article thumbnail

Financial Services Data – More at risk than you’d believe

Thales Cloud Protection & Licensing

One of the top findings from the 2018 Thales Data Threat Report, Financial Services Edition was that data breaches in U.S. financial services organizations are increasing at an alarming rate. Another “canary in the coal mine” episode showcasing this trend happened just last week, with a sizeable breach of HSBC U.S.

article thumbnail

NY Charges First American Financial for Massive Data Leak

Krebs on Security

According to a filing (PDF) by the New York State Department of Financial Services (DFS), the weakness that exposed the documents was first introduced during an application software update in May 2014 and went undetected for years.

Insurance 288
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

First American Financial Pays Farcical $500K Fine

Krebs on Security

However, documents from New York financial regulators show First American was unable to determine whether records were accessed prior to Jun 2018 (one year prior to fixing the weakness). According to the FBI, BEC scams are the most costly form of cybercrime today.

Insurance 269
article thumbnail

Oracle critical patch advisory addresses 284 flaws, 33 critical

Security Affairs

The bug affected the OCA’s Diameter Signalling Router component and its Communications Services Gatekeeper. The flaw also affected the Financial Services Analytical Applications Infrastructure, the Fusion Middleware MapViewer, and four three Oracle Retail components. ” reads the d escription provided by.

article thumbnail

MY TAKE: Here’s why we need ‘SecOps’ to help secure ‘Cloud Native’ companiess

The Last Watchdog

Poor configuration of cloud services can translate into gaping vulnerabilities—and low hanging fruit for hackers, the recent Tesla hack being a prime example. In that caper, a core API was left open allowing them to exploit it and begin using Tesla’s servers to mine cryptocurrency. We met at Black Hat USA 2018.

Cloud 152
article thumbnail

Q&A: Why SOAR startup Syncurity is bringing a ‘case-management’ approach to threat detection

The Last Watchdog

Some 27 percent of IT professionals who partook in a survey conducted by next-gen firewall supplier Imperva at RSA 2018 reported receiving more than 1 million security alerts daily. In many cases the tedious, first-level correlating of SIEM logs to sift out threats has moved beyond human capability.

article thumbnail

It’s time to think twice about retail loyalty programs

Thales Cloud Protection & Licensing

In this case, it looks as though the attackers had been on the Starwood network for somewhere around three years, mining out their reservations database (keep in mind that Marriott only acquired Starwood in 2016 ). As I was starting to write this blog, yet another retail program data breach occurred, for Marriott’s Starwood loyalty program.

Retail 66