Data Breach Today

MARCH 31, 2022

It also examines the invasion's impact on financial services and how to modernize security operations. This edition analyzes how hackers exploited a misconfigured VPN device, gained access to Viasat's satellite network and caused a massive outage in Europe as Russia's invasion of Ukraine began.

Financial Services 300

Financial Services Access Security IT 300

Thales Cloud Protection & Licensing

NOVEMBER 13, 2023

Defending Financial Services Against Fraud in a Shifting Cyber Landscape sparsh Tue, 11/14/2023 - 05:05 As we approach International Fraud Awareness Week during 12-18 November 2023, taking stock of the evolving threat landscape and the vulnerabilities that financial services organizations face is crucial.

Financial Services 104

Financial Services Blockchain Encryption Cloud 104

Data Breach Today

APRIL 5, 2023

Josh Hankins of Qualys on Tips and Tricks He Learned as a Practitioner Before he became a chief technical security officer at Qualys, Josh Hankins was a cybersecurity leader in financial services. He learned how security audit failures are increasingly costly, and he devised new strategies for audit preparation.

Financial Services 147

Financial Services Security IT Cybersecurity 147

Data Breach Today

SEPTEMBER 23, 2021

CyberEdBoard Executive Member, Charmaine Valmonte, guest speaks at ISMG Virtual Cybersecurity Summit Asia: Financial Services Volmonte is VP, IT security and IT infrastructure, Aboitiz Group of Companies. She has more than 30 years of experience in the U.S. military and the private sector.

Security 173

Security Financial Services Military Risk 173

Thales Cloud Protection & Licensing

NOVEMBER 4, 2024

The Role of Secrets Management in Securing Financial Services madhav Tue, 11/05/2024 - 04:30 Secrets management is one of the top DevOps challenges. Among respondents who cited cloud/DevSecOps as a top source of emerging security concern, 61% identified secrets management as a top DevSecOps challenge.

Financial Services 62

Financial Services Security Compliance Digital transformation 62

Data Breach Today

AUGUST 26, 2021

Survey: Cybersecurity, Regulatory Concerns May Slow Digital Asset Adoption Although a majority of financial services executives predict that cryptocurrency will replace or rival fiat currency within the next five to 10 years, they say cybersecurity, regulatory and privacy issues are among the biggest obstacles to its adoption, according to a survey (..)

Financial Services 208

Financial Services Cybersecurity Security Privacy 208

Data Breach Today

JULY 7, 2022

The latest edition of the ISMG Security Report discusses how financial service organizations should respond to the new "fraud universe." It also shares how CISOs can incorporate social media into their threat intelligence programs and describes the skills required by today's security leaders.

Financial Services 244

Financial Services Security IT 244

Data Breach Today

AUGUST 23, 2021

Million Request-Per-Second Attack Launched by 20,000 Bots, Cloudflare Says Security firm Cloudflare says it detected and mitigated a 17.2 million request-per-second (rps) distributed denial of service attack, almost three times larger than any previously reported HTTP DDoS attack.

Financial Services 130

Financial Services Security IT 130

Krebs on Security

JULY 23, 2020

-based First American [ NYSE:FAF ] is a leading provider of title insurance and settlement services to the real estate and mortgage industries. Securities and Exchange Commission each announced they were investigating the company. It employs some 18,000 people and brought in $6.2 billion in 2019.

Insurance 327

Insurance Financial Services Mining Access 327

Data Breach Today

SEPTEMBER 22, 2022

$35 Million Fine From Securities and Exchange Commission Covers 5 Years of Mishaps Financial services giant Morgan Stanley will pay a $35 million fine to settle U.S.

Financial Services 231

Financial Services Security IT 231

IBM Big Data Hub

MARCH 25, 2024

For other financial services firms outside of the insurance sector, property accepted as loan security might face climate-related risks as well. Across the financial sector, there are transition risks to consider as we move to a low-carbon economy. Financial services firms can use the tool for “what if?”

Financial Services 85

Financial Services Insurance Risk Agriculture 85

Krebs on Security

MAY 3, 2019

A Pennsylvania credit union is suing financial industry technology giant Fiserv , alleging that “baffling” security vulnerabilities in the company’s software are “wreaking havoc” on its customers. Most alarmingly, this security control was purely illusory. billion in earnings last year.

Security 220

Security Passwords Financial Services Sales 220

The Last Watchdog

AUGUST 30, 2021

One of the most commonly repeated phrases in the security industry is, “Security teams hate their SIEM!”. Security Information and Event Management (SIEM) is not what it was 20 years ago. Here are five misconceptions, or myths, related to the SIEM, now security analytics platforms: • SIEMs are only good for compliance.

Analytics 230

Analytics Security Marketing Compliance 230

Krebs on Security

DECEMBER 27, 2019

Synoptek , a California business that provides cloud hosting and IT management services to more than a thousand customer nationwide, suffered a ransomware attack this week that has disrupted operations for many of its clients, according to sources. ” Synoptek has not yet responded to multiple requests for comment.

Ransomware 192

Ransomware IT Phishing Financial Services 192

Krebs on Security

JUNE 18, 2021

In May 2019, KrebsOnSecurity broke the news that the website of mortgage settlement giant First American Financial Corp. NYSE:FAF ] was leaking more than 800 million documents — many containing sensitive financial data — related to real estate transactions dating back 16 years. First American Financial Corp.

Insurance 320

Insurance Risk Financial Services Mining 320

Krebs on Security

MAY 31, 2019

On May 24, KrebsOnSecurity broke the news that First American had just fixed a weakness in its Web site that exposed approximately 885 million documents — many of them with Social Security and bank account numbers — going back at least 16 years. No authentication was needed to access the digitized records. ” .”

Financial Services 233

Financial Services Insurance Sales Authentication 233

The Last Watchdog

SEPTEMBER 24, 2024

The stolen information included full names, Social Security numbers, mailing addresses, phone numbers, and email addresses of millions of U.S., Investigations are ongoing, and several class-action lawsuits have been filed, alleging that the company failed to implement sufficient security measures. Canadian, and British citizens.

Authentication 215

Authentication IT ROT Compliance 215

The Last Watchdog

MARCH 31, 2020

Related: A firewall for microservices DevSecOps arose to insert security checks and balances into DevOps, aiming to do so without unduly degrading speed and agility. If you’re thinking that speed and security are like oil and water, you’re right. For a full drill down on our discussion, please give the accompanying podcast a listen.

Security 194

Security Privacy Risk Financial Services 194

Krebs on Security

APRIL 28, 2020

Last week, KrebsOnSecurity told the harrowing tale of a reader (a security expert, no less) who tried to turn the tables on his telephonic tormentors and failed spectacularly. In another test, the automated system asked for the account holder’s full Social Security number. “I was appalled that Citi would do that.

Financial Services 363

Financial Services Sales Authentication Risk 363

OpenText Information Management

AUGUST 26, 2024

Fast, easy, personalized, and engaging experiences are the name of the game in financial services. Here are six ways financial services organizations are tapping into the power of conversational experiences with mission-critical messaging: 1. Multi-factor authentication Security and privacy are key to building trust.

Financial Services 69

Financial Services Marketing Insurance Communications 69

Data Breach Today

NOVEMBER 10, 2020

Josh Magri of the Cyber Risk Institute Describes Enhancements to 'Cyber Profile' The Cyber Risk Institute this week is releasing a new version of its "Cyber Profile" risk assessment framework for the financial services industry that includes expanded information on third-party risk and cloud security.

Risk 205

Risk Financial Services Cloud Security 205

The Last Watchdog

SEPTEMBER 21, 2018

Speed and agility is the name of the game — especially for Software as a Service (SaaS) companies. It’s rise in popularity has helped drive a new trend for start-ups to go “Cloud Native,” erecting their entire infrastructure, from the ground up, leveraging cloud services like Amazon Web Services, Microsoft Azure and Google Cloud.

Cloud 203

Cloud Security Mining Financial Services 203

Data Breach Today

DECEMBER 8, 2022

Ted Miracco Plans to Grow Approov's Footprint in Healthcare and Financial Services Approov has landed a new CEO to help the mobile security upstart expand in the United States and capture more healthcare and financial services customers.

Financial Services 130

Financial Services Security IT 130

DLA Piper Privacy Matters

AUGUST 8, 2023

Authors: Carolyn Bigg, Amanda Ge and Venus Cheung On July 24, 2023, the People’s Bank of China (“ PBOC ”) released the Measures for the Management of Data Security in the Business Areas Falling into PBOC’s Jurisdiction (Draft for Comment) (“ Draft Measures” ) for public consultation, which closes on August 24, 2023.

Financial Services 98

Financial Services Personal data Compliance Data collection 98

The Last Watchdog

JULY 11, 2023

Related: Preserving the privacy of the elderly As more traders and investors engage in these investment avenues, it is crucial to adopt robust security measures to safeguard sensitive and regulated information. Continuous threat detection is a proactive approach to maintaining trading environment security.

Encryption 189

Encryption IT Risk Financial Services 189

Data Protection Report

NOVEMBER 8, 2023

On November 1, 2023, the New York Department of Financial Services (“NYDFS”) released the finalized amendments of Part 500 of its cybersecurity regulations. This notice requirement explicitly applies to cybersecurity incidents occurring to the covered entity itself, its affiliates, or a third-party service provider.

Financial Services 111

Financial Services Cybersecurity Compliance Government 111

Krebs on Security

APRIL 11, 2024

Cybersecurity and Infrastructure Security Agency (CISA) said today it is investigating a breach at business intelligence company Sisense , whose products are designed to allow companies to view the status of multiple third-party online services in a single dashboard. “We will provide updates as more information becomes available.”

Encryption 289

Encryption Passwords Access Financial Services 289

Security Affairs

OCTOBER 14, 2020

” G7 experts pointed out that these attacks often involve payments in crypto-assets, jeopardizing essential functions along with our collective security and prosperity. “The G7 is committed to working with our financial sectors to combat ransomware. ” continues the statement. ” concludes the statement.

Ransomware 140

Ransomware IT Financial Services Data Privacy 140

The Last Watchdog

AUGUST 15, 2018

In a move to blanket the Internet with encrypted website traffic, Google is moving forward with its insistence that straggling website publishers adopt HTTPS Secure Sockets Layer (SSL). Related: How PKI can secure IoT. This makes any personal information and details of financial transactions typed on HTTP web pages easy pickings.

Security 203

Security Encryption Authentication Financial Services 203

Krebs on Security

DECEMBER 13, 2022

Meanwhile, the hackers responsible are communicating directly with members through the InfraGard portal online — using a new account under the assumed identity of a financial industry CEO that was vetted by the FBI itself. That InfraGard member, who is head of security at a major U.S. InfraGard , a program run by the U.S.

Energy and Utilities 363

Energy and Utilities Sales Communications Data breaches 363

Thales Cloud Protection & Licensing

JANUARY 16, 2024

Key recommendations for Financial Services to improve cybersecurity and resilience in multi-clouds madhav Wed, 01/17/2024 - 05:46 The Digital Operational Resilience Act (DORA) will apply to the EU financial sector from 17 January 2025. As set out in its Article 2, DORA applies to the entire financial services sector.

Financial Services 83

Financial Services Cloud Cybersecurity Encryption 83

Krebs on Security

JULY 1, 2021

Financial services giant Intuit this week informed 1.4 Intuit says the change is tied to an “exciting” and “free” new service that will let millions of small business employees get easy access to employment and income verification services when they wish to apply for a loan or line of credit.

Financial Services 361

Financial Services Government Authentication IT 361

Thales Cloud Protection & Licensing

OCTOBER 14, 2024

2024 Thales Global Data Threat Report: Trends in Financial Services madhav Tue, 10/15/2024 - 05:17 Financial services (FinServ) firms are key players in the global economy. Nearly two-thirds (64%) of FinServ said it’s more complex to secure data in the cloud than on-prem, compared to 55% of general respondents.

Financial Services 62

Financial Services Cloud Compliance Authentication 62

Krebs on Security

SEPTEMBER 11, 2019

Unlike many stories here about cloud service providers being extorted by hackers for ransomware payouts , this snafu appears to have been something of an inside job. The company that handled that process for MyPayrollHR is a California firm called Cachet Financial Services. REVERSING THE REVERSAL.

Financial Services 279

Financial Services Cloud Insurance IT 279

Krebs on Security

MAY 19, 2021

New research shows how fraudsters can abuse wireless provider websites to identify available, recycled mobile numbers that allow password resets at a range of email providers and financial services online. Or better yet, a physical security key if that’s an option. The full Princeton study is available here (PDF).

Authentication 361

Authentication Passwords Financial Services Risk 361

Security Affairs

FEBRUARY 28, 2024

Analyzing the Email Security Landscape and exploring Emerging Threats and Trends. VIPRE Security Group’s latest report, “Email Security in 2024: An Expert Insight into Email Threats,” delves into the cutting-edge tactics and technologies embraced by cybercriminals this year. million as malicious.

Security 142

Security Phishing Communications Financial Services 142

Krebs on Security

SEPTEMBER 29, 2021

In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. An ad for the OTP interception service/bot “SMSRanger.” The 2fa SMS Buster bot on Telegram.

Passwords 352

Passwords Authentication Phishing Access 352