InfoSecBulletin Cybersecurity for mankind
From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors, with 406 incidents publicly reported as ransomware attacks, accounting for seven percent of all ransomware incidents during that time.
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
Daily Cyber security update for 26.10. 2026
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Why Finance?
The financial sector consistently ranks as one of the most targeted industries for threat actors worldwide. Financial institutions handle large amounts of sensitive data, including financial transactions and customer information, making them attractive targets for cybercriminals. The critical nature of financial operations also raises the likelihood that these organizations will pay extortion and ransom demands.
The financial sector is appealing to malicious actors not just for financial gain, but also for its connections to other industries. They may target financial institutions to access information about other organizations, as one data breach can affect many partners and third parties.
The Threat Actors Targeting the Financial Sector:
Organizations must grasp the financial threat landscape by recognizing key players. Key threat actors targeting the financial sector from April 2024 to April 2025 include some of the most prominent and active groups.
Top Attack Vectors Facing the Financial Sector:
From April 2024 to April 2025, our analysts noted 6,406 posts about financial sector access in Flashpoint’s forum collections. How are these threat actor groups accessing financial data and systems? Flashpoint intelligence reveals they exploit third-party breaches, initial access brokers, insider threats, and other attack methods.
