Fortra is urging GoAnywhere Managed File Transfer (MFT) users to immediately upgrade to version 7.8.4 or v7.6.3 after disclosing a deserialization flaw (CVE-2025-10035) that could enable command injection through a forged license response. Security firm watchTowr raised concerns that the company may have delayed acknowledging active exploitation, noting evidence of attacks as early as September 10, eight days before Fortra issued its September 18 advisory.
Citi today announced the launch of an enhanced version of its proprietary AI platform, Citi Stylus Workspaces, now powered by Agentic AI.
Cybersecurity researchers have discovered two severe authentication bypass vulnerabilities in Wondershare RepairIt, an AI-powered data repair and photo editing application.
After more than two years of negotiations, the European Union’s Financial Data Access (FiDA) regulation is close to being finalized. The initiative is intended to strengthen open finance by granting third parties access to financial institutions’ customer data.
Built on modern, microservices-based architecture, FraudAxis is a hybrid solution that combines rule-based analysis with adaptive machine learning models, enabling banks, processors, and PSPs to shift from reactive to proactive fraud management. By analysing customer behaviour, anomalies, and risk patterns in real time, the platform reduces false positives, accelerates fraud detection, and safeguards customer trust - without slowing down operations or disrupting user experience.
Point Wild’s Lat61 Threat Intelligence Team, led by Onkar R. Sonawane, has uncovered a new piece of malware dubbed Raven Stealer. Appearing simple at first glance, the threat is being distributed on underground forums and bundled with pirated software, allowing it to reach victims who download illicit or unvetted applications.
Zelle, the popular bank-backed peer-to-peer payments service, is defending itself against a lawsuit from New York Attorney General Letitia James, who claims the platform allowed scammers to steal over $1 billion between 2017 and 2023.
The Australian Securities and Investments Commission (ASIC) has accused ANZ of “acting unconscionably” in its management of a $14 billion bond deal for the Australian Government, alleging the bank overstated its bond trading volumes by tens of billions of dollars over nearly two years.
