A critical U.S. cybersecurity law sunsets Sept. 30, and banks say losing it would weaken defenses against hackers.

The database contained internal user emails, KPI report templates and other internal data, but no personal or financial customer data.

Attackers used stolen vendor credentials to move $130M, underscoring vulnerabilities in real-time payment systems.

The incident appears connected to recent social engineering campaigns, including attacks tied to Salesforce.

Worries that information can be kept safe is the top issue that's holding back artificial intelligence-driven tech upgrades at regional banks and credit unions.

Scattered Spider, a cybercrime gang whose targets include banks, has seen five of its members arrested for SIM-swapping and phishing schemes that stole millions.

The timing of the breach at Connex aligns with data breaches by threat actor ShinyHunters, which uses phone calls to socially engineer victim organizations.

The security problem affects organizations with a hybrid Exchange environment, running applications in both on-premises servers and Microsoft's cloud.

With federal oversight easing, Rhode Island joins states pushing cybersecurity laws for finance companies not covered by federal bank regulators.

A threat group used physical implants and evasive malware to infiltrate ATM networks and attempt fraudulent withdrawals. Here are their tactics and techniques.

Companies that lack artificial intelligence governance may spend hundreds of thousands of dollars more in responding to cyberattacks, IBM found.

A report Wednesday detailed Scattered Spider's advanced social engineering tactics and the escalating threat the group poses to financial institutions.

American Banker's Frictionless Fraud report finds not all institutions are well assured their customer verification tools can keep up with new schemes.

Texting a password recovery link to a customer presents the risk of someone else taking over the account. Researchers found this happens somewhat frequently.

A new MITRE framework breaks down how cybercriminals attack cryptocurrency systems and helps institutions secure them. Plus, it's a free, open standard.

The OCC, Fed and FDIC issued a letter this week clarifying the rules governing crypto safekeeping, which emphasize proper management of cryptographic keys.

Cyber firms are teaming up with cloud providers to build faster, smarter AI-powered defenses.

The case has put chief information security officers on notice that they could be personally liable for false statements about security policies and practices.

GodFather malware mimics and manipulates real financial apps on Android devices, exposing sensitive data without user suspicion.