Revolut sent identity data, contact details, and documents to hackers posing as a government agency
THE SO WHAT
Revolut handing over identity data to impostors shows that social engineering around “official” requests is still the softest point in fintech security. If you handle KYC or identity docs, harden verification of inbound requests and train ops teams this week—your controls are only as strong as the least-skeptical support agent.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechNew York Seizes a Dozen Celebrity Deepfake Websites
New York seizing 12 deepfake sites targeting ~1,200 victims is a clear move to criminalize the infrastructure behind synthetic abuse, not just individual actors. If your platform touches user-generated media, assume prosecutors will expect proactive detection and takedown of deepfakes, not just reactive moderation.
Deep & Emerging TechCISA warns hackers are exploiting max severity GitLab flaw — urges all businesses to patch immediately
A 10/10 GitLab vuln on CISA’s KEV list with a three-day patch deadline means this is active, not theoretical — CI/CD and code-hosting are now prime targets. If you run GitLab anywhere in your stack, treat this like a production outage: patch, verify exposure, and log access to repos that could have been scraped.
Deep & Emerging TechDigital rights advocates urge EU to step in and save encryption from Canada's Bill C-22
Pushback on Canada’s Bill C-22 from global digital rights groups — and calls for EU intervention — show that national moves against end-to-end encryption have cross-border consequences. If your product depends on strong encryption, track this as a potential precedent that could force architectural changes or regional feature flags.
Deep & Emerging TechOxford Quantum Startup Cloq Wins Top Prize at Reuben Entrepreneurship Forum
Another quantum startup winning university pitch forums shows how much early talent and capital are clustering around quantum software and control layers. If you’re in adjacent infra — cryo, control electronics, error correction, compilers — now is the time to map where these teams might become downstream customers or partners.