MEDIUMVulnerability
Global

Call Federal Credit Union goes live with Mahalo platform

·Source: Finextra

Updated:

Executive Summary

Call Federal Credit Union (‘Call Federal’) has gone live with Mahalo Banking’s Thoughtful Banking platform. This launch expands the credit union’s digital banking capabilities with new self-service functionality, enhanced security and accessibility features, and a more user-friendly experience for members.

Analysis

Call Federal Credit Union (‘Call Federal’) has gone live with Mahalo Banking’s Thoughtful Banking platform. This launch expands the credit union’s digital banking capabilities with new self-service functionality, enhanced security and accessibility features, and a more user-friendly experience for members.
Source Attribution

Originally published by Finextra on Oct 6, 2026.

Related Threats

MEDIUMVulnerability

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs

The Hacker News
CRITICALVulnerability

NVD CRITICAL: CVE-2026-104736 — The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in ver...

The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter during the checkout AJAX action. The value is passed through sanitize_text_field(), which does not strip serialized object syntax, then stored in the LearnPress session table and later fed to LP_Helper:

CVE-2026-104736
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-110653 — The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress...

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in all versions up to, and including, 5.7.4. This is due to a non-atomic read-modify-write on the OTP verification attempts counter in the `verifyOTP` function: the counter is incremented using a stale in-memory value with no conditional `W

CVE-2026-110653
NIST NVD