HL Chronicle of Data Protection

APRIL 17, 2020

Continuing its focus on COVID-19’s impact on its regulated entities, on April 13, the New York Department of Financial Services (NYDFS) released new cybersecurity guidance in response to the COVID-19 pandemic. Data Loss Prevention – ensure employees are not sending nonpublic information to personal email accounts and devices.

Financial Services 75

Financial Services Risk Cybersecurity Phishing 75

Thales Cloud Protection & Licensing

JANUARY 11, 2023

The Most Popular Data Security Webinars of 2022: Sovereignty, Cloud Security and Compliance Top the List. Throughout 2022, Thales hosted more than 40 webinars on a wide variety of cybersecurity topics, including, cloud security, data sovereignty, compliance, data threat trends, and rethinking approaches to role-based authentication.

Compliance 83

Compliance Cloud Security Financial Services 83

The Last Watchdog

MAY 23, 2023

Related: Collateral damage of T-Mobile hack Yet, APIs have also exponentially increased the attack vectors available to malicious hackers – and the software community has not focused on slowing the widening of this security gap. LW provides consulting services to the vendors we cover.) So be careful out there.

Digital transformation 200

Digital transformation Financial Services Encryption Communications 200

Krebs on Security

DECEMBER 13, 2022

Meanwhile, the hackers responsible are communicating directly with members through the InfraGard portal online — using a new account under the assumed identity of a financial industry CEO that was vetted by the FBI itself. That InfraGard member, who is head of security at a major U.S. Department of Defense.

Sales 360

Sales Energy and Utilities Communications Data breaches 360

Hunton Privacy

AUGUST 15, 2022

On July 29, 2022, the New York Department of Financial Services (“NYDFS”) posted proposed amendments (“Proposed Amendments”) to its Cybersecurity Requirements for Financial Services Companies (“Cybersecurity Regulations”). As part of the “training and monitoring” requirements under Section 500.14 Additional Requirements.

Financial Services 55

Financial Services Cybersecurity Risk Passwords 55

IT Governance

DECEMBER 11, 2023

Researchers from the German cyber security company Aplite discovered 3,806 servers from 111 countries accessible on the Internet. TB Concertus Design and Property Consultants Limited Source 1 ; source 2 (New) Professional services UK Yes 1.9 Organisation name Sector Location Data exfiltrated? TB Acero Engineering, Inc.

Data Privacy 101

Data Privacy Energy and Utilities Privacy Manufacturing 101

The Last Watchdog

FEBRUARY 15, 2024

Paul Greene , CIPP/US, CIPP/E, CIPM, FIP, Harter Secrest & Emery’s Privacy and Data Security practice group helps clients respond to data security incidents of all kinds. NetDiligence-authorized Breach Coach ® firms are selected based on their experience, competency, thought leadership, and industry engagement.

Data breaches 100

Data breaches Financial Services Big data Retail 100

The Last Watchdog

JULY 11, 2023

Related: Preserving the privacy of the elderly As more traders and investors engage in these investment avenues, it is crucial to adopt robust security measures to safeguard sensitive and regulated information. This includes scanning all materials, such as investor onboarding documents and communication.

IT 189

IT Encryption Risk Financial Services 189

Security Affairs

JANUARY 17, 2022

This pre-release announcement for Critical Patch Update (CPU) for January 2022 confirms that Oracle security updates will address 483 new security patches. “A Critical Patch Update is a collection of patches for multiple security vulnerabilities. This Critical Patch Update addresses 483 new security patches.

Communications 106

Communications Financial Services Big data Retail 106

IT Governance

MARCH 11, 2024

Source (New) Transport USA Yes 3,815 Okta Source 1 ; source 2 (Update) Cyber security USA Yes 3,800 Shah Dixit & Associates, P.C. million for security failings relating to a 2018 cyber attack on its mobile banking platform. UniCredit fined €2.8 about the recent rise in Facebook and Instagram account takeovers by scammers.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

The Last Watchdog

DECEMBER 12, 2023

Over-reliance on frameworks like the CVE program weakens organizations’ security posture and gives them an unrealistic sense of security. •No No critical findings were present among the Top 30 vulnerabilities for the Internet Software (or SaaS) industry, as defined by the public security scoring system CVSS.

Financial Services 100

Financial Services Risk Communications Marketing 100

The Last Watchdog

DECEMBER 21, 2021

Cloud hosted email services have come into wide use as the go-to communication and collaboration work tools for businesses far and wide. What’s more, many of the organizations migrating to cloud IT infrastructure services are patching together hybrid email systems, part on-premises and part cloud-hosted. Power source fails.

Cloud 222

Cloud Financial Services Communications Ransomware 222

IBM Big Data Hub

SEPTEMBER 13, 2023

The global digital payments ecosystem continues to evolve as new and incumbent financial institutions, payment networks, central banks, governmental agencies, businesses and other market players push for innovation. They all work toward the common goal of creating secure, compliant, real-time, ubiquitous and low-cost payment rails.

Cloud 80

Cloud Financial Services Compliance Marketing 80

IBM Big Data Hub

DECEMBER 4, 2023

The Digital Operational Resilience Act (DORA) is a landmark piece of legislation in the European Union (EU) that is designed to help fortify the operational resilience of the financial sector, making it fit for purpose in the digital age.

Financial Services 94

Financial Services Compliance Risk Business Services 94

The Last Watchdog

DECEMBER 6, 2018

Businesses at large would do well to model their data collection and security processes after what the IC refers to as the “intelligence cycle.” In the same vein, businesses at large can use the intelligence cycle as a model to detect and deter any attacks coming from foreign intelligence services. infrastructure from cyber attacks.

Security 149

Security Financial Services Manufacturing Data collection 149

Thales Cloud Protection & Licensing

NOVEMBER 20, 2023

The IBM 2023 Cost of a Data Breach Report , for example, highlights the continuous financial burden on retailers, which, coupled with potential reputational damage, emphasizes the dire need for retailers to prioritize and bolster their cybersecurity measures. Behind every system, software, and security protocol stands a human being.

Retail 83

Retail Cybersecurity Financial Services Encryption 83

The Last Watchdog

AUGUST 15, 2018

In a move to blanket the Internet with encrypted website traffic, Google is moving forward with its insistence that straggling website publishers adopt HTTPS Secure Sockets Layer (SSL). Related: How PKI can secure IoT. This makes any personal information and details of financial transactions typed on HTTP web pages easy pickings.

Security 203

Security Encryption Authentication Financial Services 203

OpenText Information Management

OCTOBER 18, 2022

It’s an essential part of enterprise communications for industries like healthcare, law, insurance and financial services. Why don’t you just send it over on a dinosaur! Or a carrier pigeon? Honestly, we’ve heard them all. But fax in 2022 is far from a punch line.

Insurance 57

Insurance Financial Services Communications IT 57

Data Matters

JANUARY 28, 2022

The advisory was promptly endorsed by the National Cyber Security Centre, a division of Government Communications Headquarters (“GCHQ”), a UK intelligence agency. Like an incident response plan, MFA has become a critical element of cybersecurity programs.

Cybersecurity 157

Cybersecurity Financial Services Authentication Government 157

The Last Watchdog

JUNE 15, 2023

The World Wide Web Consortium today announced a standardization milestone for a new browser capability that helps to streamline user authentication and enhance payment security during Web checkout. Publication of Secure Payment Confirmation as a Candidate Recommendation indicates that the feature set is stable and has received wide review.

Authentication 100

Authentication Communications Financial Services Retail 100

Security Affairs

APRIL 20, 2023

In 2022, the ICICI Bank’s resources were named a “critical information infrastructure” by the Indian government – any harm to it can impact national security. However, despite the critical status of bank infrastructure on the national level, the security of crucial data was not ensured. million files belonging to ICICI Bank.

Personal data 97

Personal data Phishing Risk Financial Services 97

IBM Big Data Hub

FEBRUARY 5, 2024

The Digital Operational Resilience Act (DORA) marks a significant milestone in the European Union’s (EU) efforts to bolster the operational resilience of the financial sector in the digital age. Furthermore, the RTS Article 6 highlights the necessity for all networked traffic, both internal and external, to be encrypted.

Encryption 73

Encryption Data Privacy Compliance Cloud 73

IT Governance

FEBRUARY 21, 2024

Fowler sent a responsible disclosure notice when he discovered the database and it was secured the following day. Source New Telecoms USA Yes 6,158 Nabholz Construction Company Employee Welfare Health Plan Source 1 ; source 2 New Healthcare USA Yes 5,326 Dawson James Securities, Inc. North Hill Home Health Care, Inc.,

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

The Last Watchdog

NOVEMBER 13, 2018

The nonstop intensity of these attacks is vividly illustrated by the fact that malicious bot communications now account for one-third of total Internet traffic. And innovation is percolating among newer entrants, like PerimeterX, Shape Security and Signal Sciences. Shifting security challenge.

Security 140

Security Digital transformation B2C B2B 140

Security Affairs

APRIL 30, 2020

Security experts from Cybereason Nocturnus team discovered a new piece of Android malware dubbed EventBot that targets banks, financial services across Europe. Researchers from Cybereason Nocturnus team discovered a new piece of Android malware dubbed EventBot that targets banks, financial services across Europe.

Financial Services 108

Financial Services Libraries Encryption Authentication 108

Security Affairs

APRIL 6, 2023

Financial services are the main target for cybercriminals, so the threat for the organizations and their customers is severe. The leak also affected Bloom Money and Admiral Money – two financial companies based in the UK, and Reed, which is the UK’s top recruitment agency. env) belonging to idkit.com, owned by OCR Labs.

IT 86

IT Financial Services Access Risk 86

Info Source

JULY 6, 2023

t starts with the prospect, who has researched alternatives based on her/his specific needs selecting a financial services provider and type of loan and submitting a request. The financial services institute requests a proof of identity and documentation to ensure that the person qualifies e.g., proof of residence, income etc.

Customer Experience 52

Customer Experience Communications Financial Services Insurance 52

Security Affairs

JUNE 9, 2019

Automated teller machine vendor Diebold Nixdorf has released security updates to address a remote code execution vulnerability in older ATMs. Diebold Nixdorf discovered a remote code execution vulnerability in older ATMs and is urging its customers in installing security updates it has released to address the flaw. Pierluigi Paganini.

Libraries 92

Libraries Communications Financial Services Risk 92

Thales Cloud Protection & Licensing

DECEMBER 20, 2023

This strategy addresses security concerns related to intellectual property and sensitive data in large language models (LLMs). This enhances data privacy and security and allows for greater control and efficiency in AI application deployment within the enterprise. However, with great power comes great responsibility.

Cybersecurity 83

Cybersecurity Blockchain Artificial Intelligence Encryption 83

Security Affairs

JUNE 20, 2020

Malicious Chrome browser extensions were used in a massive surveillance campaign aimed at users working in the financial services, oil and gas, media and entertainment, healthcare, government organizations, and pharmaceuticals. ” reads the analysis published by Awake Security. appeared first on Security Affairs.

Healthcare 116

Healthcare Financial Services Communications Security 116

Hunton Privacy

FEBRUARY 7, 2023

As the nature of digital assets continues to evolve and develop, it is imperative that data privacy issues are considered and addressed in tandem with the development of financial services policy and regulation to ensure a coherent, comprehensive and practical regulatory approach that can support a trusted, open, innovative and competitive market.

Data Privacy 61

Data Privacy Blockchain Compliance Privacy 61

Threatpost

JUNE 18, 2020

Trojan Chrome browser extensions spied on users and maintained a foothold on the networks of financial services, oil and gas, media and entertainment, healthcare and pharmaceuticals and government organizations.

Healthcare 97

Healthcare Financial Services Government Communications 97

Security Affairs

JANUARY 18, 2019

The bug affected the OCA’s Diameter Signalling Router component and its Communications Services Gatekeeper. The flaw also affected the Financial Services Analytical Applications Infrastructure, the Fusion Middleware MapViewer, and four three Oracle Retail components. Pierluigi Paganini.

Financial Services 69

Financial Services Libraries Mining Retail 69

Data Matters

MAY 27, 2021

require communications made to e-money customers and payment service or e-money promotions to be accurate and not emphasize any potential benefits of a payment service or e-money product (e.g., All UK payment service providers. The FCA has noted that its rules under BCOBS 2.3 lack of FSCS protection).

Marketing 68

Marketing Communications Compliance Financial Services 68

Security Affairs

SEPTEMBER 1, 2020

The Iranian hacker group has been attacking corporate VPNs over the past months, they have been hacking VPN servers to plant backdoors in companies around the world targeting Pulse Secure , Fortinet , Palo Alto Networks , and Citrix VPNs. ” reads the report published by Crowdstrike. Pierluigi Paganini.

Access 91

Access Financial Services Retail Insurance 91

Security Affairs

MARCH 19, 2020

Security experts from Bitdefender recently discovered a new TrickBot variant that is targeting telecommunications organizations in the United States and Hong Kong. The post Experts found a new TrickBot module (rdpScanDll) built for RDP bruteforcing operations appeared first on Security Affairs. Pierluigi Paganini.

Financial Services 113

Financial Services Education Communications IT 113

Data Matters

JUNE 24, 2021

In the Order, the SEC alleges that First American’s disclosures concerning the vulnerability were deficient because senior executives were not provided all available and relevant information, specifically that First American’s information security personnel had identified and failed to remediate the vulnerability months earlier in January 2019.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68