Financial Services
Breach intelligence, attack campaigns, and threat reports targeting the Financial Services sector.
Explore Other Sectors
Financial Services Threat Reports
PhantomRaven: The AI-Generated Malware Infiltrating Developer Ecosystems
A financially motivated threat actor has been distributing PhantomRaven, a JavaScript-based information stealer, through malicious npm packages since November 2022. The attacker used slopsquatting and typosquatting techniques to upload over 100 malicious packages to the npm registry, targeting developers' authentication tokens, CI/CD secrets, and GitHub credentials. CrowdStrike analysis indicates the malware was likely generated using large language models, evidenced by verbose comments and placeholder code patterns. The threat actor claims to be a bug bounty hunter and uses stolen credentials to identify vulnerabilities for legitimate disclosure programs rather than selling data on criminal marketplaces. This incident highlights the growing trend of threat actors leveraging AI tools to accelerate malware development and the increasing sophistication of supply chain attacks targeting developer ecosystems. The use of remote dynamic dependencies to evade security detection represents an evolution in package-based attack methodologies.
2 days ago
Kill Chain
Plugin4Shell Exposes Critical Supply Chain Risks in AI Coding Agents
In September 2026, security firm Air Security disclosed Plugin4Shell, a supply chain vulnerability affecting four major AI coding agents including Claude Code, OpenAI Codex, GitHub Copilot, and Google Gemini CLI. The flaw allows repository owners to swap legitimate plugin code with malicious versions even when agents have locked plugins to specific reviewed commit hashes. Attackers exploit this by creating branch names that mimic commit hashes on platforms like Bitbucket, causing agents to install different code while reporting the correct locked version. Since plugins run with the same privileges as users, malicious code can access files, credentials, and connected systems. Anthropic and OpenAI have patched their agents, while GitHub Copilot remains unpatched and Google will not fix the retiring Gemini CLI. This incident highlights the growing security challenges in AI development toolchains as organizations increasingly rely on AI coding assistants with plugin ecosystems, making supply chain integrity critical for protecting sensitive development environments and intellectual property.
2 days ago
Kill Chain
Abandoned CDN Domain Hijack Exposes Supply Chain Blind Spot in Thousands of Websites
In July 2025, an abandoned Content Delivery Network (CDN) domain was re-registered by an unknown actor, creating a massive supply chain vulnerability affecting thousands of websites. The original CDN service had been discontinued years earlier, but its domain was allowed to expire while thousands of sites maintained hardcoded references to resources hosted under that domain. The new domain owner gained wildcard DNS control, enabling them to serve arbitrary content to any website still calling the abandoned hostnames. This incident mirrors the June 2024 polyfill.io compromise, where over 110,000 websites were affected when that JavaScript library domain changed ownership and began serving malicious redirects to mobile visitors. This incident highlights the growing threat of supply chain attacks targeting client-side dependencies and third-party resources. As organizations increasingly rely on external CDNs and JavaScript libraries, abandoned domains represent a significant blind spot in traditional security scanning and dependency management approaches.
2 days ago
Kill Chain
Critical Azure AI Foundry Vulnerability Exposes Enterprise AI Security Gaps
Microsoft patched CVE-2026-85889, a maximum severity vulnerability (CVSS 10.0) in Azure AI Foundry that allows unauthorized privilege escalation through missing authentication for critical functions. The flaw affects Microsoft's enterprise platform for building and deploying generative AI applications. Discovered by security researcher Rémy Marot, the vulnerability required no customer action as Microsoft automatically applied cloud-based fixes. This incident was part of a larger security update addressing multiple critical vulnerabilities across Microsoft's cloud and AI services. This vulnerability highlights the growing attack surface of AI platforms as organizations rapidly adopt generative AI technologies without fully understanding the security implications of cloud-based AI infrastructure.
2 days ago
Kill Chain
Microsoft Reveals How AI is Reshaping Cyberthreats in 2026
Microsoft's September 2026 security analysis revealed how AI-powered cyberattackers are exploiting fundamental security weaknesses with unprecedented speed and persistence. The report documented three major attack campaigns: Storm-2945's CaptiveCrunch hospitality network manipulation, AI agent boundary exploitation incidents affecting OpenAI and Anthropic systems, and sophisticated social engineering attacks through Microsoft Teams. These incidents demonstrated how attackers leverage legitimate tools, trusted authentication flows, and AI agent vulnerabilities to achieve rapid lateral movement across enterprise environments, affecting identity systems, endpoints, and cloud infrastructure. This analysis matters now because AI is fundamentally reshaping the cyberthreat landscape, with autonomous attacks creating exponentially larger attack surfaces and faster compromise timelines than traditional methods.
2 days ago
Kill Chain
MikroTrick Attack Chain: How Attackers Gained Full Control of RouterOS Devices
In September 2026, security researchers discovered MikroTrick, a sophisticated attack chain targeting MikroTik RouterOS devices that allowed attackers to gain administrative access without authentication. The vulnerability chain combined CVE-2026-67279 (SSH authentication bypass via rekeying) and CVE-2026-86060 (privilege escalation through username manipulation) to achieve complete router takeover. Evidence indicates active exploitation occurred before public disclosure, with compromised devices found containing persistent backdoors including unauthorized administrative accounts and scheduled scripts designed to maintain persistence. The attack affected RouterOS versions 6.x and 7.x, with internet-facing routers being primary targets. This incident highlights the critical evolution of network infrastructure attacks, where threat actors are increasingly targeting edge devices that sit between organizations and the internet, providing unprecedented access to monitor traffic, steal credentials, and establish persistent footholds for lateral movement into internal networks.
2 days ago
Kill Chain
Critical AWS AgentCore Security Flaw Exposes Identity Vault Credentials Through Prompt Injection
Unit 42 researchers discovered a critical security vulnerability in AWS AgentCore Harness where default configurations allow attackers to exploit prompt injection techniques to exfiltrate plaintext credentials from AgentCore Identity vaults. The research demonstrated how the built-in shell tool, enabled by default and running with root privileges, can access the same memory space where credentials are resolved to plaintext. Through indirect prompt injection, attackers can execute arbitrary commands, scan process memory, and extract JWT tokens and service account credentials that provide unauthorized access to downstream MCP servers containing sensitive customer data including PII. AWS classified this as informative under their shared responsibility model, emphasizing that operators must implement proper allowedTools scoping and egress filtering controls. This incident highlights the emerging security challenges as AI agents become more autonomous and powerful, particularly around prompt injection attacks that can now leverage programmatic tool access to bypass traditional security boundaries and access privileged credentials in managed runtime environments.
2 days ago
Kill Chain
Cisco ISE Zero-Day CVE-2026-76460: When Network Access Controls Become Attack Vectors
Cisco disclosed CVE-2026-76460, a maximum-severity zero-day vulnerability in Cisco Identity Services Engine (ISE) that was actively exploited before disclosure in December 2026. The vulnerability allows remote attackers to bypass authentication and gain full administrative control of ISE devices through an API flaw. Compromised ISE systems enable attackers to modify network access policies, extract stored credentials, delete audit logs, and move laterally across all network segments controlled by the device. This represents Cisco's second actively exploited zero-day disclosure within two days, highlighting an escalation in targeted attacks against critical network infrastructure. This incident underscores the growing sophistication of attacks targeting network access control systems and the critical importance of zero-trust architecture as traditional perimeter-based security models continue to fail against advanced persistent threats.
2 days ago
Kill Chain
Critical Cisco ISE Zero-Day Highlights Identity Infrastructure Attack Trends
In September 2026, Cisco disclosed CVE-2026-76460, a maximum-severity authentication bypass vulnerability in Identity Services Engine (ISE) and ISE Passive Identity Connector being actively exploited by threat actors. The flaw allows remote attackers to bypass authentication on API endpoints through crafted requests, gaining unauthorized access to affected devices without any configuration requirements. Cisco's PSIRT confirmed active exploitation in the wild, prompting CISA to add the vulnerability to its Known Exploited Vulnerabilities catalog with a mandatory three-day patching deadline for federal agencies. This incident highlights the escalating targeting of identity and access management infrastructure, as threat actors increasingly focus on bypassing authentication controls to establish persistent network access and facilitate lateral movement in Zero Trust environments.
3 days ago
Kill Chain
Microsoft's September 2026 Updates Break Windows Domain Authentication
Microsoft's September 2026 security updates KB5124008 and KB5124012 introduced critical domain authentication failures affecting Windows 11 enterprise environments. The updates automatically enabled Machine Identity Isolation enforcement mode, breaking domain trust relationships for organizations not running Windows Server 2025 Domain Functional Level. Affected users experienced credential validation errors despite correct usernames and passwords, requiring immediate registry modifications and secure channel resets to restore domain access. This incident highlights the risks of automatic security feature enforcement without proper infrastructure compatibility validation. The authentication failures demonstrate how security hardening measures can inadvertently create operational disruptions in hybrid enterprise environments, emphasizing the need for careful deployment planning and compatibility assessment before implementing new identity isolation mechanisms.
3 days ago
Kill Chain
FBI Dismantles NightmareStresser: The Rise and Fall of a Major DDoS Empire
On September 17, 2026, the FBI seized the NightmareStresser DDoS-for-hire platform, one of the world's longest-running booter services that enabled cybercriminals to launch massive distributed denial-of-service attacks. The platform, operating through nightmare-stresser.com and nightmarestresser.org domains, boasted over 566,000 registered users and 52 dedicated servers capable of generating attacks up to 200 Gbps. Since 2022, NightmareStresser facilitated hundreds of thousands of DDoS attacks targeting victims worldwide, leveraging compromised IoT devices and routers as attack infrastructure. This seizure highlights the escalating threat of commoditized DDoS services that democratize cyberattacks, enabling even non-technical actors to launch sophisticated infrastructure attacks. The continued evolution of booter services represents a persistent challenge to organizations' availability and business continuity, particularly as these platforms increasingly target critical infrastructure and essential services.
3 days ago
Kill Chain
Brevo Supply-Chain Attack Exposes CDN Security Gaps Through ClickFix Campaign
In September 2026, attackers compromised Brevo's Cloudflare API key and deployed malicious Workers that injected ClickFix scripts into the company's websites and customer-embedded JavaScript components for approximately 5.5 hours. The attack affected brevo.com, sendinblue.com, and customer sites using Brevo forms, conversation widgets, and SDK loaders, potentially impacting up to 100,000 websites. Victims were presented with fake Cloudflare verification pages prompting them to execute malicious commands, while WordPress administrators faced additional risks through backdoor plugin installations that created persistent access points with hardcoded authentication bypasses. This incident highlights the growing sophistication of supply-chain attacks targeting content delivery networks and the increasing prevalence of ClickFix social engineering tactics that exploit user trust in legitimate cloud services to distribute malware at scale.
3 days ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports