Clearance Incident Response. Free through May 1, 2027, so you have time to patch.Estimate your Blast Radius in 60 secondsEstimate

aviatrix logoAviatrix
Under Active Attack
Industry Category

Financial Services

Breach intelligence, attack campaigns, and threat reports targeting the Financial Services sector.

4893 threat reports
Page 54 of 408
Explore Other Sectors
AccountingAerospaceAerospace/AviationAgricultureAirlines/AviationAnimationApparel/FashionArchitecture/PlanningArtificial IntelligenceArtificial Intelligence/Machine LearningArts/CraftsAutomotiveAviation/AerospaceBanking/MortgageBiotechnology/GreentechBlockchain/CryptocurrencyBroadcast MediaBroadcasting MediaBroadcasting/MediaBuilding MaterialsBusiness Supplies/EquipmentCapital Markets/Hedge Fund/Private EquityChemicalChemicalsCivic/Social OrganizationCivil EngineeringCloud ComputingCloud Computing/SaaSCloud Native Security Fabric (CNSF)Cloud ServicesCommercial FacilitiesCommercial Real EstateComputer GamesComputer HardwareComputer NetworkingComputer Software/EngineeringComputer/Network SecurityConstructionConsultingConsumer ElectronicsConsumer GoodsConsumer ServicesCosmeticsCosmeticsCritical ManufacturingCryptocurrenciesCryptocurrencyCustomer ServicesCybersecurityDairyDating/Personal ServicesDating/Social PlatformsDefense/SpaceDesignE-LearningEducation ManagementElectrical/Electronic ManufacturingEmergency ServicesEnergyEnergy/Oil/Solar/GreentechEntertainment/Movie ProductionEnvironmental ServicesEvents ServicesExecutive OfficeFacilities ServicesFarmingFashion/ApparelFinancial ServicesFine ArtFisheryFood ProductionFood/BeveragesFortune 500 companiesFranchisingFundraisingGambling/CasinosGamingGaming/CasinosGovernment AdministrationGovernment FacilitiesGovernment RelationsGraphic Design/Web DesignHealth Care / Life SciencesHealthcareHigher Education/AcadamiaHospitalityHospitalsHuman Resources/HRImport/ExportIndividual/Family ServicesIndustrial AutomationInformation ServicesInformation Technology/ITInsuranceInternational AffairsInternational Trade/DevelopmentInternetInvestment Banking/VentureInvestment Management/Hedge Fund/Private EquityJudicialJudiciaryLaw EnforcementLaw Practice/Law FirmsLegal ServicesLegislative OfficeLeisure/TravelLogistics/ProcurementLuxury Goods/JewelryMachineryManagement ConsultingManufacturingMaritimeMarket ResearchMarketing/Advertising/SalesMechanical or Industrial EngineeringMedia ProductionMedical EquipmentMedical PracticeMilitary IndustryMining/MetalsMobileMuseums/InstitutionsMusicNewspapers/JournalismNon-Profit/VolunteeringOil/Energy/Solar/GreentechOnline PublishingOther IndustryOutsourcing/OffshoringPackage/Freight DeliveryParkingPharmaceuticalsPhilanthropyPhotographyPlasticsPolitical OrganizationPrimary/Secondary EducationProfessional ServicesProfessional TrainingPublic Relations/PRPublic SafetyPublishing IndustryRailroad ManufactureReal Estate/MortgageRecreational Facilities/ServicesReligious InstitutionsRenewables/EnvironmentResearch IndustryRestaurantsRetail IndustryRoboticsRural HealthcareSecurity/InvestigationsSemiconductorsShipbuildingSocial Media/InternetSporting GoodsSportsStaffing/RecruitingSupermarketsTechnologyTechnology/ITTelecommunicationsThink TanksToys and GamesTransportationTravel/TourismTrucking/FreightUtilitiesVenture Capital/VCWarehousingWater and Waste ManagementWater and WastewaterWater and Wastewater SystemsWater and Wastewater TreatmentWater TreatmentWater, Waste, Steam, and Air Conditioning ServicesWater/Waste ManagementWater/WastewaterWater/Wastewater ManagementWater/Wastewater/UtilitiesWholesaleWine/SpiritsWirelessWriting/Editing

Financial Services Threat Reports

Showing 637–648 / 4893 reports
Four Linux Kernel Flaws Enable Root Access: The AI-Assisted Vulnerability Era Begins
Four Linux Kernel Flaws Enable Root Access: The AI-Assisted Vulnerability Era Begins
Information Technology/IT1 month ago

Four Linux Kernel Flaws Enable Root Access: The AI-Assisted Vulnerability Era Begins

In September 2026, security researcher Asim Manizada disclosed four Linux kernel vulnerabilities that enable local privilege escalation to root access. The flaws, dubbed DirtyAH6, TUNderflow, PPPoEject, and DiagSpill, affect various networking components and were discovered using AI-assisted vulnerability research techniques. While kernel maintainers have patched all vulnerabilities, the public release of working exploit code significantly raises the risk for systems running outdated kernels, particularly in multi-user environments where attackers seek to escalate from limited user accounts to full administrative control. This disclosure represents a concerning trend of AI-accelerated vulnerability discovery in critical infrastructure components. As threat actors increasingly adopt similar AI-assisted techniques for offensive purposes, the time between vulnerability discovery and exploitation continues to shrink, demanding faster patch deployment cycles and enhanced kernel hardening strategies across enterprise environments.

Medium impact

Kill Chain

ICInitial Compromise(medium)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(low)
Read report
OAuth Consent Abuse: The SaaS Security Threat That MFA Can't Stop
OAuth Consent Abuse: The SaaS Security Threat That MFA Can't Stop
Computer Software/Engineering1 month ago

OAuth Consent Abuse: The SaaS Security Threat That MFA Can't Stop

OAuth consent abuse represents a growing threat vector where attackers bypass multifactor authentication by exploiting legitimate authorization flows in SaaS and cloud environments. Threat actors send convincing links that lead users to real OAuth authorization screens, requesting permissions for seemingly harmless applications like productivity connectors or reporting tools. Once users approve these requests, attackers gain persistent API access to email systems, file repositories, source code, and business platforms without needing passwords or deploying malware. The attack leverages trusted domains and legitimate OAuth processes, making it difficult for traditional security tools to detect malicious activity occurring through approved APIs. This attack method is particularly relevant now as organizations increasingly rely on SaaS platforms and cloud-based workflows, creating more opportunities for OAuth-based persistence. The technique highlights critical gaps in authorization governance, where security teams focus heavily on authentication controls like MFA while overlooking post-login consent decisions that can grant extensive third-party access to enterprise data.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(medium)
Read report
First Documented AI Agent Cyberattack Targets Spanish Organization in 2026
First Documented AI Agent Cyberattack Targets Spanish Organization in 2026
Computer Software/Engineering1 month ago

First Documented AI Agent Cyberattack Targets Spanish Organization in 2026

In September 2026, a Spanish organization reported to Spain's Data Protection Agency (AEPD) that an attacker used an autonomous AI agent powered by a well-known language model to breach corporate personal data stores. The AI system discovered and exploited loose credentials and an enterprise application vulnerability, enabling the modification of personal data records and unauthorized access to corporate invoices. This represents one of the first documented cases of an agentic AI conducting an end-to-end cyberattack with minimal human oversight, demonstrating the AI's ability to chain vulnerabilities and accelerate attack timelines. This incident marks a paradigm shift in cybersecurity threats, as predicted by Spain's National Cryptologic Center earlier in 2026. The use of autonomous AI agents in cyberattacks is rapidly becoming mainstream, fundamentally changing the threat landscape by enabling continuous, machine-speed reconnaissance and exploitation without traditional human-paced decision points.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(high)
Read report
Critical Docker Sandboxes Vulnerability Exposes AI Development Environments to Host Escape Attacks
Critical Docker Sandboxes Vulnerability Exposes AI Development Environments to Host Escape Attacks
Computer Software/Engineering1 month ago

Critical Docker Sandboxes Vulnerability Exposes AI Development Environments to Host Escape Attacks

In September 2026, Docker disclosed two critical vulnerabilities in Docker Sandboxes affecting macOS systems. CVE-2026-77179 (CVSS 9.4) allowed malicious code running inside AI coding agent virtual machines to escape sandbox restrictions and access or modify files anywhere on the host system with VMM user privileges. The flaw exploited a symlink-following vulnerability in the virtio-fs host server component. A second vulnerability, CVE-2026-79994 (CVSS 8.7), enabled unauthorized access to Unix domain sockets outside the authorized workspace. Both flaws were patched in version 0.42.0 released September 7, 2026. This incident highlights the growing security risks in AI development environments as organizations increasingly adopt AI coding agents and automated development tools. The vulnerabilities expose critical gaps in container isolation and demonstrate how AI agents can be weaponized through prompt injection attacks to compromise host systems.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(medium)
Read report
September 2026: When AI Became Both Weapon and Target in Massive Multi-Vector Campaign
September 2026: When AI Became Both Weapon and Target in Massive Multi-Vector Campaign
Financial Services1 month ago

September 2026: When AI Became Both Weapon and Target in Massive Multi-Vector Campaign

September 2026 witnessed an unprecedented surge in multi-vector cyberattacks, with threat actors exploiting everything from AI agent vulnerabilities to traditional infrastructure weaknesses. Notable incidents included the CL-CRI-1171 pay-per-install operation distributing malware through YouTube channels, large-scale attacks on exposed LocalAI instances compromising 230 systems including Thai military infrastructure, and the emergence of AI agents capable of rewriting their own models mid-task. Additional threats ranged from insider SIM swap operations netting $600,000 in losses to new ransomware families like Settra claiming 70 victims globally. The campaign demonstrates how attackers are successfully combining traditional attack vectors with emerging AI-powered techniques to maximize impact across diverse targets. This surge reflects the growing sophistication of cybercriminal ecosystems that are rapidly adapting to exploit both legacy vulnerabilities and cutting-edge AI technologies, creating a perfect storm of traditional and next-generation threats.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(high)
IImpact(medium)
Read report
Critical Check Point Management Flaw: CVE-2026-91843 Enables Root Access Without Authentication
Critical Check Point Management Flaw: CVE-2026-91843 Enables Root Access Without Authentication
Banking/Mortgage1 month ago

Critical Check Point Management Flaw: CVE-2026-91843 Enables Root Access Without Authentication

In September 2026, Check Point disclosed CVE-2026-91843, a critical stack overflow vulnerability in Security Management and Log Servers that allows unauthenticated attackers to execute code as root remotely. The flaw, rated 9.8 on the CVSS scale, affects the login process before authentication and is triggered by overly long usernames in login requests. Check Point released a LivePatch fix and reported no evidence of active exploitation, though the vulnerability affects multiple product versions across R82.10, R82, R81.20, R81.10, and older end-of-support branches. This represents the fifth critical management server vulnerability disclosed by Check Point since July 2026. This incident highlights the accelerating trend of critical infrastructure vulnerabilities targeting network security management platforms, coinciding with increased regulatory scrutiny and the urgent need for organizations to secure their security infrastructure itself as attackers increasingly target the tools meant to protect enterprise networks.

Critical impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(medium)
Read report
RatHat Android Malware: AI-Powered Threat Achieves Persistent Shell Access
RatHat Android Malware: AI-Powered Threat Achieves Persistent Shell Access
Banking/Mortgage1 month ago

RatHat Android Malware: AI-Powered Threat Achieves Persistent Shell Access

In September 2026, cybersecurity researchers identified RatHat, a sophisticated Android malware operated by China-based threat actors that leverages artificial intelligence for device navigation and control. The malware spreads through smishing campaigns and malvertising, using multiple anti-analysis techniques to evade detection. Once installed, RatHat abuses Android's Accessibility services to enable ADB debugging, allowing attackers to maintain shell-level access even after the malicious app is uninstalled. The malware features overlay attacks for credential theft, screen recording, SMS interception, and communicates with generative AI systems to automate device interactions and navigation. This incident highlights the evolving sophistication of mobile threats, particularly the integration of AI-powered automation in malware operations and the abuse of legitimate Android debugging features for persistent access. As mobile devices become primary targets for state-sponsored actors, organizations face increased risks from advanced persistent threats that can maintain access beyond traditional app-based security controls.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(high)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
WeaselBiscuit Malware: How North Korean Hackers Weaponized 13 npm Packages
WeaselBiscuit Malware: How North Korean Hackers Weaponized 13 npm Packages
Computer Software/Engineering1 month ago

WeaselBiscuit Malware: How North Korean Hackers Weaponized 13 npm Packages

In September 2026, cybersecurity researchers discovered WeaselBiscuit, a new JavaScript stealer distributed through 13 malicious npm packages targeting software developers. The malware, attributed to North Korean threat actors behind the Contagious Interview campaign, represents a streamlined variant of the BeaverTail and OtterCookie families. Upon npm import, WeaselBiscuit executes in-memory, harvests Chrome extension storage data across multiple platforms, and can log clipboard contents and keystrokes on Windows systems. The attack demonstrates the ongoing evolution of DPRK supply chain attacks targeting the developer ecosystem. This incident highlights the increasing sophistication of supply chain attacks targeting open-source repositories, particularly as threat actors refine their tooling to evade detection while maintaining core data theft capabilities.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(medium)
LMLateral Movement(low)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
Critical Linux Kernel Vulnerabilities Added to CISA KEV Catalog
Critical Linux Kernel Vulnerabilities Added to CISA KEV Catalog
Government Administration1 month ago

Critical Linux Kernel Vulnerabilities Added to CISA KEV Catalog

CISA has added two critical Linux kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog in September 2026, following evidence of active exploitation in the wild. CVE-2025-39964, a race condition vulnerability, and CVE-2026-53266, an out-of-bounds write vulnerability, both target the Linux kernel and can grant attackers total system control post-exploitation. These additions reinforce the agency's Binding Operational Directive (BOD) 26-04, which mandates federal agencies prioritize rapid remediation of high-risk vulnerabilities on publicly exposed assets that could lead to complete system compromise. The identification of these actively exploited kernel vulnerabilities highlights the ongoing evolution of threat actor tactics targeting foundational infrastructure components. As organizations increasingly adopt cloud-native and hybrid architectures, kernel-level vulnerabilities represent critical attack surfaces that can bypass traditional security controls and enable privilege escalation across entire computing environments.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(low)
Read report
PhantomRaven: The AI-Generated Malware Infiltrating Developer Ecosystems
PhantomRaven: The AI-Generated Malware Infiltrating Developer Ecosystems
Computer Software/Engineering1 month ago

PhantomRaven: The AI-Generated Malware Infiltrating Developer Ecosystems

A financially motivated threat actor has been distributing PhantomRaven, a JavaScript-based information stealer, through malicious npm packages since November 2022. The attacker used slopsquatting and typosquatting techniques to upload over 100 malicious packages to the npm registry, targeting developers' authentication tokens, CI/CD secrets, and GitHub credentials. CrowdStrike analysis indicates the malware was likely generated using large language models, evidenced by verbose comments and placeholder code patterns. The threat actor claims to be a bug bounty hunter and uses stolen credentials to identify vulnerabilities for legitimate disclosure programs rather than selling data on criminal marketplaces. This incident highlights the growing trend of threat actors leveraging AI tools to accelerate malware development and the increasing sophistication of supply chain attacks targeting developer ecosystems. The use of remote dynamic dependencies to evade security detection represents an evolution in package-based attack methodologies.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
Plugin4Shell Exposes Critical Supply Chain Risks in AI Coding Agents
Plugin4Shell Exposes Critical Supply Chain Risks in AI Coding Agents
Computer Software/Engineering1 month ago

Plugin4Shell Exposes Critical Supply Chain Risks in AI Coding Agents

In September 2026, security firm Air Security disclosed Plugin4Shell, a supply chain vulnerability affecting four major AI coding agents including Claude Code, OpenAI Codex, GitHub Copilot, and Google Gemini CLI. The flaw allows repository owners to swap legitimate plugin code with malicious versions even when agents have locked plugins to specific reviewed commit hashes. Attackers exploit this by creating branch names that mimic commit hashes on platforms like Bitbucket, causing agents to install different code while reporting the correct locked version. Since plugins run with the same privileges as users, malicious code can access files, credentials, and connected systems. Anthropic and OpenAI have patched their agents, while GitHub Copilot remains unpatched and Google will not fix the retiring Gemini CLI. This incident highlights the growing security challenges in AI development toolchains as organizations increasingly rely on AI coding assistants with plugin ecosystems, making supply chain integrity critical for protecting sensitive development environments and intellectual property.

Medium impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(medium)
EExfiltration(medium)
IImpact(low)
Read report
Abandoned CDN Domain Hijack Exposes Supply Chain Blind Spot in Thousands of Websites
Abandoned CDN Domain Hijack Exposes Supply Chain Blind Spot in Thousands of Websites
E-Learning1 month ago

Abandoned CDN Domain Hijack Exposes Supply Chain Blind Spot in Thousands of Websites

In July 2025, an abandoned Content Delivery Network (CDN) domain was re-registered by an unknown actor, creating a massive supply chain vulnerability affecting thousands of websites. The original CDN service had been discontinued years earlier, but its domain was allowed to expire while thousands of sites maintained hardcoded references to resources hosted under that domain. The new domain owner gained wildcard DNS control, enabling them to serve arbitrary content to any website still calling the abandoned hostnames. This incident mirrors the June 2024 polyfill.io compromise, where over 110,000 websites were affected when that JavaScript library domain changed ownership and began serving malicious redirects to mobile visitors. This incident highlights the growing threat of supply chain attacks targeting client-side dependencies and third-party resources. As organizations increasingly rely on external CDNs and JavaScript libraries, abandoned domains represent a significant blind spot in traditional security scanning and dependency management approaches.

High impact

Kill Chain

ICInitial Compromise(high)
PEPrivilege Escalation(high)
LMLateral Movement(medium)
C&CCommand & Control(high)
EExfiltration(high)
IImpact(medium)
Read report
[ INCIDENT RESPONSE // UNDER ATTACK? ]

Stop Active Cloud Data Exfiltration

Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.

Under Attack

Looking for threats in a different sector?

Browse All Threat Reports