[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuXDBu3OJ1KeFFu8qrw-eGi575O_UlbOPTCuRapVx73I":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"45c5a964-a3ff-4920-8795-552558f6a9e0","Hackers arrested over €30M bank fraud exploiting service provider flaw","hackers-arrested-over-30m-bank-fraud-exploiting-service-provider-flaw-f425d9","Four cybercriminals were arrested in Brazil, and three others were charged in Europe over allegations that they exploited a vulnerability at a service provider, allowing them to withdraw funds from Commerzbank customers' bank accounts. [...]","Four individuals have been arrested in Brazil, and three others are facing charges in Europe for their alleged involvement in a €30 million bank fraud scheme. The attackers exploited a vulnerability at a service provider, enabling them to make unauthorized withdrawals from Commerzbank customer accounts. The operation, dubbed 'Operation Klonen' by Brazilian authorities, involved sophisticated money laundering techniques and was supported by German law enforcement.","Hackers arrested in Brazil and charged in Europe for €30M bank fraud via service provider flaw.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fhackers-arrested-over-30m-bank-fraud-exploiting-service-provider-flaw\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F06\u002F11\u002Farrest.jpg","2026-08-14T18:04:26+00:00","2026-08-14T20:00:16.035142+00:00",7,[17],{"name":18,"type":19},"Commerzbank","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":20,"icon":22,"name":23,"slug":24},null,"Breaches","breaches",[26,28,33,38],{"category":27},{"id":20,"icon":22,"name":23,"slug":24},{"category":29},{"id":30,"icon":22,"name":31,"slug":32},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":46,"vendors":133},[47,76,104],{"slug":48,"name":49,"problem":50,"products":51},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"slug":77,"name":78,"problem":79,"products":80},"patch-management","Automated patch management","Known holes get closed in days, not months.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":77,"product_name":101,"url":102,"description":103},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":105,"name":106,"problem":107,"products":108},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"corelight","Corelight","\u002Fvendor-logos\u002Fcorelight.png","open-ndr","Corelight Open NDR","https:\u002F\u002Fcorelight.com\u002Fplatform\u002F","Network detection and response based on Zeek and Suricata.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-network","Darktrace \u002F NETWORK","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Fhybrid-network","Network detection and response based on learning normal behaviour.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":150},"service-provider-flaw-enables-30m-bank-fraud","Service Provider Flaw Enables €30M Bank Fraud","Attackers exploited a vulnerability in a third-party service provider to gain unauthorized access to Commerzbank customer accounts, resulting in €30 million in fraudulent withdrawals. This case highlights the critical risk posed by supply chain weaknesses — an organization's security posture is only as strong as its least-secure vendor. Banks and financial institutions that rely on external service providers inherit their vulnerabilities if proper vetting, monitoring, and contractual security obligations are not enforced. The scale of the fraud demonstrates that unpatched or unmonitored third-party flaws can be weaponized for sophisticated, cross-border financial crime.",[139,140,141,142,143,144,145,146,147,148,149],"CIS Control 15 – Service Provider Management","CIS Control 7 – Continuous Vulnerability Management","NIST SP 800-161 – Supply Chain Risk Management","NIST AC-2 – Account Management","NIST AC-6 – Least Privilege","NIST IR-6 – Incident Reporting","NIST DE.CM-3 – Personnel Activity Monitoring","GDPR Article 28 – Processor Obligations","GDPR Article 32 – Security of Processing","PCI DSS Requirement 12.8 – Third-Party Service Provider Management","ISO\u002FIEC 27036 – Information Security for Supplier Relationships",{}]