader executed defense-evasion techniques, including an in-memory Antimalware Scan Interface (AMSI) bypass, before deploying Vidar to harvest browser credentials and XMRig to mine Monero cryptocurrency. The campaign utilized the Factory-v3 framework to generate unique binaries, complicating detection efforts. ([darkreading.com](https://www.darkreading.com/cyberattacks-data-breaches/vidar-infostealer-smb-malvertising-campaign?utm_source=openai)) This incident underscores the evolving tactics of financially motivated threat actors who combine multiple monetization strategies within a single infection. The use of malvertising, coupled with advanced evasion techniques, highlights the need for organizations to enhance their cybersecurity defenses against such multifaceted threats.
2 weeks ago
Kill Chain
Dialogflow CX 'Rogue Agent' Flaw: A Wake-Up Call for AI Security
In November 2025, Varonis researchers identified a critical vulnerability, termed 'Rogue Agent,' in Google Cloud Platform's Dialogflow CX AI platform. This flaw allowed attackers to exploit the Code Blocks feature by modifying a single permission—dialogflow.playbooks.update—on a Dialogflow agent. Such exploitation enabled the injection of persistent malicious code into the agents' pipeline, facilitating the silent exfiltration of conversations and the execution of large-scale phishing campaigns. Google addressed the issue with an initial patch in April 2026 and fully resolved it by June 2026, ensuring that all affected components were remediated. ([darkreading.com](https://www.darkreading.com/application-security/dialogflow-cx-rogue-agent-flaw-enabled-ai-chatbot-data-theft?utm_source=openai)) The 'Rogue Agent' vulnerability underscores the expanding attack surface introduced by integrating AI services into cloud platforms. It highlights the necessity for organizations to rigorously evaluate and secure their AI infrastructures, as attackers increasingly target these systems to access sensitive data and conduct sophisticated cyber operations. ([varonis.com](https://www.varonis.com/blog/rogue-agent-dialogflow-attack?utm_source=openai))
2 weeks ago
Kill Chain
CISA Highlights Active Exploitation of Critical Adobe, Joomla, and Langflow Vulnerabilities
In July 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation. These include CVE-2026-48282, a path traversal flaw in Adobe ColdFusion; CVE-2026-56290, an improper access control issue in Joomlack Page Builder; CVE-2026-55255, an authorization bypass in Langflow; and CVE-2026-48908, an unrestricted file upload vulnerability in JoomShaper SP Page Builder. Exploitation of these vulnerabilities could lead to arbitrary code execution and unauthorized access, posing significant risks to affected systems. The inclusion of these vulnerabilities in the KEV catalog underscores the urgency for organizations to apply available patches promptly. The active exploitation of these flaws highlights a trend of attackers rapidly leveraging newly disclosed vulnerabilities, emphasizing the need for vigilant vulnerability management and timely remediation strategies.
2 weeks ago
Kill Chain
Critical Adobe ColdFusion Vulnerability (CVE-2026-48282) Requires Immediate Attention
In June 2026, a critical path traversal vulnerability, identified as CVE-2026-48282, was discovered in Adobe ColdFusion versions 2025.9, 2023.20, and earlier. This flaw allows unauthenticated remote attackers to execute arbitrary code on affected servers without user interaction, potentially leading to full system compromise. The vulnerability arises from improper limitation of a pathname to a restricted directory, enabling attackers to access and manipulate files outside the intended directory structure. ([nvd.nist.gov](https://nvd.nist.gov/vuln/detail/CVE-2026-48282?utm_source=openai)) The inclusion of CVE-2026-48282 in CISA's Known Exploited Vulnerabilities Catalog underscores the urgency for organizations to address this issue promptly. Given the active exploitation in the wild, entities using vulnerable ColdFusion versions must prioritize patching to mitigate the risk of unauthorized access and potential data breaches. ([resecurity.com](https://www.resecurity.com/ar/blog/article/cve-2026-48282-adobe-coldfusion-rds-path-traversal-leading-to-rce?utm_source=openai))
2 weeks ago
Kill Chain
Critical Vulnerability in Siemens Mendix Studio Pro: CVE-2026-48192
In June 2026, Siemens disclosed a vulnerability (CVE-2026-48192) in Mendix Studio Pro versions 10.11 through 10.24 (prior to V10.24.21) and 11.0 through 11.11. The flaw arises from improper validation and sanitization of project files during the build pipeline, allowing attackers to execute arbitrary code if a user opens a specially crafted malicious project. This vulnerability could lead to unauthorized code execution within the user's context, potentially compromising developer workstations and downstream build artifacts. ([sentinelone.com](https://www.sentinelone.com/vulnerability-database/cve-2026-48192/?utm_source=openai)) The incident underscores the critical importance of validating and sanitizing project files in development environments. As low-code platforms like Mendix Studio Pro gain popularity, ensuring robust security measures against such vulnerabilities becomes imperative to protect development processes and prevent potential supply chain attacks.
2 weeks ago
Kill Chain
UAT-7810's Deployment of LONGLEASH Malware: A New Threat to Network Security
In July 2026, the Chinese advanced persistent threat (APT) group UAT-7810 enhanced its Operational Relay Box (ORB) network by deploying new malware variants, notably LONGLEASH, DOGLEASH, and JARLEASH. These tools target unpatched Ruckus wireless routers, exploiting vulnerabilities such as CVE-2020-22653, CVE-2020-22658, and CVE-2023-25717, to establish a robust infrastructure for subsequent cyber operations. The ORB network serves as a relay platform, facilitating attacks by other China-aligned threat actors, including UAT-5918, which has been implicated in cyber attacks against critical infrastructure in Taiwan since at least 2023. The development of these sophisticated malware tools underscores the evolving capabilities of UAT-7810 and the persistent threat posed to global network security. Organizations utilizing vulnerable networking devices are at heightened risk, emphasizing the need for proactive defense measures and timely patch management to mitigate potential intrusions.
2 weeks ago
Kill Chain
GitHub's 'Verified' Commits Vulnerable to Hash Malleability
In July 2026, researcher Jacob Ginesin identified a vulnerability in GitHub's commit verification process, revealing that signed Git commits can be altered to produce new hashes without invalidating their signatures. This flaw allows attackers to replicate commits with identical content, authorship, and timestamps, yet different hashes, while still displaying a 'Verified' status on GitHub. Consequently, systems relying on commit hashes for security measures, such as blocklists and provenance logs, are susceptible to evasion tactics. ([thehackernews.com](https://thehackernews.com/2026/07/github-verified-commits-can-be.html?utm_source=openai)) This discovery underscores the critical need for robust verification mechanisms in software development platforms. As supply chain attacks become more sophisticated, ensuring the integrity and authenticity of code commits is paramount to maintaining trust and security in open-source ecosystems.
2 weeks ago
Kill Chain
SCMBANKER Malware Targets Mexican Banks Using ClickFix Lures
In July 2026, a sophisticated cybercriminal operation targeted customers of Mexican financial institutions, including banks, fintech companies, payment processors, and cryptocurrency exchanges. The attackers employed a social engineering technique known as ClickFix, presenting victims with fake CAPTCHA verification pages that instructed them to execute a malicious command. This command installed a PowerShell-based toolkit named SCMBANKER, enabling the threat actors to monitor banking sessions, capture screenshots, manipulate clipboards, and deploy remote access tools for full system control. The campaign, identified by Elastic Security Labs as REF6045, demonstrated a high level of automation and adaptability, with evidence suggesting the use of large language models to develop the malware components. ([thehackernews.com](https://thehackernews.com/2026/07/scmbanker-malware-uses-clickfix-lures.html?utm_source=openai)) This incident underscores the evolving nature of cyber threats targeting the financial sector, particularly in Mexico. The use of AI-assisted malware development and advanced social engineering tactics like ClickFix highlights the need for continuous vigilance and adaptive security measures to protect sensitive financial data and maintain customer trust.
2 weeks ago
Kill Chain
EvilTokens Phishing Campaign: A 2026 Cybersecurity Wake-Up Call
In early 2026, the EvilTokens phishing-as-a-service (PhaaS) platform emerged, exploiting the OAuth 2.0 Device Authorization Grant to compromise Microsoft 365 accounts. This sophisticated campaign utilized AI to generate personalized phishing lures, leading to a 1,380% increase in device code phishing attacks between July–December 2025 and January–April 2026. Attackers bypassed multi-factor authentication (MFA) by redirecting legitimate authentication flows, granting them persistent access to corporate email, SharePoint, and OneDrive services. The campaign targeted hundreds of organizations daily, affecting sectors globally. ([huntress.com](https://www.huntress.com/resources/eviltokens-ai-powered-phishing-report?utm_source=openai)) The EvilTokens operation underscores a significant evolution in phishing tactics, leveraging AI to automate and personalize attacks at scale. This trend highlights the urgent need for organizations to reassess and strengthen their security postures, particularly concerning identity and access management, to mitigate the risks posed by increasingly sophisticated phishing campaigns. ([securityboulevard.com](https://securityboulevard.com/2026/07/eviltokens-campaign-reveals-device-code-phishing-ticks-up-1380-powered-by-ai/?utm_source=openai))
2 weeks ago
Kill Chain
HalluSquatting: Exploiting AI Coding Assistants to Deploy Botnet Malware
In July 2026, researchers identified a novel cyberattack technique termed 'HalluSquatting,' which exploits AI coding assistants' tendency to generate plausible but non-existent resource names. Attackers predict these hallucinated names, register them, and embed malicious code. When users prompt their AI assistants to fetch these resources, the assistants inadvertently execute the malicious code, potentially installing botnet malware on the user's machine. This method leverages AI hallucinations and prompt injections to compromise systems without direct user interaction. The emergence of HalluSquatting underscores the evolving threat landscape in AI-integrated development environments. As AI tools become more prevalent, attackers are increasingly targeting their inherent vulnerabilities. This incident highlights the urgent need for enhanced security measures in AI-driven tools to prevent exploitation through such sophisticated techniques.
2 weeks ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports