Russian Ring Using Ex-Immigrant Data to Fuel Fake ID Sales

Suparna Goswami • December 11, 2025

A Russian darknet marketplace is exploiting a major blind spot for U.S. financial institutions by trafficking in the identities of former legal immigrants. Telegram-based group Karma Fullz has built a profitable criminal enterprise with highly convincing synthetic identities.

►

Fraud Management & Cybercrime

Why We Can't Expect Meta to Stop Online Scams on Its Own

Latest

Advanced SOC Operations / CSOC

Harness Nets $240M at $5.5B Valuation to Advance DevSecOps

Michael Novinson • December 11, 2025

With $200 million in Series E funding and a new $5.5 billion valuation, Harness will scale its AI-powered platform for security, compliance and reliability in software development. The investment will support R&D into AI agents, testing, cost optimization and security for AI workloads.

Fraud Management & Cybercrime

Checkmarx Purchases Tromzo to Boost AI Security Automation

Michael Novinson • December 9, 2025

Checkmarx acquired AI security startup Tromzo to jumpstart its roadmap for agentic application security. The deal gives Checkmarx a ready-built platform and team focused on enterprise-grade triage and remediation agents designed to streamline vulnerability management.

Iran Hackers Take Inspiration From Snake Video Game

David Perera • December 2, 2025

Iranian nation-state hackers took inspiration from a mobile phone time-killing mainstay, say security researchers who spotted hackers downloading malware masquerading as the Snake video game. A callback to the game isn't nostalgia, say researchers at Eset.

Artificial Intelligence & Machine Learning

Ads Without Eyeballs: Online Shopping's AI Agent Problem

Rashmi Ramesh • December 1, 2025

The online retail industry spent decades honing how to nudge people into clicking the buy button. Now it faces a customer who doesn't want anything at all: the artificial intelligence shopping agent. Agentic commerce could hollow out retail media and force a shift in how platforms monetize.

Microsoft Ignite

How AI Deepfakes Turn Human Trust Into a Cyber Risk

Michael Novinson • November 28, 2025

AI deepfakes are eroding the biological mechanisms humans have relied on for centuries to verify identity. Jeremy Nelson, CISO for North America at Insight, explains how AI-powered impersonation is reshaping fraud, overwhelming defenders and accelerating identity-based attacks across enterprises.

Endpoint Security

Asus Routers Hacked in 'WrtHug' Campaign

David Perera , Greg Sirico • November 19, 2025

Suspected Chinese cyberespionage hackers have commandeered tens of thousands of Asus routers in an operation showing a heavy emphasis on infecting devices stationed in Taiwan. The campaign tracks with reports that Beijing is actively pressing unpatched routers into ORB networks.

Cryptocurrency Fraud

US Strike Force Takes Aim at Southeast Asian Scam Centers

Suparna Goswami • November 13, 2025

The U.S. Attorney for the District of Columbia announced the launch of the Scam Center Strike Force to dismantle criminal networks behind romance bait scams. The initiative targets sophisticated transnational criminal organizations based in Southeast Asia including Cambodia, Laos and Burma.

Cyber Insurance

Cyber Risk Redefines the Bottom Line for FIs

Anna Delaney • November 13, 2025

FIs face rising cyber complexity as threat actors evolve and insurers raise the bar. David Anderson, vice president of cyber at Woodruff Sawyer, a Gallagher company, explains how proactive defense, governance and privacy controls define the new economics of cyber risk.

AI-Based Attacks

Fraudsters Are Winning the AI Race - for Now

Matthew Perry • November 12, 2025

Enterprises are still "underwater" when it comes to the fight against cyber fraud. Despite major investments and a renewed focus on fraud prevention, many organizations remain on the defensive as threat actors and fraudsters outpace risk mitigation and incident response.

Artificial Intelligence & Machine Learning

When AI Joins the Insider Risk Conversation

Anna Delaney • November 11, 2025

Most insider threats stem from unintentional actions rather than malicious intent, said David Pollino, founder of YourExecPro. He advocates for a "noisy" approach to security culture that transforms detection into teaching moments while addressing AI as the newest insider risk.

Fraud Management & Cybercrime

Financial Institutions Face Surge in Vishing, Spoofing Scams

Anna Delaney • November 11, 2025

Vishing and spoofing scams have surged across the financial sector, eroding customer trust and fueling global fraud networks. Nisan Bangiev, director and fraud risk officer at Valley Bank, advocates for robust digital identity strategies and a unified industry response to curb this growing threat.

Fraud Management & Cybercrime

Nacha Revises Fraud Monitoring Rules for FIs

Suparna Goswami • November 11, 2025

Nacha's 2026 rule amendments pivot from "commercially reasonable" to "reasonably intended" fraud detection standards. Nacha's Devon Marsh explains what this shift means for RDFIs and ODFIs and how banks and financial institutions can define and demonstrate reasonable practices.