Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

Search Subscribe

Industry vertical

Banking, Financial Services & Fintech, page 2

Banks, NBFCs, insurance, payments, lending and capital markets.

84 articlesUpdated 28 Sep 2026Page 2 of 4

ThreatsCloud & SaaSCritical
Splunk Enterprise Critical Authentication Bypass Flaw Exploited in Active Corporate Infiltration Attacks
CISA adds Splunk Enterprise vulnerability CVE-2026-20253 (CVSS 9.8) to KEV catalog following active exploitation targeting enterprise SIEM clusters.
Priya Raman18 Sep 202612 min read
InsightsCloud & SaaS
India DPDP Act Enters Phase 2: DPBI Enforcement, Mandatory Breach Notification & ₹250 Cr Penalties
India initiates DPDP Act Phase 2 enforcement establishing Data Protection Board inquiries, mandatory breach disclosures, and penalties up to ₹250 Crore.
Daniel Okafor18 Sep 202612 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint Server Critical Deserialization & Auth Bypass Flaws Under Active Cyberattack
CISA orders federal agencies to patch critical Microsoft SharePoint vulnerabilities CVE-2026-58644 and CVE-2026-56164 enabling unauthenticated remote code execution.
Priya Raman18 Sep 202612 min read
ResearchCloud & SaaS
Langflow AI Pipeline Remote Code Execution Flaws Exploited in Enterprise LLM Deployments
CISA adds critical Langflow AI vulnerabilities CVE-2026-0770 and CVE-2026-55255 to KEV catalog as threat actors weaponize agentic pipeline execution flaws.
Aisha Noor18 Sep 202611 min read
NewsCloud & SaaS
CenterPoint Energy Form 8-K Disclosure: Unauthorized Access to Customer Accounts via External Web Portal
CenterPoint Energy files Form 8-K disclosing an unauthorized intrusion into customer account systems via external-facing web portal infrastructure.
CST Newsroom17 Sep 202614 min read
ResearchCloud & SaaS
Agentic AI Security Breakdown: How Indirect Prompt Injections Hijack Autonomous Tool-Calling Agents
Analysis of emerging frontier AI threat vectors: how indirect prompt injections in untrusted documents hijack tool-calling autonomous LLM agents.
Priya Raman17 Sep 202614 min read
ThreatsCloud & SaaSCritical
Adobe ColdFusion Critical Path Traversal Flaw CVE-2026-48282 Exploited in Active Attacks
CISA incorporates Adobe ColdFusion path traversal vulnerability CVE-2026-48282 (CVSS 9.8) into KEV catalog following active exploitation against enterprise application servers.
Mei-Lin Chen17 Sep 202614 min read
ThreatsCloud & SaaSHigh
Cisco Unified Communications Manager SSRF Flaw Weaponized in Enterprise Attacks
CISA adds Cisco Unified Communications Manager vulnerability CVE-2026-20230 (CVSS 8.5) to KEV catalog following active in-the-wild enterprise telephony attacks.
Tom Verhoeven17 Sep 202612 min read
ThreatsCloud & SaaSHigh
Ubiquiti UniFi OS Input Validation Vulnerability CVE-2026-34910 Weaponized Against Enterprise Network Edge
CISA adds Ubiquiti UniFi OS vulnerability CVE-2026-34910 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation against network edge gateways.
Aisha Noor17 Sep 202613 min read
ThreatsCloud & SaaSCritical
WordPress Core Critical SQL Injection Flaw CVE-2026-60137 Exploited in Mass Web Attacks
CISA incorporates WordPress Core vulnerabilities CVE-2026-60137 and CVE-2026-63030 (CVSS 9.8) into KEV catalog following active in-the-wild web attacks.
CST Newsroom17 Sep 202614 min read
ThreatsCloud & SaaSHigh
Red Hat ABRT Crash Reporting Daemon Flaw CVE-2015-5287 Weaponized for Linux Root Privilege Escalation
CISA adds Red Hat ABRT vulnerability CVE-2015-5287 (CVSS 7.8) to KEV catalog following active exploitation against enterprise Linux host infrastructure.
Priya Raman17 Sep 202612 min read
ThreatsCloud & SaaSCritical
SimpleHelp Remote Support Platform Critical Authentication Bypass CVE-2026-48558 in Active Attacks
CISA adds SimpleHelp remote support platform vulnerability CVE-2026-48558 (CVSS 9.8) to KEV catalog following active exploitation against enterprise networks.
Daniel Okafor17 Sep 202613 min read
ThreatsCloud & SaaSCritical
N-able N-central Critical Authentication Bypass CVE-2026-18577 Exploited in MSP Supply Chain Attacks
CISA adds N-able N-central vulnerability CVE-2026-18577 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against MSP management infrastructure.
Mei-Lin Chen17 Sep 202614 min read
ThreatsCloud & SaaSHigh
Red Hat Enterprise Linux libuser Race Condition Flaw Exploited for Local Root Escalation
CISA adds Red Hat libuser vulnerability CVE-2015-3246 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation for root privilege escalation.
Tom Verhoeven17 Sep 202612 min read
ThreatsCloud & SaaSCritical
DD-WRT Gateway Firmware Stack Buffer Overflow CVE-2021-27137 Weaponized in Network Perimeter Attacks
CISA adds DD-WRT gateway vulnerability CVE-2021-27137 (CVSS 9.8) to KEV catalog following active weaponization by botnets targeting network perimeter routers.
Aisha Noor17 Sep 202613 min read
ThreatsCloud & SaaSCritical
Microsoft SQL Server Memory Corruption RCE Flaw Exploited in Database Infiltration Attacks
CISA adds Microsoft SQL Server vulnerability CVE-2019-1068 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against enterprise database clusters.
CST Newsroom17 Sep 202614 min read
ThreatsCloud & SaaSCritical
TrueConf Enterprise Server Authentication Bypass Flaw Weaponized to Access Communications
CISA mandates urgent remediation of TrueConf Server vulnerability CVE-2026-72529 (CVSS 9.8) exploited in the wild to bypass administrative access controls.
Priya Raman17 Sep 202612 min read
ThreatsCloud & SaaSCritical
Fortinet FortiSandbox Critical OS Command Injection Flaws CVE-2026-25089 & CVE-2026-39808 in Active Exploitation
CISA adds Fortinet FortiSandbox vulnerabilities CVE-2026-25089 and CVE-2026-39808 (CVSS 9.8) to KEV following active attacks against enterprise security fabrics.
Daniel Okafor17 Sep 202613 min read
ThreatsCloud & SaaSCritical
Cisco Identity Services Engine Critical API Flaw Weaponized to Compromise Network Access
CISA orders emergency patching of Cisco Identity Services Engine vulnerability CVE-2026-76460 (CVSS 9.8) enabling unauthenticated remote network policy takeover.
Priya Raman17 Sep 202611 min read
ThreatsCloud & SaaSHigh
Apache Tomcat Session Data Exposure Flaw Weaponized in Credential Hijacking Attacks
CISA flags Apache Tomcat vulnerability CVE-2026-34486 exploited in enterprise intrusions to intercept unencrypted session tokens and hijack authenticated user access.
Daniel Okafor16 Sep 202610 min read
InsightsCloud & SaaS
Cloud IAM Role Pivoting & Cross-Account Data Exfiltration: Multi-Cloud DFIR Forensics
Digital forensics analysis dissects how threat actors leverage leaked cloud credentials and cross-account IAM role assumptions to exfiltrate enterprise storage.
Mei-Lin Chen16 Sep 202612 min read
ThreatsCloud & SaaSCritical
Check Point SmartConsole Authentication Bypass Flaw Exploited to Hijack Firewall Management
CISA orders emergency remediation of Check Point SmartConsole flaw CVE-2026-16232, which allows network adversaries to bypass authentication on management servers.
Daniel Okafor16 Sep 202610 min read
ThreatsCloud & SaaSCritical
Oracle E-Business Suite Critical Privilege Escalation Flaw CVE-2026-46817 Exploited in Enterprise Intrusions
CISA adds Oracle E-Business Suite privilege management flaw CVE-2026-46817 (CVSS 9.8) to its KEV catalog following active exploitation against cloud ERP deployments.
Priya Raman16 Sep 202611 min read
InsightsCloud & SaaS
Surge in SEC Form 8-K Cyber Filings: Cloud Storage Exfiltration & Extortion Forensics
Regulatory analysis of recent SEC 8-K Item 1.05 disclosures details how threat actors leverage leaked cloud credentials and misconfigured storage to steal enterprise data.
Priya Raman16 Sep 202612 min read

Threat scope

Payment systems, wire fraud, mule accounts, SWIFT, core banking and financial regulations.

Free newsletter

The Daily Brief

The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.

Exploited CVEs, with affected products and patch status
Patch priorities ranked by real-world exploitation
Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2

FreeOne email per weekdayUnsubscribe anytime

See a sample issue Privacy policy