ConciseSignal

Revolut customers' stock trading data exposed in breach

Revolut customers' data tied to US stock trading was exposed after a breach at a broker used by the fintech, Sifted reports. Email notifications show affected users had personal and trading information accessed. It's unclear how many were impacted or what steps Revolut has taken in response. The breach did not originate within Revolut itself, but from a third-party provider.

Why it mattersBrokerage clients may be at increased risk of fraud or misuse of their trading information. The incident highlights supply chain vulnerabilities affecting financial technology companies.

Sources covering this

SiftedExclusive: Revolut customers hit by fresh security breach11:25 AM →The RegisterHeadline onlyAnother week, another data breach for Revolut customers10:04 AM →
Concise Signal DailyEverything that mattered, every weekday at 7am.

More in Cybersecurity

11 sources · 8d ago

Security startup Hacktron exploits vulnerability in OpenAI forum

Hacktron, an AI cybersecurity startup, found and exploited a security flaw in OpenAI's community forum that allowed access to an employee's internal account using Anthropic's Claude. The breach relied on an image processing vulnerability and was executed in less than 72 hours. Hacktron stopped short of accessing internal code and reported the issue to OpenAI, which then revoked affected tokens. Hacktron received a $6,500 bounty for the discovery.

14 sources · 4d ago

Hackers claim FBI breach and theft of agent data

A hacking group known as ShinyHunters claims to have breached FBI systems and accessed personal data on thousands of FBI agents and job applicants, including names, home addresses, and phone numbers. Both TechCrunch and 404 Media reviewed samples provided by the hackers and confirmed that some details matched public records. The FBI jobs site and special agent applicant portal were down as of publication. The FBI declined to comment.

9 sources · 4d ago

Microsoft dismantles AI-driven EvilTokens cybercrime platform

Microsoft and partners have taken down EvilTokens, an AI-powered cybercrime platform allegedly used by about 1,000 cybercriminals to compromise over 12,000 Microsoft user email inboxes worldwide. On September 15, Microsoft seized 50 EvilTokens-operated websites and disabled more than 175 related domains. Authorities have arrested two suspects in London accused of fraud and money laundering linked to the platform. At least $1.7 million in losses are tied to EvilTokens.

7 sources · 1d ago

Bitget loses $351 million in suspected North Korean hack

Cryptocurrency exchange Bitget says attackers stole over $351 million from its hot and warm wallets in a cyberattack on September 24. Both Bitget and external analysts say the method points to North Korean hacker groups, but the exact mechanism is still under investigation. The company has frozen withdrawals, but says customer balances remain accurate and unaffected funds are secure.