CRAFTY FALCON targets Indian fintechs on weekends
CERT-IN names actor CRAFTY FALCON and warns of active AI-powered attacks timed to low-monitoring periods.
1
Stories per day · 30 days
Relatednodezero4agentic-ai3exposure-management3fca3horizon33uk3ai-agents2claude2near-miss-reporting2prompt-injection2south-korea2account-takeover1activemq1agentic-systems1agent-security1ai-assisted1ai-attacks1akamai1
23 stories, newest first · one card per story
Stories tagged #financial-services
Horizon3 whitepaper touts NodeZero for financial services security
The paper describes autonomous attack-path testing, a roughly 16-hour financial services case, and compliance-oriented retesting.
Arca says agents handle wealth work, humans keep final decisions
Arca raised $48.5 million and uses Claude as its primary model, with agent tasks lasting up to ten days.
1
CREST urges ecosystem-wide cyber resilience for financial services
The October 29 whitepaper offers illustrative maturity pathways for institutions, supervisors and providers, not a new compliance standard.
1
GMO says attackers posted data from Onamae desktop breach
The firm shut the trading desktop service on October 21 after a roughly $50 million ransom demand and now advises password resets.
TransUnion puts US lenders' synthetic identity fraud exposure at $2.4 billion
The June 2026 estimate is potential exposure, not confirmed losses, with auto lending accounting for $1.5 billion.
2
Akamai post says ARTEX shows overlooked attack surfaces
Visible headings cite South Korean regulators, financial services, and AI speeding attacks rather than changing fundamentals.
2
Vanguard AI lead discusses foundations for scalable AI
The EmTech Future session covers data, platforms, governance and agentic systems in regulated settings.
CyberCartel used Claude and Grok against 400-plus financial firms
Straiker reviewed the group’s CARLIY0S system and a snapshot of 4,493 records, without confirming every target was breached.
2
European finance firms show NVIDIA-backed models at GTC Berlin
Revolut says PRAGMA starts with 80 million customers, and bunq claims 60% of closed-model cost per answer.
2
Finance firms found attack paths after expanding NodeZero testing
Horizon3 case studies say a Dev environment reached production Domain Admin and one credential exposed about 300,000 files.
1
UK FCA exec wants disclosure of significant AI failures
The proposal would extend existing major-incident reporting to agentic AI near-misses, with terms still undefined.
1
UK FCA says firms must report significant AI failures and near-misses
The government has not yet committed to adding AI-specific measures to the cyber resilience bill.
Meeting the ECB’s AI-Enabled Cybersecurity Supervisory Recommendations with NodeZero®
Horizon3 says NodeZero can evidence bank compliance with ECB cybersecurity supervisory recommendations.
TAG-217 Targets South Korean Financial Services with ARTEX
TAG-217 used the ARTEX AI framework in attacks that exposed data on 68,000 people at South Korean banks.
Crossing the Threshold: How OpenAI and Anthropic Approach Autonomy and Safety in Financial Agents
OpenAI, Anthropic, Two Sigma, and Bloomberg outlined controls for safer autonomous financial agents.
7
Solo Hacker Used AI Tools to Breach South Korean Financial Organizations and Steal Data
Suspected lone Chinese-speaking hacker used ARTEX AI pentest tool to breach Shinhan, Kookmin, Hana and other South Korean financial firms, stealing customer data.
11
How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)
Wiz says Red Agent found a public sensitive-data page at an unnamed Fortune 500 financial firm.
How Financial Services Companies Can Modernize Their Software Supply Chain
Chainguard argues banks should harden images and libraries instead of full application rewrites.
1
DORA Year Two: Can Your SOC Actually See the Attack?
DORA year two pushes EU financial firms to prove SOC visibility and timely incident detection.
NYS DFS Issues New Cybersecurity Guidance on Risk Assessments for Financial Services Entities
New York DFS issued cybersecurity guidance defining expectations for risk assessments that regulated financial services entities must conduct.
Introducing ChatGPT for Financial Services
OpenAI launches ChatGPT for Financial Services, pairing built-in market data with GPT-6 Astra for banking research workflows.
7
Shadow AI in Financial Services | Risk & Governance
Huntress warns financial services firms that unsanctioned 'Shadow AI' tool use creates data leakage and compliance risks faster than governance controls can keep pace.
4