Hunton Privacy

NOVEMBER 23, 2022

On November 9, 2022, the New York Department of Financial Services (NYDFS) released its second, proposed amendments to the Part 500 Cybersecurity Rule. The proposed amendments revise several aspects of the draft Cybersecurity Rule amendments released on July 29, 2022. Cybersecurity Plan.

Financial Services 55

Financial Services Cybersecurity Ransomware Compliance 55

DLA Piper Privacy Matters

AUGUST 8, 2023

Authors: Carolyn Bigg, Amanda Ge and Venus Cheung On July 24, 2023, the People’s Bank of China (“ PBOC ”) released the Measures for the Management of Data Security in the Business Areas Falling into PBOC’s Jurisdiction (Draft for Comment) (“ Draft Measures” ) for public consultation, which closes on August 24, 2023.

Financial Services 98

Financial Services Personal data Compliance Data collection 98

Data Protection Report

NOVEMBER 2, 2023

On November 1, 2023, the New York Department of Financial Services (NYDFS) finalized the second amendment to its cybersecurity regulations, which are available here. The rules contain the provisions we had described in the original NYDFS proposal a year ago (see our blog post here ), but include some changes.

Cybersecurity 105

Cybersecurity Compliance Financial Services Government 105

Hunton Privacy

NOVEMBER 8, 2023

On November 1, 2023, New York Governor Hochul announced that the New York State Department of Financial Services (“NYDFS”) amended its Cybersecurity Regulation applicable to covered financial institutions. The amended Cybersecurity Regulation will take effect in phases.

Cybersecurity 72

Cybersecurity IT Compliance Financial Services 72

Thales Cloud Protection & Licensing

NOVEMBER 20, 2023

Black Friday and Cyber Weekend: Navigating the Tumultuous Waters of Retail Cybersecurity sparsh Tue, 11/21/2023 - 05:01 As global consumers gear up for the much-anticipated shopping bonanza that is Black Friday and Cyber Weekend, retailers brace themselves for the frenzied onslaught of shoppers and the deluge of cyber threats lurking in the shadows.

Retail 83

Retail Cybersecurity Financial Services Encryption 83

Data Protection Report

NOVEMBER 14, 2022

On November 9, 2022, the New York Department of Financial Services (NYDFS) officially proposed changes to its cybersecurity regulation and opened a 60-day public comment period. Notice of Cybersecurity Event. NYDFS had issued a “pre-proposed” version of the changes in July of this year, which we had summarized here.

Cybersecurity 116

Cybersecurity Passwords Risk Compliance 116

Security Affairs

JUNE 15, 2023

According to a joint advisory published by cybersecurity agencies, the LockBit ransomware group has successfully extorted roughly $91 million in about 1,700 attacks against U.S. Lockbit was responsible for 18% of the total reported Australian ransomware incidents from April 1, 2022, to March 31, 2023. was the prevalent variant in 2023.

Ransomware 89

Ransomware Cybersecurity Agriculture Education 89

Hunton Privacy

JULY 5, 2023

On June 28, 2023, the New York Department of Financial Services (“NYDFS”) published an updated proposed Second Amendment (“Amendment”) to its Cybersecurity Regulation, 23 NYCRR Part 500. The updated proposed Amendment will be subject to an additional 45-day comment period.

Cybersecurity 113

Cybersecurity IT Compliance Financial Services 113

Security Affairs

NOVEMBER 20, 2023

The DarkCasino APT group leveraged a recently disclosed WinRAR zero-day vulnerability tracked as CVE-2023-38831. Researchers at cybersecurity firm NSFOCUS analyzed DarkCasino attack pattern exploiting the WinRAR zero-day vulnerability tracked as CVE-2023-38831. ” reads the report published by NSFOCUS.

Phishing 135

Phishing Archiving Financial Services Cybersecurity 135

IT Governance

NOVEMBER 13, 2023

million patient visits stolen in ransomware attack Date of breach: 23 October 2023 Breached organisation: Bluewater Health and Chatham-Kent Health Alliance Incident details: A database containing information about 5.6 Records breached: 79,582 Ontario hospitals update: information relating to 5.6

Data Privacy 75

Data Privacy Privacy Security Data breaches 75

IT Governance

OCTOBER 13, 2023

October is both Cybersecurity Awareness Month in the US and European Cyber Security Month in the EU – twin campaigns on either side of the Atlantic that aim to improve awareness of the importance of cyber security both at work and at home, and provide tips on how to stay secure.

Phishing 106

Phishing Financial Services Manufacturing Personal data 106

Data Matters

DECEMBER 6, 2022

On November 9, 2022, the New York Department of Financial Services (DFS) published its proposed second amendment to its cybersecurity regulations (23 NY CRR Part 500). This proposal follows a July 29 pre-proposal and comment period.

Cybersecurity 88

Cybersecurity Financial Services Privacy IT 88

Data Protection Report

JANUARY 30, 2023

For websites that “share,” the new law gives websites a choice: include a “Do not Sell or Share” link or use a “single, clearly-labeled link on the business’s internet homepage(s), in lieu of” that link. ( Cal. 1798.135(a).) The other four requirements were already present in New York’s General Business Law § 399-z. 7. a (Yes).

Privacy 115

Privacy Cybersecurity Personal data Insurance 115

Thales Cloud Protection & Licensing

DECEMBER 20, 2023

2024 Tech and Cybersecurity Forecast: Navigating New Frontiers in Business madhav Thu, 12/21/2023 - 05:15 People always want to comprehend what the future brings. 2024 promises to be a pivotal year, bringing transformative advancements and new challenges in tech and cybersecurity. The same is true for today’s business leaders.

Cybersecurity 83

Cybersecurity Blockchain Artificial Intelligence Encryption 83

IT Governance

DECEMBER 11, 2023

UK Information Commissioner warns about data privacy when using AI On 6 December, the UK Information Commissioner, John Edwards, told techUK’s Digital Ethics Summit 2023 that developers must embed privacy in their products to maintain consumer trust. In the meantime, if you missed it, check out last week’s round-up.

Data Privacy 98

Data Privacy Energy and Utilities Privacy Manufacturing 98

eSecurity Planet

AUGUST 10, 2023

Threat intelligence feeds are continually updated streams of data that inform users of different cybersecurity threats, their sources, and any infrastructure impacted or at risk of being impacted by those threats. May have redundant features with other cybersecurity tools in your existing toolset.

Cybersecurity 96

Cybersecurity Access Metadata Energy and Utilities 96

Thales Cloud Protection & Licensing

JANUARY 11, 2023

Thu, 01/12/2023 - 05:54. Throughout 2022, Thales hosted more than 40 webinars on a wide variety of cybersecurity topics, including, cloud security, data sovereignty, compliance, data threat trends, and rethinking approaches to role-based authentication. Security & Compliance for SAP Data in Financial Services. Stay tuned!

Compliance 83

Compliance Cloud Security Financial Services 83

Security Affairs

SEPTEMBER 10, 2023

Akamai announced it has mitigated the largest distributed denial-of-service (DDoS) attack on a U.S. financial company. Cybersecurity firm Akamai successfully identified and prevented a massive distributed denial-of-service (DDoS) attack targeting an unnamed, leading American financial institution.

Financial Services 124

Financial Services Ransomware Cybersecurity IT 124

The Last Watchdog

AUGUST 3, 2023

3, 2023 — Vaultree, a cybersecurity leader pioneering Fully Functional Data-In-Use Encryption (FFDUE), today announces a strategic integration with Tableau, a renowned platform for data visualization and business intelligence. Vaultree is also thrilled to announce its sponsorship at Black Hat USA 2023.

Encryption 100

Encryption Analytics Data Privacy Cybersecurity 100

IBM Big Data Hub

JUNE 5, 2024

million in 2023, according to IBM’s Cost of a Data Breach report. This downtime can harm a business’s reputation, as well as the global financial ecosystem. Traditionally, this has caused covered institutions to evaluate their cybersecurity protection measures.

Financial Services 46

Financial Services Cloud Data breaches Compliance 46

Data Protection Report

AUGUST 11, 2022

On July 29, 2022, the New York Department of Financial Services (NYDFS) announced a “pre-proposed outreach” of material proposed changes to almost every section of its cybersecurity regulations, and would affect each entity covered by the current regulations of 23 NYCRR Part 500. Cybersecurity Risk Assessments.

Cybersecurity 59

Cybersecurity Risk Passwords Compliance 59

Hunton Privacy

JUNE 9, 2022

The new law generally follows MDL-668’s provisions, adopting the model law’s broad definition of nonpublic information and requiring licensees to, in part, maintain a written information security program (“WISP”) and investigate cybersecurity incidents. Cybersecurity Event Investigation and Notification Requirements.

Insurance 107

Insurance Security Information Security Cybersecurity 107

Data Matters

JANUARY 19, 2023

On 17 January 2023, the new Network and Information Systems Security Directive (“ NIS2 Directive ”), which is aimed at establishing a minimum level of cybersecurity standards across the EU and is set to replace its predecessor (the NIS or “ NIS1 Directive ” ), entered into force.

Financial Services 88

Financial Services Cybersecurity Ransomware Marketing 88

Security Affairs

DECEMBER 17, 2023

CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Security 81

Security Data breaches Ransomware Artificial Intelligence 81

IBM Big Data Hub

DECEMBER 14, 2023

A cybersecurity strategy is not solely about managing risk across a business’ IT infrastructure.   When done correctly, cybersecurity can be a strategic initiative that supports product capability, organizational effectiveness and customer relationships.

Cloud 83

Cloud Security Data breaches Cybersecurity 83

Thales Cloud Protection & Licensing

MARCH 6, 2024

This report serves as a critical wake-up call for company executives and security professionals, emphasizing the urgent need to prioritize API security as a core component of their overall cybersecurity strategy. In 2023, the leading actor vector was business logic at a staggering 27% of all API attacks.

Security 87

Security Authentication Risk Cybersecurity 87

IBM Big Data Hub

DECEMBER 18, 2023

For organizations of all types—and especially those in highly regulated industries such as financial services, government, healthcare and telco—considerations including the rise of generative AI, evolving regulations and data sovereignty laws and ongoing security challenges must be top of mind.

Cloud 63

Cloud Financial Services Compliance Digital transformation 63

Data Protection Report

APRIL 23, 2024

He noted that whilst the growing emergence of Big Tech in financial services has already made life easier for consumers, it remains unclear how valuable their data will become in financial markets. cybersecurity, financial stability, interconnectedness, data concerns or market integrity).

Financial Services 45

Financial Services IT Marketing Retail 45

Security Affairs

APRIL 16, 2023

The phishing attacks began in February 2023, the IT giant reported. The recent campaign exclusively aims at organizations that deal with tax preparation, financial services, CPA and accounting firms, and professional service firms dealing in bookkeeping and tax. Ahead of the U.S. LNK) files.

Phishing 91

Phishing Financial Services Education Cybersecurity 91

Security Affairs

JUNE 16, 2023

The US authorities arrested the man in Arizona last month DoJ states that from at least as early as August 2020 to March 2023, Astamirov and other members of the LockBit ransomware gang committed wire fraud and compromised many computer systems worldwide attempting to extort the victims of ransomware attacks. organizations since 2020.

Ransomware 87

Ransomware Agriculture Education Government 87

KnowBe4

MAY 31, 2023

CyberheistNews Vol 13 #22 | May 31st, 2023 [Eye on Fraud] A Closer Look at the Massive 72% Spike in Financial Phishing Attacks With attackers knowing financial fraud-based phishing attacks are best suited for the one industry where the money is, this massive spike in attacks should both surprise you and not surprise you at all.

Phishing 79

Phishing File names Security awareness Risk 79

Info Source

DECEMBER 8, 2023

CURRENT VERTICAL MARKET BREAKDOWN The Finance segment (Banking and Financial Services combined with Insurance) represents the largest industry sector. The Insurance sector has proven to be resilient during the pandemic as well as the phase of instability in the Finance sector earlier in 2023 caused by high interest rates.

Marketing 40

Marketing Customer Experience Energy and Utilities Digital transformation 40

Security Affairs

AUGUST 16, 2023

A phishing campaign employing QR codes targeted a leading energy company in the US, cybersecurity firm Cofense reported. “Beginning in May 2023, Cofense has observed a large phishing campaign utilizing QR codes targeting the Microsoft credentials of users from a wide array of industries.”

Phishing 87

Phishing Energy and Utilities Insurance Manufacturing 87

IT Governance

MARCH 11, 2024

Cybernews’s research team discovered the MongoDB server in December 2023 and contacted Glosbe. billion to cyber crime in 2023 A new report from IC3 (the FBI’s Internet Crime Complaint Center) found that the US suffered $12.5 billion in cyber crime losses in 2023 – a 22% increase on 2022’s figures. New IC3 report: US lost $12.5

Data Privacy 79

Data Privacy Privacy Security Data breaches 79

Data Protection Report

NOVEMBER 1, 2023

Under the Federal Trade Commission’s (“FTC”) new amendment to the Safeguards Rule (the “Amended Rule”), non-banking financial institutions will have to report certain data breaches and other security events to the agency. This includes encrypting customer information both at rest and during transit.

Encryption 59

Encryption Cybersecurity Data breaches Financial Services 59

DLA Piper Privacy Matters

MARCH 3, 2023

Author: Sarah Birkett Cyber Security Strategy discussion paper launched This week saw the launch of a discussion paper for the Australian Government’s 2023-2030 Australian Cyber Security Strategy. The Strategy is expected to be finalised by the end of 2023. Health care and financial services remain the two highest reporting sectors.

Data breaches 52

Data breaches Security Paper Financial Services 52

Security Affairs

APRIL 6, 2023

Financial services are the main target for cybercriminals, so the threat for the organizations and their customers is severe. While financial services are the main target for cybercriminals, the threat to the organizations and their customers is severe. Cybernews contacted OCR Labs, and the company fixed the issue.

IT 87

IT Financial Services Access Risk 87