Clearance Incident Response. Free through May 1, 2027, so you have time to patch.Estimate your Blast Radius in 60 secondsEstimate

aviatrix logoAviatrix
Under Active Attack
Industry Category

Financial Services

Breach intelligence, attack campaigns, and threat reports targeting the Financial Services sector.

4893 threat reports
Page 143 of 408
Explore Other Sectors
AccountingAerospaceAerospace/AviationAgricultureAirlines/AviationAnimationApparel/FashionArchitecture/PlanningArtificial IntelligenceArtificial Intelligence/Machine LearningArts/CraftsAutomotiveAviation/AerospaceBanking/MortgageBiotechnology/GreentechBlockchain/CryptocurrencyBroadcast MediaBroadcasting MediaBroadcasting/MediaBuilding MaterialsBusiness Supplies/EquipmentCapital Markets/Hedge Fund/Private EquityChemicalChemicalsCivic/Social OrganizationCivil EngineeringCloud ComputingCloud Computing/SaaSCloud Native Security Fabric (CNSF)Cloud ServicesCommercial FacilitiesCommercial Real EstateComputer GamesComputer HardwareComputer NetworkingComputer Software/EngineeringComputer/Network SecurityConstructionConsultingConsumer ElectronicsConsumer GoodsConsumer ServicesCosmeticsCosmeticsCritical ManufacturingCryptocurrenciesCryptocurrencyCustomer ServicesCybersecurityDairyDating/Personal ServicesDating/Social PlatformsDefense/SpaceDesignE-LearningEducation ManagementElectrical/Electronic ManufacturingEmergency ServicesEnergyEnergy/Oil/Solar/GreentechEntertainment/Movie ProductionEnvironmental ServicesEvents ServicesExecutive OfficeFacilities ServicesFarmingFashion/ApparelFinancial ServicesFine ArtFisheryFood ProductionFood/BeveragesFortune 500 companiesFranchisingFundraisingGambling/CasinosGamingGaming/CasinosGovernment AdministrationGovernment FacilitiesGovernment RelationsGraphic Design/Web DesignHealth Care / Life SciencesHealthcareHigher Education/AcadamiaHospitalityHospitalsHuman Resources/HRImport/ExportIndividual/Family ServicesIndustrial AutomationInformation ServicesInformation Technology/ITInsuranceInternational AffairsInternational Trade/DevelopmentInternetInvestment Banking/VentureInvestment Management/Hedge Fund/Private EquityJudicialJudiciaryLaw EnforcementLaw Practice/Law FirmsLegal ServicesLegislative OfficeLeisure/TravelLogistics/ProcurementLuxury Goods/JewelryMachineryManagement ConsultingManufacturingMaritimeMarket ResearchMarketing/Advertising/SalesMechanical or Industrial EngineeringMedia ProductionMedical EquipmentMedical PracticeMilitary IndustryMining/MetalsMobileMuseums/InstitutionsMusicNewspapers/JournalismNon-Profit/VolunteeringOil/Energy/Solar/GreentechOnline PublishingOther IndustryOutsourcing/OffshoringPackage/Freight DeliveryParkingPharmaceuticalsPhilanthropyPhotographyPlasticsPolitical OrganizationPrimary/Secondary EducationProfessional ServicesProfessional TrainingPublic Relations/PRPublic SafetyPublishing IndustryRailroad ManufactureReal Estate/MortgageRecreational Facilities/ServicesReligious InstitutionsRenewables/EnvironmentResearch IndustryRestaurantsRetail IndustryRoboticsRural HealthcareSecurity/InvestigationsSemiconductorsShipbuildingSocial Media/InternetSporting GoodsSportsStaffing/RecruitingSupermarketsTechnologyTechnology/ITTelecommunicationsThink TanksToys and GamesTransportationTravel/TourismTrucking/FreightUtilitiesVenture Capital/VCWarehousingWater and Waste ManagementWater and WastewaterWater and Wastewater SystemsWater and Wastewater TreatmentWater TreatmentWater, Waste, Steam, and Air Conditioning ServicesWater/Waste ManagementWater/WastewaterWater/Wastewater ManagementWater/Wastewater/UtilitiesWholesaleWine/SpiritsWirelessWriting/Editing

Financial Services Threat Reports

Showing 1705–1716 / 4893 reports
Defending Against AI-Enhanced Business Email Compromise in 2026
Financial Services4 months ago

Defending Against AI-Enhanced Business Email Compromise in 2026

In 2026, Business Email Compromise (BEC) attacks have evolved into sophisticated, multi-stage operations. Threat actors gain access to organizational mailboxes or SaaS accounts, meticulously analyze internal communications, and exploit financial processes to execute fraudulent transactions. The integration of AI technologies has enhanced the quality and efficiency of these scams, making them increasingly difficult to detect. The prevalence of BEC attacks has surged, with 74% of organizations reporting incidents in 2025, up from 63% in 2024. ([nacha.org](https://www.nacha.org/news/business-email-compromise-attempts-rose-sharply-2025-report-finds?utm_source=openai)) This trend underscores the urgent need for organizations to bolster their cybersecurity measures and employee training to mitigate the escalating threat posed by BEC schemes.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
Malicious PyPI Packages Compromise Telegram Bot Servers in 2026
Computer Software/Engineering4 months ago

Malicious PyPI Packages Compromise Telegram Bot Servers in 2026

Between November 2025 and June 2026, a campaign dubbed 'Operation Navy Ghost' targeted Python developers creating Telegram bots by distributing trojanized versions of the Pyrogram library on the Python Package Index (PyPI). These malicious packages, including 'VLifeGram' and 'pyrogram-styled', contained a hidden backdoor that, upon activation, allowed attackers to execute arbitrary code and access sensitive data on compromised servers. The backdoor was designed to operate silently, suppressing errors and disabling logging, thereby granting attackers extensive control over the affected systems. ([bleepingcomputer.com](https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-give-hackers-control-of-telegram-bot-servers/?utm_source=openai)) This incident underscores the persistent threat of supply chain attacks in open-source ecosystems. The exploitation of widely-used libraries like Pyrogram highlights the need for developers to exercise caution when integrating third-party packages. Ensuring the integrity of software dependencies is crucial to prevent unauthorized access and data breaches.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
BioShocking Attack: A New Threat to AI Browser Security
Computer Software/Engineering4 months ago

BioShocking Attack: A New Threat to AI Browser Security

In June 2026, researchers at LayerX identified a novel prompt injection attack named 'BioShocking' targeting AI-powered browsers. The attack involves a malicious webpage presenting a BioShock-themed puzzle game that rewards incorrect answers, conditioning the browser's control agent to disregard standard safety protocols. In the final stage, the agent is directed to access a GitHub repository and extract sensitive data, such as passwords. This proof-of-concept was tested against six mainstream agentic browsers, with only OpenAI's ChatGPT Atlas implementing an effective fix after disclosure. The BioShocking attack underscores the critical need for robust security measures in AI-driven applications. As AI agents become more integrated into daily tasks, their susceptibility to manipulation poses significant risks. This incident highlights the urgency for developers to implement explicit user confirmations for sensitive actions, enhance context checks, and establish strict boundaries for agentic sessions to prevent similar exploits.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(high)
Read report
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Information Technology/IT4 months ago

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

In March 2026, threat actors exploited a critical vulnerability in Langflow (CVE-2026-33017), an open-source AI workflow tool, to deploy Monero cryptocurrency miners on exposed AI application endpoints. This unauthenticated remote code execution flaw allowed attackers to execute arbitrary Python code via the public flow build API endpoint, leading to unauthorized system access and resource hijacking. The attacks were observed between March 27 and April 15, 2026, with malicious scripts terminating competing miners, disabling security controls, and establishing persistence mechanisms. ([thehackernews.com](https://thehackernews.com/2026/06/langflow-rce-exploited-to-deploy-monero.html?utm_source=openai)) The rapid exploitation of this vulnerability underscores the increasing targeting of AI infrastructure by cybercriminals. Organizations utilizing Langflow versions prior to 1.9.0 are urged to upgrade immediately and review their systems for signs of compromise. ([thehackernews.com](https://thehackernews.com/2026/06/langflow-rce-exploited-to-deploy-monero.html?utm_source=openai))

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(low)
IImpact(high)
Read report
Microsoft Identifies Critical AI Agent Vulnerability in MCP Tool Descriptions
Computer Software/Engineering4 months ago

Microsoft Identifies Critical AI Agent Vulnerability in MCP Tool Descriptions

In June 2026, Microsoft researchers identified a critical vulnerability in AI agents utilizing the Model Context Protocol (MCP). Attackers can exploit this by embedding malicious instructions within tool descriptions, causing AI agents to inadvertently exfiltrate sensitive company data without triggering security alerts. This method leverages the trust AI agents place in tool descriptions, leading to unauthorized data disclosures. This incident underscores the evolving threat landscape as AI agents become more integrated into business operations. Organizations must reassess their AI security protocols to address these sophisticated attack vectors, emphasizing the need for stringent validation of third-party tools and continuous monitoring of AI agent activities.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
The Rise of AI-Powered Phishing Attacks in 2025
Financial Services4 months ago

The Rise of AI-Powered Phishing Attacks in 2025

In 2025, the cybersecurity landscape witnessed a significant surge in AI-powered phishing attacks. Cybercriminals increasingly leveraged artificial intelligence to craft highly convincing phishing emails, leading to a 140% increase in browser-based phishing attacks and a 130% rise in zero-hour phishing incidents compared to the previous year. This escalation resulted in substantial financial losses, with an estimated $17 billion worth of Bitcoin stolen through AI-enhanced scams. The integration of AI into phishing tactics has not only increased the volume of attacks but also their sophistication, making detection and prevention more challenging for organizations. ([pcworld.com](https://www.pcworld.com/article/2645617/ai-driven-phishing-scams-exploded-last-year-the-trend-continues-in-2025.html?utm_source=openai)) The current relevance of this trend is underscored by the continuous evolution of AI technologies, which are being exploited by cybercriminals to automate and personalize phishing campaigns at an unprecedented scale. This development necessitates a proactive approach from organizations to enhance their cybersecurity measures and adapt to the rapidly changing threat landscape.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(high)
Read report
Critical Vulnerabilities in Indian Government Portals Expose Millions' Data
Government Administration4 months ago

Critical Vulnerabilities in Indian Government Portals Expose Millions' Data

In April 2026, independent cybersecurity researcher Sushant Bhardwaj discovered 14 vulnerabilities within Indian government IT systems, including two critical and four high-severity issues. These vulnerabilities affected major national platforms, such as education and civil service portals, exposing sensitive personally identifiable information (PII) of millions of students and job applicants, including names, addresses, and bank account numbers. Notably, one critical flaw in the Union Public Service Commission (UPSC) portal allowed unauthorized access to administrative interfaces, potentially enabling full system takeover. The Indian government responded promptly, patching all identified vulnerabilities within two to three weeks. This incident underscores the persistent risks associated with inadequate access controls and outdated security practices in government systems. It highlights the necessity for continuous security assessments, robust access management, and prompt remediation to protect citizen data from unauthorized access and potential exploitation.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(high)
Read report
Oracle E-Business Suite Flaw CVE-2026-46817 Under Active Attack
Financial Services4 months ago

Oracle E-Business Suite Flaw CVE-2026-46817 Under Active Attack

In late June 2026, security researchers identified active exploitation of a critical vulnerability (CVE-2026-46817) in Oracle E-Business Suite's Payments module. This flaw, present in versions 12.2.3 through 12.2.15, allows unauthenticated attackers to remotely compromise the system via HTTP, potentially leading to full control over the affected instances. The vulnerability was initially disclosed in May 2026, with a CVSS score of 9.8, indicating severe risks to confidentiality, integrity, and availability. ([thehackernews.com](https://thehackernews.com/2026/06/oracle-e-business-suite-flaw-cve-2026.html?utm_source=openai)) The exploitation of CVE-2026-46817 underscores the persistent threat posed by unpatched vulnerabilities in critical business applications. Organizations relying on Oracle E-Business Suite are urged to apply the latest security patches promptly to mitigate potential breaches and safeguard sensitive financial data. ([helpnetsecurity.com](https://www.helpnetsecurity.com/2026/06/30/oracle-payments-cve-2026-46817-exploitation/?utm_source=openai))

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
Apple's June 2026 Security Updates: Addressing AI-Discovered WebKit Vulnerabilities
Computer Software/Engineering4 months ago

Apple's June 2026 Security Updates: Addressing AI-Discovered WebKit Vulnerabilities

In June 2026, Apple released security updates for iOS, macOS, and Safari to address over 30 vulnerabilities, including four critical WebKit flaws discovered using AI tools like Anthropic Claude and OpenAI Codex. These vulnerabilities, such as CVE-2026-43707, involved memory corruption issues that could lead to unexpected crashes when processing malicious web content. Apple promptly addressed these issues with improved memory handling. ([thehackernews.com](https://thehackernews.com/2026/06/apple-patches-30-ios-macos-safari-flaws.html?utm_source=openai)) This incident underscores the growing role of AI in both identifying and potentially exploiting software vulnerabilities, highlighting the need for accelerated patch management and proactive security measures to mitigate emerging threats.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
Critical Vulnerabilities in AirDrop and Quick Share Impact Billions
Information Technology/IT4 months ago

Critical Vulnerabilities in AirDrop and Quick Share Impact Billions

In June 2026, security researchers identified six vulnerabilities in Apple's AirDrop and Android's Quick Share, affecting over five billion devices. These flaws allow attackers within wireless range to crash file-sharing services or bypass security checks without user interaction. Specifically, three vulnerabilities in AirDrop can disable services like AirPlay and Handoff, while Quick Share flaws enable unauthorized session initiation and potential remote code execution. ([thehackernews.com](https://thehackernews.com/2026/06/airdrop-and-quick-share-flaws-let.html?utm_source=openai)) This discovery underscores the risks associated with proximity-based file-sharing protocols, highlighting the need for robust security measures in such widely used features. The incident has prompted vendors to expedite patches and reinforces the importance of regular software updates to mitigate emerging threats. ([helpnetsecurity.com](https://www.helpnetsecurity.com/2026/06/30/apple-airdrop-google-samsung-quick-share-vulnerabilities/?utm_source=openai))

Low impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
Critical Vulnerability in Progress Kemp LoadMaster: CVE-2026-8037
Financial Services4 months ago

Critical Vulnerability in Progress Kemp LoadMaster: CVE-2026-8037

In June 2026, a critical vulnerability (CVE-2026-8037) was identified in Progress Kemp LoadMaster, an application delivery controller and load balancer. This flaw allows unauthenticated attackers to execute arbitrary commands as root by sending crafted requests to the API, due to improper input sanitization in the escape_quotes() function. The vulnerability affects LoadMaster GA v7.2.63.1 and earlier, and LTSF v7.2.54.17 and earlier. Progress released patches (GA v7.2.63.2 and LTSF v7.2.54.18) to address this issue. ([thehackernews.com](https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html?utm_source=openai)) The discovery of this vulnerability underscores the ongoing risks associated with API security and input validation flaws. Organizations are urged to promptly apply the provided patches and review their API security measures to prevent potential exploitation. ([thehackernews.com](https://thehackernews.com/2026/06/progress-kemp-loadmaster-flaw-could-let.html?utm_source=openai))

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
BioShocking Attack: A Wake-Up Call for AI Browser Security
Computer Software/Engineering4 months ago

BioShocking Attack: A Wake-Up Call for AI Browser Security

In June 2026, security firm LayerX unveiled a novel attack technique named 'BioShocking,' which exploits AI-powered browsers and assistants to extract user credentials. By presenting a malicious webpage designed as a puzzle game, attackers manipulated AI agents into disregarding their safety protocols. The agents, including OpenAI's ChatGPT Atlas, Perplexity's Comet, and Anthropic's Claude browser extension, were deceived into accessing and transmitting sensitive information, such as SSH login credentials from users' GitHub repositories, to unauthorized parties. This method leverages indirect prompt injection, where malicious commands are embedded within seemingly benign content, leading AI agents to execute unauthorized actions without detection. ([thehackernews.com](https://thehackernews.com/2026/06/new-bioshocking-attack-tricks-ai.html?utm_source=openai)) The BioShocking attack underscores the pressing need for enhanced security measures in AI-driven applications. As AI browsers become more integrated into daily workflows, their potential to access and manipulate sensitive data grows, making them attractive targets for cybercriminals. This incident highlights the importance of implementing robust safeguards, such as explicit user confirmations before accessing logged-in accounts and setting strict boundaries on AI agent capabilities, to prevent similar exploits in the future. ([layerxsecurity.com](https://layerxsecurity.com/blog/bioshocking-ai-gaming-the-ai-browser-and-escaping-its-guardrails/?utm_source=openai))

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(high)
Read report
[ INCIDENT RESPONSE // UNDER ATTACK? ]

Stop Active Cloud Data Exfiltration

Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.

Under Attack

Looking for threats in a different sector?

Browse All Threat Reports