article thumbnail

New EU Strong Customer Authentication Standards: Implications for Payment Service Providers

Data Matters

Under the revised Payment Services Directive (2015/2366) (PSD2), the European Banking Authority (EBA) and the European Commission were required to develop and adopt regulatory technical standards on strong customer authentication and common and secure open standards of communication. STRONG CUSTOMER AUTHENTICATION. What is SCA?

article thumbnail

GUEST ESSAY: The Top 5 online privacy and data security threats faced by the elderly

The Last Watchdog

Ever present threats. Phishing emails may ask for personal information like a log-in or Social Security number to authenticate your account, or they may urge you to share your credit card payment details. A criminal exploiting someone’s medical or insurance details to make fraudulent claims is known as medical identity theft.

Privacy 274
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Many Public Salesforce Sites are Leaking Private Data

Krebs on Security

Customers can access a Salesforce Community website in two ways: Authenticated access (requiring login), and guest user access (no login required). But after being presented with a document including the Social Security number of a health professional in D.C. Washington, D.C. That data later wound up for sale on a top cybercrime forum.

Access 287
article thumbnail

Ready for Take-off: Rising Above Airport Cybersecurity Challenges

Thales Cloud Protection & Licensing

Challenges of identity management for airports Managing the operational complexity with the ever-present threat of security breaches is no small task for airports. For example, implementing multifactor authentication (MFA) through mobile authenticator apps is impossible in airport areas where smartphones are prohibited.

article thumbnail

Cybersecurity Standards for the Insurance Sector – A New Patchwork Quilt in the US?

HL Chronicle of Data Protection

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

article thumbnail

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Krebs on Security

Code-signing certificates are supposed to help authenticate the identity of software publishers, and provide cryptographic assurance that a signed piece of software has not been altered or tampered with. WHO IS MEGATRAFFER? And on most of these identities, Megatraffer has used the email address 774748@gmail.com.

article thumbnail

RSA Conference 2023: Meet Thales Where the World Talks Security!

Thales Cloud Protection & Licensing

You can experience customer and partner presentations and learn more from one-on-one conversations with Thales experts. Sarah will also present on FIDO2 Passkeys and the Future of Passwordless. Victor is also presenting with AWS in a session titled ‘Bring Control, Trust and Transparency to AWS’.