OpenAI has unveiled Astra, describing it as its most capable AI model yet, according to the supplied report. The model reportedly improves coding, cybersecurity, and computer and browser use. Initial access is through OpenAI’s Daybreak cybersecurity programme, with paid ChatGPT plans and API access expected to follow. OpenAI says Astra can help identify previously unknown vulnerabilities and outperform earlier models on software engineering benchmarks. However, its reported use of opaque recurrence has raised questions about reasoning transparency and oversight.

A major data breach has affected fintech lender Figure Technology Solutions after hackers exposed sensitive personal information linked to nearly one million accounts. The company confirmed that details from approximately 967,200 accounts were compromised following a social engineering attack targeting an employee. The exposed data includes names, email addresses, phone numbers, home addresses, and dates of birth. Although no financial account numbers were disclosed in the initial report, cybersecurity experts warn that the leaked information could still be used for identity theft, phishing attacks, and financial fraud campaigns targeting affected users.

Social Engineering Attack Enabled Unauthorized Access

Figure Technology Solutions reported that the breach occurred when a company employee was manipulated through a social engineering attack. Instead of breaching the platform’s underlying technology systems, the attacker exploited human vulnerability by tricking the employee into providing access that allowed files to be downloaded from internal systems.

According to the company, the suspicious activity was quickly detected and the unauthorized access was blocked soon afterward. The company also confirmed that it has hired a forensic cybersecurity firm to investigate which files were accessed and determine the full extent of the incident. Figure stated that it is communicating with partners and affected users while reviewing internal security procedures to prevent similar attacks in the future.

Blockchain Lending Platform Remains Technically Secure

Figure Technology Solutions operates a fintech lending platform built on the Provenance blockchain, a system designed to support transparent and secure financial transactions. Founded in 2018, the company has become a major player in digital lending and says it has facilitated more than $22 billion in home equity transactions through partnerships with banks, credit unions, and financial technology companies.

The company emphasized that the breach did not involve a direct attack on the blockchain infrastructure itself. Instead, attackers gained access through the compromised employee account, allowing them to download files stored within internal systems. Security specialists note that incidents like this demonstrate how even platforms built on advanced technologies can still be vulnerable when attackers target human behaviour rather than the technology itself.

Cybercriminal Groups Increasingly Exploit Employee Credentials

Security researchers say the tactics used in the attack resemble methods employed by well-known hacking groups such as ShinyHunters. These groups frequently impersonate IT support personnel or company administrators and persuade employees to reveal login credentials through phishing pages or fraudulent login portals.

Once attackers obtain access to corporate single sign-on systems, they can navigate across multiple internal platforms that share the same authentication system. Because these systems allow users to access several applications with one login, attackers who gain access can potentially reach large volumes of sensitive data quickly.

Experts say this type of attack has become increasingly common as cybercriminals focus more on manipulating employees instead of attempting to break complex security systems directly.

Experts Warn Personal Data Exposure Could Fuel Fraud Attempts

Cybersecurity experts caution that the exposure of personal information in data breaches can have serious consequences even when financial data is not directly compromised. Criminals can combine leaked information with other publicly available data to launch highly targeted phishing campaigns, impersonation attempts, or identity theft schemes.

Once attackers obtain detailed personal profiles of individuals, they can craft messages that appear to come from legitimate financial institutions, government agencies, or technology platforms. These scams often attempt to convince victims to reveal additional financial details or transfer funds under false pretenses.

As digital financial services continue expanding globally, fintech companies are becoming increasingly attractive targets for cybercriminals seeking access to large volumes of customer data.

Outlook

The Figure data breach highlights a growing cybersecurity challenge across the fintech industry: advanced financial technology alone cannot eliminate risks associated with human error and social engineering. As digital finance platforms continue to scale and manage larger volumes of sensitive data, companies will need to strengthen internal security practices alongside technological protections. Experts expect fintech firms to increase investment in employee cybersecurity training, identity verification tools, and multi-factor authentication systems to reduce vulnerabilities. The incident also reinforces the importance of combining technological innovation with robust operational security as fintech services become increasingly central to global financial infrastructure.

Financial technology startup Orca Fraud has secured 2.35 million dollars in new funding as it expands its fraud detection platform designed to protect digital payment ecosystems. The company plans to use the investment to enhance its real time fraud monitoring infrastructure and broaden its presence across global payment networks.

As digital payments continue to grow rapidly in emerging markets, financial institutions face increasingly sophisticated fraud threats. Payment fraud is evolving alongside new financial technologies, forcing fintech companies to develop smarter tools capable of identifying suspicious activity instantly.

Orca Fraud focuses on building technology that detects financial crime directly within payment flows rather than relying solely on traditional post transaction analysis. This approach allows the system to identify fraudulent behaviour as transactions occur, helping financial institutions respond before significant damage is done.

Emerging Markets Present Unique Fraud Detection Challenges

Fraud detection in digital finance is particularly challenging in emerging markets where financial systems are evolving rapidly. Traditional fraud prevention technologies were originally designed for more structured banking environments with consistent datasets and predictable user behaviour.

In many developing economies, financial ecosystems include a mix of mobile wallets, agent banking networks, digital payment platforms, and informal economic activities. These environments generate complex transaction patterns that can make fraud detection more difficult.

Legacy fraud monitoring systems typically rely on static identity checks performed when users first open accounts. Once customers are onboarded, these systems track a limited set of identifiers to detect suspicious activity.

However this model is becoming less effective as digital finance expands. Fraud networks increasingly exploit gaps between different payment systems, moving funds across multiple channels before detection systems can react.

The rapid growth of mobile financial services has also accelerated transaction speeds, reducing the time available for traditional monitoring systems to identify threats.

Orca’s Technology Monitors Transactions Across Multiple Payment Channels

Orca Fraud has developed a technology platform that monitors financial activity across multiple payment rails simultaneously. Instead of examining transactions only after they are completed, the system embeds machine learning intelligence directly into the payment flow.

This allows the platform to analyze behavioural patterns, transaction signals, and cross platform activity in real time. When suspicious behaviour is detected, the system can alert financial institutions or trigger automated security responses.

Multi channel monitoring has become increasingly important as digital financial ecosystems diversify. For example, a fraudulent scheme may begin with a mobile wallet transaction before quickly moving funds through bank transfers, card payments, or cryptocurrency exchanges.

Traditional fraud detection systems that monitor only one payment channel may fail to recognize these patterns early enough to prevent losses.

Orca’s platform attempts to address this issue by aggregating transaction data across different payment networks. By analyzing signals from multiple channels simultaneously, the system can detect complex fraud patterns that span several financial services.

Machine Learning Models Adapt to Regional Payment Behaviour

Another key feature of the Orca platform is its use of machine learning models trained on region specific financial data. Payment behaviour can vary significantly across different markets, particularly in regions where digital finance is developing quickly.

Many fraud detection tools rely on datasets built primarily from Western banking systems. These datasets may not accurately reflect the transaction patterns seen in emerging markets where mobile payments and informal economic activity are more common.

Orca’s system collects and analyzes payment data from multiple markets to build detection models tailored to regional financial environments. As the platform expands into new markets, transaction signals identified in one region can help improve fraud detection in another.

This cross market intelligence allows the system to adapt to evolving fraud tactics and strengthen detection capabilities over time.

Funding Will Support Infrastructure and Global Expansion

The newly raised funding will help Orca Fraud expand its technical infrastructure and improve the performance of its fraud detection platform. As payment networks process increasing transaction volumes, fraud monitoring systems must operate at high speed while maintaining low latency.

Financial institutions require fraud detection platforms capable of handling large transaction flows without disrupting payment processing. Real time analysis must occur within milliseconds to ensure suspicious transactions are identified quickly.

Orca plans to use the investment to enhance its enterprise grade architecture and scale its machine learning capabilities to support high volume financial environments.

The company is also focusing on expanding its partnerships with payment networks, financial institutions, and fintech platforms across emerging markets.

Outlook

As digital financial services continue expanding globally, fraud prevention technology will play a critical role in maintaining trust within payment ecosystems. Companies like Orca Fraud are developing next generation detection systems designed to monitor financial activity in real time and respond quickly to increasingly complex fraud threats.