Identity & access · News & analysis
Microsoft 365 Token-Replay Cases Show Why Password Resets Leave Cleanup Unfinished
Huntress’s investigation connects stolen sessions with rogue devices, altered MFA methods and hidden mailbox rules.
NEWS · ALERTS · RESEARCH
Financial services
Original cybersecurity reporting and practical analysis, alongside headlines from trusted publications, agencies and researchers.
Original reporting & analysis
Industry & business · News & analysis
Mave’s $34 Million Launch Puts Investigation Evidence at the Center of the AI SOC Pitch
The startup promises to connect work across existing security tools. Buyers should test whether its conclusions remain inspectable when evidence is incomplete.
Identity & access · News & analysis
Netwrix Fixes Dashboard-Link Exposure in Identity Manager
The vendor describes a limited authorization flaw affecting certain configurations and says its SaaS environment was patched before disclosure.
Industry & business · News & analysis
Proofpoint’s Varonis Deal Puts Data Access at the Center of Its Next Chapter
The proposed $6.3 billion acquisition links two security portfolios, while customers face a longer timetable for concrete integration decisions.
Cybercrime & fraud · News & analysis
Veterans’ Benefits Fraud Plea Shows How Stolen Records Become Account Access
An October 20 guilty plea traces a chain from improperly copied personal information to financial and benefits-account theft.
Cybercrime & fraud · News & analysis
Phishing Infrastructure Market Turns Cloud Accounts Into Criminal Inventory
Microsoft’s latest investigation describes how illicit marketplaces connect account access, hosting and phishing tools.
Cloud security · News & analysis
SageMaker SDK Fix Leaves Teams With a Second Job: Checking Old Logs
AWS says failed Git operations can expose repository credentials in CloudWatch Logs, making credential review part of the response.
Industry & business · News & analysis
IonQ’s Elisity Deal Brings Network Access Policy Into Its Quantum Security Strategy
The proposed stock transaction connects two security priorities, while customers still need to distinguish current controls from a future combined roadmap.
Cybercrime & fraud · News & analysis
West Africa Scam Crackdown Produces 28 Arrests and Millions of Account Removals
A coordinated enforcement effort shows why account removals, seized evidence and recoverable funds must be measured separately.
Data breaches · News & analysis
Publica Supplier Breach Shows Why Data Exposure Needs Its Own Response Plan
Swiss authorities confirmed a leak involving a pension fund’s software supplier while investigators were still determining the affected data.
Cybercrime & fraud · News & analysis
Money-Laundering Guilty Plea Exposes the Business Behind Cyber Theft
The Your Mule Cashout case connects stolen business funds with a recruitment and transfer operation, underscoring the need to join technical response with payment controls.
Cloud security · News & analysis
AWS SPIRE Blueprint Makes Workload Identity an Operations Decision
New AWS guidance connects machine identity to managed infrastructure, raising practical questions about recovery, ownership and permission design.
Identity & access · News & analysis
The Passkey Gap Starts With the Credentials Employers Issue
An Okta and Yubico survey points to onboarding defaults and fragmented sign-in as obstacles to stronger authentication.
Policy & compliance · News & analysis
Europol’s Quantum Warning Starts With the Data Businesses Keep
Two new reports call for phased preparation while distinguishing future cryptographic risk from demonstrated attacks today.
Cloud security · News & analysis
AWS Schedules October 24 Test of Sovereign Cloud Independence
An October 24 independence exercise puts the difference between provider resilience and application resilience on the customer’s agenda.
Data breaches · News & analysis
MetaMask Incident Highlights the Difference Between Custody and Service Continuity
An infrastructure investigation and precautionary validator exits leave businesses with separate questions about asset access, operational recovery and provider updates.
Industry & business · News & analysis
SGS Takes Majority Stake in Prescient Security as Cyber Assurance Expands
The completed transaction brings cybersecurity assessment and compliance services into a larger testing and certification group, putting service continuity on buyers’ agenda.
Cybercrime & fraud · News & analysis
ATM Jackpotting Sanctions Highlight the Gap Between Physical and Cyber Security
Treasury’s action against an alleged criminal network puts attention on the handoff between cash-machine servicing, malware detection and fraud response.
Data breaches · News & analysis
Bitget Resumes Bitcoin Withdrawals as Breach Investigation Continues
The exchange’s latest account separates a staged service restart from an unfinished inquiry into unauthorized wallet transfers.
Security technology · News & analysis
Microsoft’s Integrated SOC Preview Puts the Analyst Handoff to the Test
The Defender announcement promises a more connected security operation; buyers should evaluate how it handles missing context and uncertain decisions.
Cybercrime & fraud · News & analysis
Rydox Guilty Plea Shows the Long Afterlife of Stolen Personal Data
A federal prosecution illustrates why identity information can remain useful to criminals well beyond the incident that first exposed it.
Identity & access · News & analysis
A Real Sign-In Page Can Still Be Part of a Phishing Attack
Microsoft’s EvilTokens research puts device-code authorization and post-compromise mailbox access in the spotlight.
Headlines from our sources
31 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
Help Net Security
Breach victims discover their data was held by companies they’ve never heard of ↗
Industry newsSecurityWeek
Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts ↗
Industry newsHelp Net Security
Synthetic identities leave US lenders with $2.4 billion in fraud exposure ↗
Industry newsSecurityWeek
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware ↗
Industry newsDark Reading
Cyber Insurance's New Reality: Underwriting Isn't Enough ↗
Industry newsDark Reading
State Bank of India Suffers a Customer PII Data Leak ↗
Industry newsThe Hacker News
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web ↗
Industry newsYubico
Underwriting the AI threat: Why cyber insurance must evolve to phishing-resistant MFA ↗
ResearchHelp Net Security
Mastercard helps banks assess stablecoin risks before funds move ↗
Industry newsChannelPro
Key channel headlines: Rewst launches AI-native automation platform, Alternative Payments adds agentic finance and more ↗
Industry newsInfosecurity Magazine
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments ↗
Industry newsSecurityWeek
BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts ↗
Industry newsInfosecurity Magazine
Cyber Incident at BAE Systems Disrupts US Federal Bankruptcy Noticing ↗
Industry newsThe Record
Federal bankruptcy courts dealing with outages after contractor cyberattack ↗
Industry newsSecurityWeek
Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies ↗
Industry newsKrebsOnSecurity
U.K. Sanctions Cryptomus for RU Money Laundering ↗
Industry newsChannelPro
Alternative Payments launches AI tool to track much more than AI finances ↗
Industry newsChannelPro
What happens when a client gets breached? An MSP’s guide to cyber insurance claims ↗
Industry newsInfosecurity Magazine
Chinese Hacker Deployed AI in Campaign Against South Korean Banks ↗
Industry newsWIRED Security
The Man Behind a West Bank Telegram Channel Trying to Keep Palestinian Drivers Safe ↗
Industry newsChannelPro
How can I build a financial forecast that’s tied to pipeline activity? ↗
Industry newsDark Reading
SWIFT Banking & Government Middleware Enables RCE ↗
Industry newsWIRED Security
Experience What It’s Like to Travel in the Occupied West Bank ↗
Industry newsWIRED Security
How Israeli Checkpoints Choke Palestinian Life in the Occupied West Bank ↗
Industry newsHuntress
Shadow AI in Financial Services | Risk & Governance ↗
ResearchPalo Alto Networks Unit 42
Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America ↗
ResearchHuntress
2026 Cyber Insurance Trends Report: What's Changed and What You Need to Know ↗
ResearchHuntress
Securing Your Business: The Vital Role of Cyber Insurance | Huntress ↗
ResearchKrebsOnSecurity
Who’s Tracking You? Use This New Service to Find Out ↗
Industry newsESET WeLiveSecurity