The Consumer Financial Protection Bureau has seen a rapid drop in the effectiveness of its cybersecurity program, according to a new report from the Fed's Office of Inspector General.

Class action lawsuits accuse the lender and servicer of negligence over the incident which compromised the sensitive data of tens of thousands of customers.

A critical U.S. cybersecurity law sunsets Sept. 30, and banks say losing it would weaken defenses against hackers.

The Federal Housing Administration also is removing personally identifiable information from the electronic data set and improving cybersecurity more broadly.

The database contained internal user emails, KPI report templates and other internal data, but no personal or financial customer data.

The incident appears connected to recent social engineering campaigns, including attacks tied to Salesforce.

The need for an insurance policy that covers AI risks is growing with the adoption of AI technologies.

With federal oversight easing, Rhode Island joins states pushing cybersecurity laws for finance companies not covered by federal bank regulators.

A Texas federal court ruled that borrowers suing Mr. Cooper over its data breach in 2023 had "sufficiently alleged injury," thus refusing to dismiss parts of the case.

Companies that lack artificial intelligence governance may spend hundreds of thousands of dollars more in responding to cyberattacks, IBM found.

One mortgage firm is out of business months after a cybersecurity incident, which compromised the personal information of over 30,000 of its former clients.

Deepfakes and phishing attacks are just some of the ways criminals are harnessing AI to scam homebuyers, say security experts.

Following strikes on nuclear sites, the U.S. warned of a heightened threat environment. Here's how Iran has targeted American banks in the past.

Real estate players disclosed losses in 12% of incidents, and the average financial hit was $16,829, according to data from the past decade.

A new executive order reverses digital ID initiatives, fraud alerts and federal data-sharing plans from which banks stood to benefit.

As lenders expand into HELOCs, fraudulent activity is up. Here's what lenders need to know to protect borrowers and their portfolios.

Whether in fake ads or misleading documents, anywhere fraud might be happening on Google, banks have a new way to quickly shut it down.

The fraudsters aren't doing anything new or sophisticated, but are successfully using familiar tactics, said reports from CertifID and FundingShield.

Bad actors use generative AI to create automated threats that are more sophisticated than earlier generations of malicious bots, and they are going after banks' APIs.

Three U.S. agencies lack a "comprehensive, government-wide strategy," according to a report that echoes complaints banks have made for years.