Carter Pape

Key insight : The Fed, FDIC and OCC promised banks notice within 72 hours of a compromise of their confidential supervisory information.

Key insight : The ring coached recruits to keep debit cards off Apple Pay and unlinked from Cash App because those actions "can cause alerts to [a] bank."

Key insight: A credit union is suing TruStage, the dominant financial-services vendor to credit unions, for allegedly failing to deliver the security

Key insight : Banks and payment apps, not Washington, function as the country's de facto national scam-reporting system, holding a loss picture several times larger than the government's.

Key insight: The ruling lets both of the state's fraud theories proceed, including that Early Warning created "an atmosphere conducive to fraud" — a

Key insight: The report gives banks funds-availability flexibility and information-sharing safe harbors while declining to shift authorized-scam liability onto them.

Key insight : Happen's entire earnings beat came from the provision line. Pre-provision profit missed analyst estimates by about 5%.

| Key insight : The scheme relied not on stolen checks but a person who could pass a branch's identity check, and the ring sourced that by recruiting homeless people and people with substance abuse problems.

| Key insight : CISA's update requires vendors to list every component in software, including borrowed code buried several layers down.

What's at stake : Three of the four largest U.S. banks by assets run BioCatch software, Wells Fargo among them.