Carter Pape

Security researchers discovered the compromise in Trading Technologies software while looking into the cause of a compromise in 3CX phone conferencing software.

Nexway, based in France, allegedly processed payments in its own name on behalf of a tech support scam and telemarketing company from 2016 to 2020.

Alphv developers claimed responsibility for an attack that started last week against the payments and digital banking software maker. The ransomware is more sophisticated than many of its peers.

The invoices show branding by NorthOne, a business banking fintech, but the company's CEO denies responsibility for the vulnerability.

As customers rushed to withdraw their deposits from the bank and applied for accounts at other institutions, criminals took advantage of the chaos.

A consortium of financial companies said premiums are rising despite a relatively low level of overall risk, causing some banks to reconsider their policies.

The February attack on the title loan company exposed Social Security numbers and possibly driver's licenses and passports. Eleven other financial companies have reported hacks this year.

Having a single set of generally accepted c​ybersecurity incident rules would reduce costs to banks, but software industry leaders say this would serve their interests, too.

On Thursday, a ransomware group published data apparently stolen from Tri Counties Bank, which suffered an outage to its ATM network last month.

The group behind the ongoing campaign allegedly has the support of a hosting provider that's complicit in helping spin-up new scam websites.

Any major news provides fraudsters the opportunity to take advantage of a frenetic situation. This time, their plea for customers' banking credentials seemed extra credible.

The challenger bank, which is currently fighting off a lawsuit from the Consumer Financial Protection Bureau, is still "growing into profitability" according to one analyst.

Old-fashioned check fraud is growing, and fraudsters find people to cash their checks — and tell them what to wear while doing it — through a popular messaging service.

The economic picture for its customers is good, according to Jason Wilk, who leads the Los Angeles fintech. He sees no need for new products or capital raises in the coming year to break even.

The strategy document identifies potential avenues for cutting cybercriminals off from financing, as well as other actions banks can take.

Rules around what, when, and to whom a bank must report in the wake of a data breach remain a key point of regulatory friction. Some hope a new federal office could help.

Visa's strategy of devaluing data applies not just to its payment workflows but across the business. Visa Chief Risk Officer Paul Fabara shares more about this approach and four other cyber risk principles he follows.

To combat cybercriminals, banks and credit unions turn to white-hat hackers to uncover system vulnerabilities. But what motivates these computer whizzes can be surprising.

The move is designed to give banks and credit unions a clearer path to connecting with Plaid without screen scraping or password sharing.

The personal financial management app, which has been downloaded 5 million times, was letting some users view emails and other personal information of other customers.