Korea's Financial Security Institute reports leak after hacking
Officials say a security-assessment website was hit and some firms' security-status submissions may have been exposed.
18 stories, newest first · one card per story
Officials say a security-assessment website was hit and some firms' security-status submissions may have been exposed.

Cambodia-based Storm-3358 cluster deploys agentic AI framework ARTEX to scan exploit and install RATs in financial organizations across Southeast Asia.

Daishin says names, emails, and phone numbers of 38,490 customers were exposed; Mirae and Bithumb have not confirmed theft.
The exchange is still checking whether member data leaked; Daishin reported about 38,490 affected customers.

Straiker says more than 400 organizations were targeted, not that each one was breached.

DORA requires selected EU financial firms to run threat-led penetration tests at least every three years.

A threat actor used the ARTEX agentic pentest framework to steal financial PII from South Korean institutions.

A suspected Chinese attacker used ARTEX and Claude to breach South Korean banks and steal customer data.
South Korea probes AI-agent hacks of at least seven banks that exposed data on 68,000 people.

South Korea's president ordered an investigation into breaches at major banks exposing ~65,000 customers' data; infrastructure tied to AI pen-testing framework ARTEX AI.

South Korea's president ordered security checks after banks leaked tens of thousands of customers' personal records.

Threat group 'Breeze Comet' is attacking Brazil's financial systems and reportedly stealing funds directly, per Dark Reading threat intelligence.

Five Venezuelan nationals pleaded guilty to failed ATM jackpotting attempts in Kansas as the FBI reports 700+ US incidents in 2025.

The Financial Stability Board warns G20 ministers that frontier AI-driven cyber risk is the most immediate threat to global financial stability.
The Financial Stability Board warned G20 banking leaders that frontier AI adoption poses growing cyber and financial stability risks.
ZeroTokens phishing platform hands operators live control of victim sessions in ongoing attacks targeting 53 financial brands.

Apollo Global Management confirmed a breach of cloud platforms by BlackFile-linked social engineering attackers, exposing personal data including Social Security numbers.

BlackFile (UNC6671), a The Com-linked extortion crew, keeps hitting financial and med tech firms with voice-phishing IT-support scams and ~$3 million demands.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views