A Bordeaux court ordered Caisse d’Épargne to reimburse a spoofing victim, rejecting the bank’s argument that the customer was negligent. The ruling sets a precedent for bank fraud cases across France.
A French court ordered Caisse d’Épargne to refund a spoofing scam victim after the bank blamed him for falling for the fraud. The ruling reinforces that banks can’t easily dodge reimbursement by claiming customer negligence.
A French court ordered Caisse d’Épargne to reimburse a customer scammed by a fake bank advisor, rejecting the bank’s claim that the victim was negligent.
A French court ordered Caisse d’Épargne to reimburse a customer who lost €5,900 to a fake advisor scam, rejecting the bank’s claim that the victim was grossly negligent.
A new malware called IronWorm is spreading through npm by poisoning legitimate packages with a Rust-based stealer that uses stolen credentials to self-replicate. It deploys an eBPF rootkit and targets AI development credentials, making it one of the more sophisticated supply chain attacks in recent memory.
Password manager Dashlane disclosed that fewer than 20 encrypted vaults were downloaded after a brute-force attack targeting 2FA protections. The vaults are encrypted, but the incident raises questions about how the attackers bypassed two-factor authentication.
Threat actor PCPJack turned 230 hijacked cloud servers across AWS, Google Cloud, and Azure into a covert SMTP relay network. The operation was exposed after the group left their entire toolkit — including source code and Sliver configs — on an open C2 server.
