Weekly Threat Bulletin – January 28th, 2026

This weekly threat bulletin highlights several critical vulnerabilities and emerging threats. A severe RCE vulnerability in React Server Components and Next.js (CVE-2025-55182) is being actively exploited. CISA added four critical flaws to its 'Must-Patch' list, including vulnerabilities in Versa Concerto, eslint-config-prettier, Zimbra Collaboration Suite, and Vite. GitLab released patches for multiple high-severity vulnerabilities. A new macOS malware called MonetaStealer targets crypto wallets and financial data. Lastly, a critical RCE vulnerability in Oracle E-Business Suite (CVE-2025-61882) is being actively exploited by threat actors, including the Clop ransomware group.

Pulse ID: 697a0fb2c327ef769cb46467
Pulse Link: https://otx.alienvault.com/pulse/697a0fb2c327ef769cb46467
Pulse Author: AlienVault
Created: 2026-01-28 13:31:30

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AWS #CISA #CyberSecurity #FinancialData #InfoSec #Mac #MacOS #Malware #OTX #OpenThreatExchange #RAT #RCE #RansomWare #Vulnerability #Zimbra #bot #AlienVault

Pivoting From PayTool: Tracking Various Frauds and E-Crime Targeting Canada

This investigation exposes a complex fraud ecosystem targeting Canadians through impersonation of government services and trusted brands. Attackers exploit digital dependencies for transportation, taxation, parcel delivery, and travel using convincing campaigns. The activity is linked to the 'PayTool' phishing framework, specializing in traffic violation scams. Additional infrastructure impersonates Canada Revenue Agency, Air Canada, and Canada Post. Threat actors commercialize these campaigns on underground forums, selling phishing kits mimicking official services. Victims are lured via SMS and malicious ads, using high-pressure tactics. The infrastructure employs fake validation phases and fraudulent payment gateways to harvest personal and financial data. The campaign's scope spans multiple provinces, utilizing shared hosting and domain generation patterns for scalability.

Pulse ID: 6978b796c0f9d8f3a59e0a34
Pulse Link: https://otx.alienvault.com/pulse/6978b796c0f9d8f3a59e0a34
Pulse Author: AlienVault
Created: 2026-01-27 13:03:18

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Canada #Canadian #CyberSecurity #FinancialData #Government #ICS #InfoSec #MaliciousAds #Mimic #OTX #OpenThreatExchange #Phishing #RAT #RCE #Rust #SMS #bot #AlienVault

December 2025 Security Issues in Korean & Global Financial Sector

This comprehensive analysis covers cyber threats and security issues in the financial industry, both in Korea and globally. It examines malware and phishing cases, lists top malware strains, and provides statistics on leaked Korean accounts. Key issues on the deep and dark web are highlighted, including a major database leak from Indonesia's largest bank, exposing sensitive financial data of approximately 3 million customers. A ransomware attack on a leading African financial services company by INC Ransom group is also detailed, with 100GB of data reportedly stolen. The report emphasizes the potential for widespread damage and chain attacks, urging proactive measures among financial institutions and related companies.

Pulse ID: 697222dd78fee9a83bbaf37d
Pulse Link: https://otx.alienvault.com/pulse/697222dd78fee9a83bbaf37d
Pulse Author: AlienVault
Created: 2026-01-22 13:15:09

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Africa #Bank #CyberSecurity #FinancialData #ICS #Indonesia #InfoSec #Korea #Malware #OTX #OpenThreatExchange #Phishing #RansomWare #bot #AlienVault

ValleyRAT_S2 Financial Data Theft Campaign

Pulse ID: 69655ae69953e1b6eaf1b3e4
Pulse Link: https://otx.alienvault.com/pulse/69655ae69953e1b6eaf1b3e4
Pulse Author: cryptocti
Created: 2026-01-12 20:34:46

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DataTheft #FinancialData #InfoSec #OTX #OpenThreatExchange #RAT #bot #cryptocti

Are you using OpenAI/Atlas, Chrome/Gemini, Perplexity/Comet – READ THIS!

Browsers with embedded AI or ChatBots have SERIOUS security flaws and the AI providers KNOW this.

Security researchers have demonstrated AI browsers are highly vulnerable to prompt injection, where hidden instructions manipulate an AI into doing things the user never asked for. In tests researchers embedded invisible commands inside an image on a web page, and when a user asked the browser to summarize the page, it instead navigated to the user's Perplexity account, extracted their email address, and sent that data to an external server.

The chief information security for one the offending browser stated that this issue remains an “unsolved security problem."

These prompt injection tricks that steal an email today could drain your bank account tomorrow.
https://editor.ne16.com/vo/?FileID=64a3dcfe-b1c8-47f6-89c9-530c80d95663&m=1a734256-a233-46fb-aa9a-cc30be49fbe0&MailID=10072641&listid=1009504&RecipientID=13279658821

#Internet #Browser #PromptInjection #Security #CyberSecurity #AI #ChatBot #DataProtection #PersonalData #FinancialData #Atlas #Gemini #Comet

Tạo website giúp tải dữ liệu tài chính lịch sử từ SEC MIỄN PHÍ cho các công ty niêm yết. Dữ liệu sẵn sàng dùng cho mô hình tài chính, định dạng sạch, không cần tìm kiếm thủ công trong từng bản kê khai. Đăng ký để nhận quyền truy cập sớm! #SEC #FinancialData #FreeTool #Startup #FinTech #DữLiệuTàiChính #CôngCụMiễnPhí #KinhDoanh #PhânTíchTàiChính

https://www.reddit.com/r/SideProject/comments/1q4ktgj/creating_a_website_that_lets_you_download_sec/

Finlyst ra đời để khắc phục vấn đề AI cung cấp dữ liệu tài chính sai lệch. Finlyst cung cấp dữ liệu SEC thời gian thực, chính xác cho các AI như ChatGPT. Công cụ này còn có các tính năng như báo cáo tài chính, biểu đồ tương tác và xuất CSV, tích hợp AI. Miễn phí dùng thử và đang tìm kiếm phản hồi từ người dùng!

#Finlyst #AI #FinancialData #ChatGPT #SEC #Startup #Tech #TàiChính #DữLiệu #KhởiNghiệp

http://finlyst.co

LSEG has partnered with OpenAI to provide its financial data and analytics to ChatGPT, enabling users to access LSEG's products through the AI platform as financial firms accelerate AI adoption.
#YonhapInfomax #LSEG #OpenAI #ChatGPT #FinancialData #ModelContextProtocol #Economics #FinancialMarkets #Banking #Securities #Bonds #StockMarket
https://en.infomaxai.com/news/articleView.html?idxno=93828

"I built #FindItFinancials because I believe that, if we make #financialdata accessible, we remove the last excuse not to analyze companies properly" 💪

Learn more about my PDF extractor here: https://thebarnblog.substack.com/p/introducing-finditfinancials?r=63kr4o

#investing #valueinvesting #financialanalysis #markets #thebarnblog

FX Risk is a Data Integration failure. Our Audit found FX Exposure (USD, EUR, CNY) causing volatile financial outcomes.

​The mandatory fix is clear: Centralize Treasury Management and hedging data in a fully integrated system. This requires a robust data infrastructure design.

​We identify the weakness, then prescribe the solution.

​Get your Data Vulnerability Audit ($5,000 USD).

https://datatofu.wordpress.com/services/micro-services-precision-on-demand/data-vulnerability-audit/

​#DataInfrastructure #DataGovernance #FinancialData #Analytics

#DataRigour is mandatory for financial integrity.

​Our Audit found a P2 risk: Volatile Sales Rebates causing unreliable financial outcomes. This is a common failure of enterprise data strategy.

​The fix? Extreme Data Rigor via big data analytics for precision forecasting on variable estimates. Don't let shaky data compromise your bottom line.

​Get your Data Vulnerability Audit ($5,000 USD).

https://datatofu.wordpress.com/services/micro-services-precision-on-demand/data-vulnerability-audit/

​#FinancialData #DataGovernance #BigDataAnalytics

This article provides a comprehensive schedule of key economic, financial, and policy events in South Korea for September 24, 2025, including government meetings, data releases, and regulatory updates.
#YonhapInfomax #SouthKorea #EconomicSchedule #GovernmentMeetings #FinancialData #PolicyUpdates #Economics #FinancialMarkets #Banking #Securities #Bonds #StockMarket
https://en.infomaxai.com/news/articleView.html?idxno=83106

Retrieve Account Balance: SQL Methods for Finding Latest Account Values
Retrieve Account Balance efficiently from your SQL database! Learn multiple methods: subqueries, window functions, and CTEs. Optimize for readability & performance. #SQLdatabase #AccountBalance #SQLqueries #WindowFunctions #DataAnalysis #FinancialData
https://tech-champion.com/database/sql-server/retrieve-account-balance-sql-methods-for-finding-latest-account-values/
...

Retrieve Account Balance: SQL Methods for Finding Latest Account Values
Retrieve Account Balance efficiently from your SQL database! Learn multiple methods: subqueries, window functions, and CTEs. Optimize for readability & performance. #SQLdatabase #AccountBalance #SQLqueries #WindowFunctions #DataAnalysis #FinancialData
https://tech-champion.com/database/sql-server/retrieve-account-balance-sql-methods-for-finding-latest-account-values/
...

Japan reports unexpected current account deficit of 257.6 billion yen in January, signaling potential economic challenges amid global trade uncertainties
#YonhapInfomax #JapanCurrentAccount #EconomicIndicators #TradeBalance #FinancialData #GlobalEconomy #Economics #FinancialMarkets #Banking #Securities #Bonds #StockMarket
https://en.infomaxai.com/news/articleView.html?idxno=53551

Key economic ministries in South Korea outline their schedules for the upcoming week, including meetings, policy announcements, and statistical releases across various sectors.
#YonhapInfomax #EconomicMinistries #GovernmentSchedule #PolicyAnnouncements #FinancialData #EconomicIndicators #Economics #FinancialMarkets #Banking #Securities #Bonds #StockMarket
https://en.infomaxai.com/news/articleView.html?idxno=51770

#Treasury Agrees to Interim Ban on #DOGE Accessing #FinancialData - Business Insider
https://www.businessinsider.com/judge-weighs-ban-musk-doge-accessing-americans-fiscal-data-2025-2

#checksandbalances
#treasurydata
#ElonMusk
#USpol

"The CFPB economists used a very conservative methodology, so the number is likely higher, but let's stick with that figure for now. The switching costs of changing banks – determining which bank has the best deal for you, then transfering over your account histories, cards, payees, and automated bill payments – are costing everyday Americans more than half a billion dollars, every year.

Now, the CFPB wasn't gathering this data just to make you mad. They wanted to do something about all this money – to find a way to lower switching costs, and, in so doing, transfer all that money from bank shareholders and executives to the American public.

And that's just what they did. A newly finalized Personal Financial Data Rights rule will allow you to authorize third parties – other banks, comparison shopping sites, brokers, anyone who offers you a better deal, or help you find one – to request your account data from your bank. Your bank will be required to provide that data.

I loved this rule when they first proposed it:"

https://pluralistic.net/2024/11/01/bankshot/#personal-financial-data-rights

#SwitchingCosts #USA #Banking #Banks #FinancialData #Interoperability #OpenData

Banks Profiting from Your Financial Data: Ethics Debate Rages 💸📊 #Banking #FinancialData #Ethics #Privacy #Regulation https://globalcommons.onrender.com/finance/banks-profiting-from-your-financial-data-ethics-debate-rages/

"The ‘science of finance’ is first and foremost a collective ethos. Its real achievement is not objective discovery but ethical articulation. […] It fixes the underlying terrain, it shows them the proper path to follow, and it compels them to stay on track. Without this anchor, all capitalists — whether they are small, anonymous day traders, legendary investors such as Warren Buffet, or professional fund managers like Bill Gross — would be utterly lost.

"Finance theory establishes the elementary particles of capitalization and the boundaries of accumulation. It gives capitalists the basic building blocks of investment; it tells them how to quantify these entities as numerical ‘variables’; and it provides them with a universal algorithm that reduces these variables into the single magnitude of present value."

(Nitzan and Bichler, 2009) 🧶

#ownership #economics #property #valuation #capitalism #power #finance #capital #actualization #timeSeries #financialData #investing #investment