ThreatsDay: Fortinet fixes, PHP2Shell scans, Authenticator token flaw
Fortinet is withholding flaw details until November 10 while Hudson Rock reports 40,573 exposed FortiGate secrets.
64
Organization
Bank of America
- Mentions · 7d3
- Mentions · 30d11
- All mentions16
- First seenSep 2, 2026
- Last mentioned4d ago
Timeline
16 articles · newest firstUS banks block AI agents logged into customer accounts
Customers have shared bank usernames and passwords with agents, and several banks are steering tools toward read-only access.
36
Bank of America tells customers not to share passwords with AI assistants
The bank says customers remain liable for activity that follows from giving an AI agent their login.
34
US banks curb third-party AI agents tied to shared customer logins
Axios says the issue is customers authorizing agents, not a breach of bank systems or stolen credentials.
58
US banks report unauthorized AI agents in customer accounts
Access reportedly begins when customers share banking passwords with assistants, and Axios described no confirmed widespread theft.
58
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
Roundup covers ICS-Sniper, an XWorm panel RCE, an 11-million-record Burger King Japan breach, and a $250,000 Chrome chain.
78
Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fine
Regulators fined Bank of America $1.2 billion for weak anti-money-laundering controls despite heavy technology spending.
52
Bank of America puts 4,000 people on fixing vulnerabilities uncovered by Anthropic's Mythos and other AI models
Bank of America assigned about 4,000 people to fix software flaws found by Anthropic's Mythos and other AI models.
66
Bank of America had to bring in 1,000 contractors to patch all the bugs Mythos identified
Bank of America hired 1,000 contractors to patch Anthropic Mythos findings amid large AML penalties.
62
Visa, Mastercard, Major Banks Facing New Litigation over 'Anticompetitive' Fees
A pizzeria class action accuses Visa, Mastercard, and major banks of inflating merchant card fees.
4
Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities
Red Hat’s Lightwell clearinghouse has patched over 400 Java open-source flaws and reached general availability.
48
US arrests tech CEO accused of smuggling $300M in Nvidia chips into China
The US arrested Earthmade CEO Greg Lui for allegedly smuggling over $300 million in Nvidia AI chips to China.
78
The ugly economics of consumer AI
Few consumers pay for AI despite model gains, pushing major labs toward enterprise revenue.
40
Contain the Chaos: ‘CONTROL Resonant’ Launches on GeForce NOW
Malicious actors use AI to deliver phishing traps and fake contact information to trick AI agents browsing major companies and services, causing significant user confusion and financial risk.
70
Hackers influence ChatGPT and Gemini to direct users to scam centers
Attackers poison ChatGPT, Gemini, and Google AI Overview with GEO-optimized fake content, steering users of 374 companies toward scam phone numbers and phishing pages.
58
Anthropic's Enterprise Frontier Safeguards lets your Claude logs stay in your cloud
Anthropic launches Enterprise Frontier Safeguards, letting regulated customers keep Claude usage logs in their own cloud storage under their own keys with automated misuse detection.
62
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- Langflow: Any authenticated Langflow user can achieve Remote Code Execution (RCE) on the server by adding an MCP server with the "Stdio"…
- CVE-2026-80097<1%8.6Improper Authentication in Microsoft Authenticator Enables Local Privilege Escalation
Appears with
- Anthropicorganization · 5
- Anthropicvendor · 5
- JPMorgan Chaseorganization · 4
- Morgan Stanleyorganization · 4
- Wells Fargoorganization · 4
- OpenAIorganization · 4
- Citiorganization · 4
- Visaorganization · 3
- Mastercardorganization · 3
- Mythosai model · 3
- OpenAIvendor · 3
- Geminiai model · 2
- Metaorganization · 2
- Chaseorganization · 2
- Claudeproduct · 2
- Lufthansaorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.