Do Son Discover how Google Cloud Gemini Enterprise empowers the financial and legal sectors. Learn about its secure AI agents, data lineage, and MCP integration.
Financial services
A flaw in Apache Fineract risks Authorization Bypass via IDOR (CVE-2025-58137) in its self-service API, potentially exposing customer data. Also fixed: Weak Password Policy and Unmasked Server Keys. Update to v1.13.0.
eSentire discovered ChaosBot, a Rust-based malware deployed via DLL sideloading that uses Discord channels as a covert C2 platform to perform reconnaissance and command execution.
An unprotected database potentially linked to Navy Federal Credit Union was discovered, exposing internal system data and hashed passwords, creating a risk of future attacks.
Allianz Life confirms a data breach impacting over 1.4 million individuals after attackers used social engineering to access a cloud-based CRM system. ShinyHunters is suspected.
Trellix has uncovered SquidLoader, a highly obfuscated malware targeting Hong Kong financial institutions to deploy Cobalt Strike beacons for persistent control.
A sophisticated phishing campaign, Oriental Gudgeon, has been targeting Japanese companies since October 2024. It uses advanced cloaking to steal user data.