This Week in Cybersecurity (2025-11-24): Cybersecurity & Wire Fraud Brief

Title Insurance Industry Lens

BEC & wire fraud risk remains elevated for all members of a home purchase with fresh consumer contact data exposed in the DoorDash breach (names, mobile numbers, email, addresses) creates fuel for highly targeted escrow/BEC phishing.
Ransomware pressure is high across industries (Under Armour, LG Energy Solution, IGT). Even when these incidents don’t hit the Title Industry directly, they increase risk across banks, lenders, and vendors you interact with.
Critical vulnerabilities in Fortinet FortiWeb (WAF), Chrome, and 7-Zip mean attackers have more tools to compromise endpoints and email accounts wich is typically the root of wire transfer fraud.

Attackers often target homebuyers, real estate agents, title insurance agents, and loan officers after stealing contact data from consumer platforms. The DoorDash breach gives criminals more accurate info to impersonate buyers and agents.
Expect more personalized phishing like “Hi Sarah, regarding your home closing…”

Big brand ransomware attacks (LG, IGT, Under Armour) stress overall supply chain stability.
Many title agents rely on upstream financial institutions, credit vendors, or cloud platforms and disruptions there can slow closings or expose PII indirectly.

Chrome and 7-Zip exploit activity makes endpoint compromise easier → leading to email compromise → leading to wire fraud.
Fortinet WAF exploitation matters if your IT uses FortiWeb to protect online portals or title production systems.

Re-validate wire verification procedures
- Require out-of-band voice verification for every wire instruction change.
Push phishing awareness to staff + realtors + buyers
- Specifically warn about “consumer brand impersonation” (DoorDash, Amazon, UPS, etc.).
Confirm vendor patching posture
- Ask IT vendors if they patched Chrome, 7-Zip, Fortinet, and Oracle Identity Manager vulnerabilities.

Implement a BEC-resistant email configuration (DKIM, DMARC, SPF, MFA).
Require semi-annual wire fraud tabletop exercises.
Strengthen vendor risk reviews (esp. MSPs, cloud platforms, title production systems).