LIVE · cybersecurity feed
Live wire
CVE-2026-20320 · Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available PatchesEU cyber scores look healthy, but 45% of surveyed IT providers take months to patchCVE-2026-120043 · SliceWP Affiliate Program Suite SQL Injection Exploited Before DisclosureCVE-2026-86596 · CLavaque s2Member Improper Control of Generation of Code Flaw Exploited Upon DisclosureCVE-2026-124194 · Microsoft Office Outlook Vulnerability Exploited Same Day as DisclosureCVE-2026-114432 · Rocklobster Contact Form 7 Flaw Exploited Same Day as DisclosureCVE-2026-123751 · Revmakx WP Duplicate Flaw Exploited Before CVE PublicationDetecting sleeper agents hiding in AI model neuronsNovember Patch Tuesday: An Overflowing Cornucopia of CVEsU.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacks
ai

Fingerprint trains specialized models to detect distinct fraud types

Fingerprint has introduced a new predictive tool called Fraud Score, designed to help organizations identify and mitigate specific types of fraudulent activity. The service utilizes machine learning to create specialized models that are trained on an individual company’s unique fraud outcomes, rather than relying on a generalized, one-size-fits-all risk score. By combining a client's…

ZeroDay News ·

Source: Help Net Security

Fingerprint has introduced a new predictive tool called Fraud Score, designed to help organizations identify and mitigate specific types of fraudulent activity. The service utilizes machine learning to create specialized models that are trained on an individual company’s unique fraud outcomes, rather than relying on a generalized, one-size-fits-all risk score. By combining a client's historical data with Fingerprint’s existing device intelligence signals, the system aims to provide more accurate, actionable insights for security teams.

The development of this tool addresses a growing challenge in the cybersecurity industry: the shift toward more sophisticated, AI-driven attack vectors. Because threats such as account takeover, payment fraud, promotion abuse, and fake account creation each display different behavioral patterns, industry observers have noted that traditional, static risk scoring often fails to capture the necessary nuances. This limitation typically forces internal fraud and engineering teams to dedicate significant resources to manual analysis and the construction of complex, custom rule sets.

Fraud Score is engineered to automate this process, effectively functioning as a turnkey solution for organizations that lack the resources to build and maintain their own machine learning models. The system operates by ingesting raw device intelligence data and correlating it with the specific fraud outcomes reported by the customer. As the client provides new data regarding successful or attempted fraud, the platform continuously retrains its models to adapt to evolving traffic patterns and emerging threats.

The company claims that this approach significantly improves detection rates compared to traditional methods. In a comparative evaluation conducted during the rollout, one client reported that the Fraud Score system identified nearly 50% more fraudulent activity than their previous in-house model, all while maintaining the same rate of legitimate user access. This suggests that the specialized nature of the models allows for higher precision in distinguishing between malicious actors and authentic customers.

The system is designed to be flexible, allowing security teams to either act on the platform’s predictions directly or integrate the data into existing decision-making workflows via an API. By focusing on distinct threat vectors—such as platform abuse, multi-accounting, and content abuse—the tool aims to reduce the signal-to-decision gap that often plagues risk management departments.

According to internal feedback from early adopters, such as Flink, the transition to this model-based approach has proven effective against more advanced fraudsters who were previously able to circumvent basic visitor ID blocking. By collaborating on a model informed by internal fraud analysis, the organization was able to intercept abuse at the point of entry before a transaction was finalized.

Ultimately, the platform is positioned as an alternative to solutions that rely on broad network rules or those that require extensive internal data science expertise. By centralizing the maintenance of these models, Fingerprint intends to provide organizations with the benefits of custom machine learning without the associated operational overhead. The service is currently available for integration into existing enterprise security stacks.

ai
ShareXLinkedInWhatsAppFacebook

More News

view all →
patch

Red Hat OpenShift 5 brings autonomous troubleshooting to hybrid clouds

Red Hat has announced the general availability of OpenShift 5, an update to its hybrid cloud application platform that introduces autonomous troubleshooting and enhanced security features. Designed to operate across data centers, cloud environments, and disconnected or edge deployments, the platform allows IT teams to manage virtual machines, containerized workloads, and artificial…

ai

Druva helps restore AI agents without rolling back entire environments

Druva has announced a new suite of capabilities under its AI Resilience initiative, specifically designed to facilitate the recovery of AI agents without the need to revert entire digital environments. This development addresses the growing operational reliance on AI agents, which are increasingly utilized by a significant majority of Fortune 500 companies. Previously, if an agent was deleted…

vulnerability

Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday

Microsoft has released its November security updates, addressing a total of 1,235 vulnerabilities across its product ecosystem. This release marks the fourth time in 2026 that the company has set a new record for the number of patches issued in a single month, following similar milestones in July, September, and October.

security

A CISO’s guide to trimming waste from a flat security budget

Chief Information Security Officers facing stagnant financial resources are increasingly turning to operational consolidation as a primary strategy for maintaining security posture. Ken Leeser, the CISO at Y Meadows, suggests that a frozen budget should be viewed as an opportunity to audit and simplify an organization's existing security stack rather than a purely negative constraint. This…

CVE-2026-20320high

Cisco BroadWorks and Openwave Flaws Actively Exploited Despite Available Patches

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security vulnerabilities affecting Cisco BroadWorks and the Openwave Messaging Webtop Media Transcoder to its Known Exploited Vulnerabilities (KEV) catalog. The agency’s inclusion of these flaws indicates that they are currently being leveraged in active, real-world attacks. Organizations utilizing these platforms…

vulnerabilitycritical

EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch

The European Union’s cybersecurity landscape presents a significant disconnect between high-level national policy scores and the operational realities of service providers, according to the 2026 assessment released by the European Union Agency for Cybersecurity (ENISA). While the agency’s revised EU Cybersecurity Index reports an average score of 71.53 out of 100 across member states, a…