Ex-Security Engineer Jailed 3 Years for $12.3 Million Crypto Exchange Thefts

A former security engineer has been sentenced to three years in prison in the U.S. for charges relating to hacking two decentralized cryptocurrency exchanges in July 2022 and stealing over $12.3 million. Shakeeb Ahmed, the defendant in question, pled guilty to one count of computer fraud in...

CL0P's Ransomware Rampage - Security Measures for 2024

2023 CL0P Growth Emerging in early 2019, CL0P was first introduced as a more advanced version of its predecessor the 'CryptoMix' ransomware, brought about by its owner CL0P ransomware, a cybercrime organisation. Over the years the group remained active with significant campaigns throughout 2020 t...

PT-2024-12343 · Telegram +1 · Telegram +1

Name of the Vulnerable Software and Affected Versions: ESXi affected versions not specified Telegram affected versions not specified Description: The issue is related to the Operation Cronos impact on LockBit, following a landmark disruption. It affects the financial industry, specifically in the...

Malicious code in tme-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e4741bb4c7fbbe8d2acdca3ca368d5690922a5129bdbe01ed573aebee6f4514f The OpenSSF Package Analysis project identified 'tme-finance' @ 5.7.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1197 Malicious code in tme-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e4741bb4c7fbbe8d2acdca3ca368d5690922a5129bdbe01ed573aebee6f4514f The OpenSSF Package Analysis project identified 'tme-finance' @ 5.7.7 npm as malicious. It is considered malicious because: - The package...

Mispadu Trojan Targets Europe, Thousands of Credentials Compromised

The banking trojan known as Mispadu has expanded its focus beyond Latin America LATAM and Spanish-speaking individuals to target users in Italy, Poland, and Sweden. Targets of the ongoing campaign include entities spanning finance, services, motor vehicle manufacturing, law firms, and commercial...

Clearpool Expands to Avalanche with Listed Fintech Firm Launching First Credit Vault

By Uzair Amir Clearpool launches Credit Vaults on Avalanche, offering an on-chain credit solution with real-world asset backing, marking a significant step in bridging traditional finance and DeFi through partnerships with firms like Banxa. This is a post from HackRead.com Read the original post:...

Friendzone Launches Social Monetization on Polygon PoS for 5,000+ Waitlisted Users

By Owais Sultan British Virgin Islands, 26 February 2024 - Friendzone, the sustainable and scalable Web3 platform redefining Social Finance SocialFi… This is a post from HackRead.com Read the original post: Friendzone Launches Social Monetization on Polygon PoS for 5,000+ Waitlisted Users...

taskhub 2.8.7 - SQL Injection Vulnerability

Exploit Title: taskhub 2.8.7 - SQL Injection Exploit Author: CraCkEr Vendor: Infinitie Technologies Vendor Homepage: https://www.infinitietech.com/ Software Link: https://codecanyon.net/item/taskhub-project-management-finance-crm-tool/25685874 Demo: https://taskhub.company/auth Tested on: Windows...

finance-magazine.com Cross Site Scripting vulnerability OBB-3858790

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ceoawards.finance-monthly.com Cross Site Scripting vulnerability OBB-3856707

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Update 23.4 for Microsoft Dynamics 365 Business Central 2023 Release Wave 2 (Application Build 23.4.15715, Platform Build 23.0.15712)

None None...

The vulnerability of the SAP S/4HANA Finance financial management software, related to incorrect authorization, allows a perpetrator to create internal bank accounts.

The vulnerability of the SAP S/4HANA Finance financial management software is related to incorrect authorization processes. Exploiting this vulnerability allows a malicious actor to create internal bank accounts remotely...

A Deepfake Scammed a Bank out of $25M — Now What?

A finance worker in Hong Kong was tricked by a deepfake video conference. The future of defending against deepfakes is as much as human challenge as a technological one...

Deepfake Fraud

A deepfake video conference call--with everyone else on the call a fake--fooled a finance worker into sending $25M to the criminals account...

Rapid7 in Prague: Pete Rubio Shares Insights and Excitement for the New Office

As we continue to grow our customer base here at Rapid7, we’re growing our offices as well – this time with a new location in the Czech Republic. With a successful history of building innovation hubs from Boston to Belfast, our teams can’t wait to bring new talent from Prague into the business...

CFPB’s Proposed Data Rules

In October, the Consumer Financial Protection Bureau CFPB proposed a set of rules that if implemented would transform how financial institutions handle personal data about their customers. The rules put control of that data back in the hands of ordinary Americans, while at the same time undermini...

CVE-2024-21736

SAP S/4HANA Finance for Advanced Payment Management - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application...

CVE-2024-21736

CVE-2024-21736 concerns SAP S/4HANA Finance for Advanced Payment Management. Multiple connected sources confirm improper authorization checks in the function import responsible for creating in-house bank accounts, affecting SAPSCORE 128 and S4CORE 107 components. Root cause: missing authorization...

CVE-2024-21736 Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)

SAP S/4HANA Finance for Advanced Payment Management - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application...