InfoSecBulletin Cybersecurity for mankind
From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors, with 406 incidents publicly reported as ransomware attacks, accounting for seven percent of all ransomware incidents during that time.
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
Why Finance?
The financial sector consistently ranks as one of the most targeted industries for threat actors worldwide. Financial institutions handle large amounts of sensitive data, including financial transactions and customer information, making them attractive targets for cybercriminals. The critical nature of financial operations also raises the likelihood that these organizations will pay extortion and ransom demands.
The financial sector is appealing to malicious actors not just for financial gain, but also for its connections to other industries. They may target financial institutions to access information about other organizations, as one data breach can affect many partners and third parties.
The Threat Actors Targeting the Financial Sector:
Organizations must grasp the financial threat landscape by recognizing key players. Key threat actors targeting the financial sector from April 2024 to April 2025 include some of the most prominent and active groups.
Top Attack Vectors Facing the Financial Sector:
From April 2024 to April 2025, our analysts noted 6,406 posts about financial sector access in Flashpoint’s forum collections. How are these threat actor groups accessing financial data and systems? Flashpoint intelligence reveals they exploit third-party breaches, initial access brokers, insider threats, and other attack methods.
