Hunton Privacy

NOVEMBER 23, 2022

On November 9, 2022, the New York Department of Financial Services (NYDFS) released its second, proposed amendments to the Part 500 Cybersecurity Rule. Multifactor Authentication. The proposed amendments revise several aspects of the draft Cybersecurity Rule amendments released on July 29, 2022.

Financial Services 55

Financial Services Cybersecurity Ransomware Compliance 55

Data Breach Today

SEPTEMBER 23, 2021

CyberEdBoard Executive Member, Maria Filomena Gibe, guest speaks on panel at ISMG Virtual Cybersecurity Summit Asia: Financial Services The panel discusses: • How ‘zero trust’ has made security as a business enabler • Building a multi-factor authentication model based on ‘zero trust’ • Building ‘zero trust’ framework aligned with people, process and (..)

Financial Services 242

Financial Services Authentication Cybersecurity Security 242

HID Global

JANUARY 17, 2023

PKI enables companies to securely authenticate and authorize users, servers, applications and devices and encrypt all data and communication between them.

Financial Services 52

Financial Services Cloud Encryption Authentication 52

eSecurity Planet

SEPTEMBER 30, 2021

Underground services are cropping up that are designed to enable bad actors to intercept one-time passwords (OTPs), which are widely used in two-factor authentication programs whose purpose is to better protect customers’ online accounts. By using the services, cybercriminals can gain access to victims’ accounts to steal money.

Authentication 103

Authentication Phishing Financial Services Passwords 103

Data Breach Today

FEBRUARY 26, 2020

Security Experts Discuss Authentication Challenges in the Financial Services Sector Improvements in behavioral biometrics and analytics are changing the way many financial services firms approach authentication.

Analytics 191

Analytics Financial Services Authentication Access 191

Data Breach Today

SEPTEMBER 23, 2021

CyberEdBoard Executive Member Maria Filomena Gibe Speaks on Panel at ISMG Virtual Cybersecurity Summit Asia: Financial Services CyberEdBoard member Maria Filomena Gibe speaks on a panel at ISMG Virtual Cybersecurity Summit Asia: Financial Services.

Financial Services 162

Financial Services Authentication Cybersecurity Security 162

Rocket Software

AUGUST 17, 2020

Financial services organizations typically experience the most data breaches and hacks, which makes security a priority. For almost every industry, multi-factor authentication can be beneficial. What is Multi-factor Authentication? E-signatures, however, are a lot more difficult to authenticate and validate.

Authentication 52

Authentication Financial Services Passwords Insurance 52

HL Chronicle of Data Protection

APRIL 17, 2020

Continuing its focus on COVID-19’s impact on its regulated entities, on April 13, the New York Department of Financial Services (NYDFS) released new cybersecurity guidance in response to the COVID-19 pandemic. However, this shift has created new cybersecurity vulnerabilities and expanded the endpoints that criminals can target.

Financial Services 75

Financial Services Risk Cybersecurity Phishing 75

Hunton Privacy

APRIL 22, 2020

On April 13, 2020, the New York Department of Financial Services (“NYDFS”) issued guidance (“April guidance”) to all New York State entities covered under NYDFS’s cybersecurity regulation regarding assessing and addressing heightened cybersecurity risks due to the COVID-19 pandemic.

Financial Services 71

Financial Services Cybersecurity Phishing Risk 71

Krebs on Security

MAY 19, 2021

New research shows how fraudsters can abuse wireless provider websites to identify available, recycled mobile numbers that allow password resets at a range of email providers and financial services online. While you’re at it, consider removing your phone number as a primary or secondary authentication mechanism wherever possible.

Authentication 339

Authentication Passwords Financial Services Risk 339

Security Affairs

NOVEMBER 10, 2023

Treasury market and impacted some fixed income and equities transactions “The Securities Industry and Financial Markets Association first told members on Wednesday that ICBC Financial Services had been hit by ransomware software, which paralyses computer systems unless a payment is made, several people familiar with the discussions said.”

Ransomware 97

Ransomware Financial Services Marketing Authentication 97

Krebs on Security

SEPTEMBER 29, 2021

In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. OTP Agency took itself offline within hours of that story. . The 2fa SMS Buster bot on Telegram. Image: Intel 471.

Passwords 311

Passwords Authentication Phishing Access 311

Thales Cloud Protection & Licensing

NOVEMBER 20, 2023

The IBM 2023 Cost of a Data Breach Report , for example, highlights the continuous financial burden on retailers, which, coupled with potential reputational damage, emphasizes the dire need for retailers to prioritize and bolster their cybersecurity measures. For retailers, this poses a two-pronged challenge.

Retail 83

Retail Cybersecurity Financial Services Encryption 83

Data Matters

JANUARY 28, 2022

These recommendations are further detailed below, but two to note in particular: The Advisory recommends that organizations “require multi-factor authentication for all users, without exception.” Require multi-factor authentication (MFA) for all users.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

Krebs on Security

MAY 31, 2019

No authentication was needed to access the digitized records. On May 29, The New York Times reported that the inquiry by New York’s Department of Financial Services is likely to be followed by other investigations from regulators and law enforcement.

Financial Services 203

Financial Services Insurance Sales Authentication 203

Krebs on Security

JULY 23, 2020

The documents were available without authentication to anyone with a Web browser. According to a filing (PDF) by the New York State Department of Financial Services (DFS), the weakness that exposed the documents was first introduced during an application software update in May 2014 and went undetected for years.

Insurance 284

Insurance Financial Services Mining Access 284

Data Matters

FEBRUARY 25, 2021

This follows the FCA’s announcement in its 2020-21 business plan that payment services were one of its main supervisory priorities 1 and its temporary guidance of July 9, 2020, on prudential risk management and safeguarding in light of the COVID-19 pandemic ( Temporary COVID Guidance ). Authentication code.

Authentication 68

Authentication Paper Risk Insurance 68

IBM Big Data Hub

AUGUST 17, 2023

This technology has numerous potential applications in the financial services industry, supply chain management, voting systems and more. Also, CBDC can improve financial inclusion. billion people do not have access to basic financial services. According to the World Bank, around 1.7

Blockchain 73

Blockchain Financial Services Risk Authentication 73

Thales Cloud Protection & Licensing

JANUARY 10, 2022

The financial services ecosystem has evolved tremendously over the past few years driven by a surge in the adoption of digital payments. Security is paramount; digital payments are not only authorized but they must be authenticated as well. How Can We Secure The Future of Digital Payments? Tue, 01/11/2022 - 06:35.

Retail 126

Retail Security Financial Services Authentication 126

Thales Cloud Protection & Licensing

JANUARY 11, 2023

Throughout 2022, Thales hosted more than 40 webinars on a wide variety of cybersecurity topics, including, cloud security, data sovereignty, compliance, data threat trends, and rethinking approaches to role-based authentication. Security & Compliance for SAP Data in Financial Services.

Compliance 83

Compliance Cloud Security Financial Services 83

Thales Cloud Protection & Licensing

MARCH 6, 2024

Nearly one-third (28%) of all DDoS attacks on APIs focus on financial services organizations, the most targeted industry for this type of attack. Perform risk assessments specifically targeting API endpoints vulnerable to Broken Authorization and Authentication as well as Excessive Data Exposure.

Security 87

Security Authentication Risk Cybersecurity 87

The Security Ledger

DECEMBER 21, 2022

Paul speaks with Caleb Sima, the CSO of the online trading platform Robinhood, about his journey from teenage cybersecurity phenom and web security pioneer, to successful entrepreneur to an executive in the trenches of protecting high value financial services firms from cyberattacks. Read the whole entry. » MP3 ] | [ Transcript ].

Financial Services 52

Financial Services Cybersecurity Data breaches Authentication 52

The Last Watchdog

JULY 11, 2023

Enforce a culture of strong passwords, two-factor authentication and responsible data access practices to foster a security-conscious culture. He has over 25 years of global leadership experience within the financial services industry, having spearheaded development across Electronic Trading, OMS, Risk, Compliance and Data.

IT 161

IT Encryption Risk Financial Services 161

Hunton Privacy

JULY 1, 2022

On June 24, 2022, the New York State Department of Financial Services (“NYDFS” or the “Department”) announced it had entered into a $5 million settlement with Carnival Corp.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

Security Affairs

MARCH 8, 2022

Most of the impacted vendors are in the healthcare sector (55%), followed by IoT (24%), IT (8%), financial services (5%), and manufacturing (4%). The impact of these flaws is widespread, experts determine that the issues impact more than 150 device models from over 100 manufacturers.

Manufacturing 83

Manufacturing Access IoT Authentication 83

Hunton Privacy

OCTOBER 24, 2022

On October 18, 2022, the New York State Department of Financial Services (“NYDFS”) announced that EyeMed Vision Care LLC (“EyeMed”) agreed to a $4.5 The NYDFS’s consent order notes that EyeMed’s failure to comply with the Cybersecurity Regulation left EyeMed vulnerable to threat actors.

Cybersecurity 67

Cybersecurity Financial Services Risk Phishing 67

Security Affairs

APRIL 30, 2020

Security experts from Cybereason Nocturnus team discovered a new piece of Android malware dubbed EventBot that targets banks, financial services across Europe. Researchers from Cybereason Nocturnus team discovered a new piece of Android malware dubbed EventBot that targets banks, financial services across Europe.

Financial Services 106

Financial Services Libraries Encryption Authentication 106

Krebs on Security

APRIL 28, 2020

As it turned out, calling the phone number on the back of the credit card from the phone number linked with the card provided the most recent transactions without providing any form of authentication.” “I was appalled that Citi would do that. .

Financial Services 355

Financial Services Sales Authentication Risk 355

Krebs on Security

NOVEMBER 16, 2022

financial services firm Ameriprise uses the domain ameriprise.com; the Disneyland Team’s domain for Ameriprise customers is [link] [brackets added to defang the domain], which displays in the browser URL bar as ? . For example, one domain the gang has used since March 2022 is ushank[.]com Bank customers.

Phishing 257

Phishing Authentication Financial Services Access 257

Thales Cloud Protection & Licensing

SEPTEMBER 18, 2023

According to the 2022 Thales Data Threat Report – Financial Services Edition , 52% of U.S. financial services organizations report that they have experienced a data breach in the past. Even more alarming, 43% reported an increase in the volume, severity, and scope of cyberattacks in the last year.

Compliance 77

Compliance Financial Services Data breaches Encryption 77

Krebs on Security

DECEMBER 13, 2022

While the FBI’s InfraGard system requires multi-factor authentication by default, users can choose between receiving a one-time code via SMS or email. ” But USDoD said that in early December, their email address in the name of the CEO received a reply saying the application had been approved (see redacted screenshot to the right).

Sales 359

Sales Energy and Utilities Communications Data breaches 359

Security Affairs

JANUARY 17, 2022

.” The CPU will address critical vulnerabilities in Oracle Essbase, Graph Server and Client, Secure Backup, Communications Applications, Communications, Construction and Engineering, Enterprise Manager, Financial Services Applications, Fusion Middleware, Insurance Applications, PeopleSoft, Support Tools, and Utilities Applications.

Communications 104

Communications Financial Services Big data Retail 104

IT Governance

OCTOBER 13, 2023

EvilProxy phishing campaign targets Microsoft 365 accounts via indeed.com A phishing campaign identified by Menlo Security has been targeting senior executives in various industries – most notably banking and financial services, property management and real estate, and manufacturing – since July.

Phishing 105

Phishing Financial Services Manufacturing Personal data 105

Security Affairs

JUNE 11, 2023

Microsoft researchers warn of banking adversary-in-the-middle (AitM) phishing and BEC attacks targeting banking and financial organizations. Microsoft discovered multi-stage adversary-in-the-middle (AiTM) phishing and business email compromise (BEC) attacks against banking and financial services organizations.

Phishing 91

Phishing Financial Services Authentication Passwords 91

Security Affairs

AUGUST 26, 2021

The experts from the DIVD privately reported two flaws to Kaseya in early July, the issues are respectively an authenticated remote code execution vulnerability and a privilege escalation flaw that could allow an attacker to change his role from read-only user to admin. An employee published the alert on an online analyzing platform. .

Authentication 99

Authentication Financial Services Cloud Security 99

Security Affairs

JULY 27, 2021

Experts found three new zero-day flaws in the Kaseya Unitrends service and warn users to avoid exposing the service to the Internet. Security researchers warn of three new zero-day vulnerabilities in the Kaseya Unitrends service. An employee published the alert on an online analyzing platform.

Financial Services 105

Financial Services Authentication Cloud Government 105

Krebs on Security

JANUARY 25, 2022

Although he didn’t technically have an account with MSF, their authentication system is based on email addresses, so Jim requested that a password reset link be sent to his email address. ” According to the Native American Financial Services Association (NAFSA), a trade group in Washington, D.C.

Financial Services 209

Financial Services IT Data breaches Authentication 209