Security Affairs

JANUARY 18, 2019

The advisory fixed the CVE-2016-1000031 flaw, a remote code execution (RCE) bug in the Apache Commons FileUpload, disclosed in November last year. The Commons FileUpload library is the default file upload mechanism in Struts 2, the CVE-2016-1000031 was discovered two years ago by experts at Tenable.

Financial Services 64

Financial Services Libraries Mining Retail 64

ARMA International

APRIL 18, 2022

Certain sectors, such as banking, financial services, health, and insurance have their own data protection and privacy requirements. 2016/679 (EU, April 27). 2016/679, Art. 2016/679 (EU, April 27). 2016/679, Art. The United States does not have a Federal data protection law that protects all consumers.

Personal data 99

Personal data GDPR Privacy Records Management 99

Privacy and Cybersecurity Law

SEPTEMBER 20, 2016

On September 13, 2016, the New York Department of Financial Services introduced a new rule that would require banks, insurance […].

Financial Services 40

Financial Services Insurance Cybersecurity Data breaches 40

Security Affairs

OCTOBER 12, 2020

Trickbot has been active since 2016, at the time the authors of the author designed it to steal banking credentials. Over the years, the threat evolved and its operators implemented a modular structure that allowed them to offer the threat as malware-as-a-service. ” concludes Microsoft.

Security 96

Security Financial Services Ransomware Access 96

Krebs on Security

OCTOBER 24, 2019

It’s worth noting that the MyPayrollHR fraud wasn’t the first time Cachet has been tripped up by the demise of a payroll company: In 2016, the collapse of Monterey, Calif. But on Oct. 23 — less than 24 hours before another weekly payroll rush — Pasadena, Calif. But, on Sept.

Communications 160

Communications Financial Services Insurance Risk 160

Hunton Privacy

SEPTEMBER 15, 2016

On September 13, 2016, New York Governor Andrew Cuomo announced a proposed regulation that would require banks, insurance companies and other financial services institutions to establish and maintain a cybersecurity program designed to ensure the safety of New York’s financial services industry and to protect New York State from the threat of cyber (..)

Cybersecurity 40

Cybersecurity Financial Services Insurance Information Security 40

Security Affairs

MARCH 19, 2020

TrickBot is a popular banking Trojan that has been around since October 2016, its authors have continuously upgraded it by implementing new features. Security experts from Bitdefender recently discovered a new TrickBot variant that is targeting telecommunications organizations in the United States and Hong Kong.

Financial Services 110

Financial Services Education Communications IT 110

The Last Watchdog

JANUARY 30, 2019

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Risk 117

Risk Financial Services Insurance Cybersecurity 117

Security Affairs

NOVEMBER 16, 2020

The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack. The attackers are attempting to exploit the need to install additional security software when South Korean users visit government or financial services websites. .

Financial Services 100

Financial Services Phishing Government Security 100

Hunton Privacy

JANUARY 3, 2017

On December 28, 2016, the New York State Department of Financial Services (“DFS”) announced an updated version of its cybersecurity regulation for financial institutions (the “Updated Regulation”). The Updated Regulation will become effective on March 1, 2017.

Cybersecurity 40

Cybersecurity Financial Services Authentication Information Security 40

Security Affairs

MARCH 1, 2019

This morning I wrote about a large-scale cyber attack that hit the I nternational Civil Aviation Organization (ICAO) in November 2016, Emissary Panda was suspected to be the culprit. defense contractors , financial services firms, and a national data center in Central Asia.

IT 77

IT File names Financial Services Communications 77

Security Affairs

JANUARY 13, 2019

“On December 13, 2018, we observed another large ServHelper “downloader” campaign targeting retail and financial services customers.” ” The attacks leveraging the two malware were not targeted in nature attackers aimed at financial services organizations worldwide. . ” concluded Proofpoint.

IT 86

IT Financial Services Retail Ransomware 86

Data Matters

SEPTEMBER 20, 2018

Office of the Comptroller of the Currency (OCC) announced its decision (the Fintech Charter Decision) to begin accepting applications from financial technology (fintech) companies for special purpose national bank charters. The Fintech Charter Decision is discussed in greater detail in a prior Sidley Banking and Financial Services Update.

Financial Services 68

Financial Services Paper Marketing Privacy 68

Ascent Innovations

MAY 17, 2018

Few unexpected nation states are rising in the ranks of sponsored attackers, including spying on thousands of people across 20 countries via an Android malware campaign, and another one infiltrated Russia’s Cozy Bear liar and uncovered the hack of DNC during the 2016 elections. Cyber-social. End users continue to be the best line of defense.

Energy and Utilities 40

Energy and Utilities IoT Mining Financial Services 40

Krebs on Security

MARCH 23, 2020

“Worldwide, Appco Group has raised hundreds of millions of pounds for some of the world’s biggest charities, delivered pay-TV and broadband services, financial services, security and many other successful marketing solutions on a diverse range of products,” the press release enthuses.

Sales 249

Sales Marketing Financial Services IT 249

The Last Watchdog

MARCH 1, 2019

SOAR, if you haven’t heard, is a hot new technology stack that takes well-understood data mining and business intelligence analytics methodologies — techniques that are deeply utilized in financial services, retailing and other business verticals – and applies them to cybersecurity. Demisto launched in May 2016.

Digital transformation 141

Digital transformation Marketing Analytics Risk 141

CGI

DECEMBER 2, 2016

Fri, 12/02/2016 - 04:15. One of the hottest topics at this year’s Sibos conference in Geneva, Switzerland was open APIs (application programming interfaces), and how their introduction is causing concern among some financial institutions, while offering promising opportunities for early adopters. Open APIs: A coming of age.

Financial Services 40

Financial Services Digital transformation Marketing Data structuring 40

HL Chronicle of Data Protection

OCTOBER 25, 2019

On 12 July 2016, the European Commission issued its adequacy decision concerning the Privacy Shield framework for the transfer of personal data from the EU to the U.S. In a nutshell, the report of the third review found that the U.S. Background. This covers most U.S. Annual Review.

Privacy 40

Privacy IT Personal data Financial Services 40

Threatpost

OCTOBER 28, 2019

UniCredit was also hit with hacking incidents in September-October 2016 and June-July 2017.

Cybersecurity 41

Cybersecurity Financial Services Data breaches GDPR 41

The Last Watchdog

AUGUST 22, 2019

Consider that it was a misconfigured open-source Web Application Firewall , running on Amazon Web Services, that gave a former Amazon IT staffer a path to crack into this financial services giant. it’s almost a perfect storm.

Digital transformation 117

Digital transformation Compliance Risk Security 117

CGI

DECEMBER 22, 2016

Thu, 12/22/2016 - 02:16. Today’s banks are facing a number of unprecedented challenges, including the rise in financial technology (FinTech) firms. These innovative startups are focused on taking a share of bank customers, products and revenues through new digital services, and staying ahead of them is high on banks’ agendas.

Financial Services 45

Financial Services Retail IoT Insurance 45

Data Protection Report

AUGUST 18, 2021

China’s Cyber Security Law ( CSL ), enacted in 2016, requires operators of critical information infrastructure ( CII ) to follow a number of enhanced security obligations, including storing within China all personal information and important data collected or generated during their operations in China.

Financial Services 52

Financial Services Data collection Security Communications 52

Thales Cloud Protection & Licensing

DECEMBER 11, 2018

In this case, it looks as though the attackers had been on the Starwood network for somewhere around three years, mining out their reservations database (keep in mind that Marriott only acquired Starwood in 2016 ). Since in Tech we often travel “for a living”, I found in my bag an older Starwood preferred guest card. Not used in years.

Retail 66

Retail Data breaches Encryption Mining 66

Data Matters

NOVEMBER 13, 2017

Its new Principles reflect its view of the positive potential for new data aggregation services while emphasizing the need to develop a workable industry model that addresses consumer privacy, limits data security risks, promotes transparency and consumer choice and protects the accuracy of financial data.

Financial Services 60

Financial Services Privacy Access Marketing 60

Data Matters

MARCH 12, 2019

The Safeguards Rule specifies that financial institutions subject to the FTC’s jurisdiction must develop, implement, and maintain a comprehensive information security program for handling customer data.

Privacy 68

Privacy IT Information Security Insurance 68

Data Matters

OCTOBER 8, 2020

December 2016: Evegeniy Mikhailovich Bogachev, creator of Cryptolocker. financial institutions or firms that perform “critical financial services.”. Attackers and payees may be designated sanctioned parties under OFAC’s existing cyber-related sanctions authority. Since 2015, the U.S. 1, 2020, [link].

Ransomware 68

Ransomware Compliance Risk Government 68

CGI

MAY 2, 2016

Mon, 05/02/2016 - 05:28. 1 Gartner, IT Key Metrics Data 2016: Key Industry Measures: Banking and Financial Services Analysis: Multiyear, December 14, 2015. 2 IDC, IDC Financial Insights Forecast, Worldwide IT Spending 2013-2018: Worldwide IT Spending Guide, 1H15, May 2015. ravi.kumarv@cgi.com.

Customer Experience 40

Customer Experience Financial Services Analytics Cloud 40

IT Governance

APRIL 2, 2019

T he pensions firm ’s campaign, which took place between October 2016 and October 2017, violated the PECR (Privacy and Electronic Communications Regulation s ). . The ICO ( Information Commissioner’s Office ) has fined Grove Pension Solutions £40,000 for sending nearly 2 million unsolicited marketing emails. .

Marketing 68

Marketing Personal data GDPR Compliance 68

Preservica

NOVEMBER 6, 2017

The 2016 IGI Benchmark Report on The Governance of Long-term Digital Information confirmed that nearly all organizations represented have digital records and information that keep or need to keep in excess of 10 years.

Digital preservation 56

Digital preservation Information governance Government Archiving 56

CGI

JANUARY 12, 2017

This is the final blog in my three-part series on the disruptive impact of financial technology (FinTech) firms on today’s banks. The blog series is based on the findings of CGI’s 2016 survey of 1,670 consumers across 8 countries, which assessed consumer perspectives on 12 leading digital FinTech services.*

Financial Services 40

Financial Services Education Marketing Risk 40

CGI

FEBRUARY 9, 2016

Tue, 02/09/2016 - 05:35. Any colour as long as it’s black. p.butler@cgi.com. Henry Ford never actually said to a customer 'you can have any colour you like as long as it's black'. He did ,however, say it to his sales people to stop them asking (and trying to sell) many different variants of the Model T.

Retail 40

Retail Analytics Marketing Financial Services 40

CGI

JUNE 15, 2016

Wed, 06/15/2016 - 06:57. Financial Services. Now is the time for your organisation to pilot Robotic Process Automation. p.butler@cgi.com. Zuboff’s Laws…. Everything that can be automated will be automated”. Everything that can be informated will be informated". For Example: Insurance. Local Government. Central Government.

Financial Services 40

Financial Services Retail Insurance Government 40

CGI

MAY 26, 2016

Fri, 05/27/2016 - 00:37. Financial institutions in the U.S. The combined and increased focus of the Securities Exchange Commission (SEC), the Financial Industry Regulatory Authority (FINRA) and the Commodity Futures Trading Commission (CFTC) on cybersecurity issues are indicative of U.S. regulators’ state of mind. .

Cybersecurity 40

Cybersecurity Risk Financial Services Compliance 40

Hunton Privacy

NOVEMBER 10, 2016

On November 9, 2016, the Centre for Information Policy Leadership (“CIPL”) at Hunton & Williams LLP and AvePoint released the results of a joint global survey launched in May 2016 concerning organizational preparedness for implementing the EU General Data Protection Regulation (“GDPR”).

GDPR 45

GDPR Data Privacy Compliance Privacy 45

Info Source

JUNE 7, 2018

compared to 2016. The Forrester Wave : ECM – Business Content Services (Login or payment required). [1] more than in 2016. Offering software “Made in Germany”, its customers are primarily large mid-sized firms, corporations, organizations and administrations.

ECM 40

ECM Marketing Content services Artificial Intelligence 40

CGI

JANUARY 12, 2017

As first mentioned in part 1 of this three-part blog series, the rise in financial technology (FinTech) firms is having a disruptive impact on today’s banks, threatening their customer base and revenue through the launch of new digital services. Add new comment. Blog moderation guidelines and term of use.

Financial Services 40

Financial Services IoT Risk Insurance 40

CGI

APRIL 13, 2016

Wed, 04/13/2016 - 02:25. Many solutions for the financial services industry are moving to a cloud-based model. Payment trends and their implications for national payment infrastructures. Complicated because the parts are interconnected both domestically and globally. Why not payment market infrastructures?

Marketing 40

Marketing Financial Services Cloud Risk 40