
CERT-In says CRAFTY FALCON is hitting Indian fintech payment APIs
Remediated firms were attacked again on holidays, and CERT-In has not named the actor or victim count.
27 stories, newest first · one card per story

Remediated firms were attacked again on holidays, and CERT-In has not named the actor or victim count.

The Personal Finance beta is for Pro, Max, and Ultra subscribers and connects through Plaid so Claude never sees bank passwords.

Abrigo restores most Sageworks functionality after outage from irregular activity.
Taler Systems forms Taler Operations AG in Germany to apply for BaFin e-money licence and launch Taler payments in the Euro-zone.

Revolut says customer money and data are safe; Google was still investigating europe-west2.

Group-IB says operators impersonated Poshmark, harvested cards and OTPs, and checked stolen bank logins.

The company says 28 services have been partly down since Tuesday morning and that customers' money and data are safe.

Cylerity CTO/CISO Drew McCombs explains separating PHI from bank partners, keeping humans in the loop for AI decisions, and enabling email MFA at small practices.
A Gmail extension prototype detects Nigerian fintech phishing with sender checks and a BiLSTM classifier.

Robinhood VP Abhishek Fatehpuria will discuss winning modern financial consumers via AI trading tools at TechCrunch Disrupt 2026.

A threat actor demanding $3 million from Revolut says fake government legal requests yielded data of about 680 customers, mostly cryptocurrency whales.
Revolut handed customer data to an attacker using a spoofed government email, prompting insurers to rethink cyber attack coverage definitions.
Revolut breach via spoofed government-agency email requests; attackers posted stolen data samples on Telegram and demand 10,000 Bitcoin.

Revolut confirmed attackers extracted customer KYC records by sending fraudulent data requests from a spoofed or compromised government agency email domain.

Revolut says a scammer using a legitimate government agency email domain obtained affected users' PII, ID copies, selfies and full financial records.
Revolut handed sensitive KYC data of high-net-worth crypto customers to fraudsters submitting fake emergency data requests from a compromised government email domain.

Revolut disclosed customers' IDs, selfies, and financial data to impostors sending fraudulent requests from a legitimate government email domain.

Revolut handed customer IDs, selfies, and financial records to criminals using a legitimate government agency email domain.

Revolut disclosed a breach after a threat actor spoofing a government agency's email domain obtained customer passports, selfies, IBANs, and full transaction histories.

Revolut confirmed an impersonation scheme exposed high-net-worth customers' identity documents, IBANs, and transaction histories to an attacker.

Revolut leaked KYC documents and full transaction histories after a fraudulent, domain-authenticated email request impersonating a government agency.

Revolut handed over KYC documents, selfies, and Bitcoin transaction histories to attackers after a fraudulent email from a genuine government domain passed authentication checks.
Revolut confirmed a breach of sensitive customer data after complying with forged government information requests.

Revolut disclosed customer identity data, including passports and possibly selfies, to an attacker using a legitimate government email domain.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views