Duo's Security Blog

AUGUST 22, 2022

In 2017, New York Department of Financial Services (NYDFS) passed cybersecurity regulation 23 NYCRR 500, requiring all financial services companies to implement multi-factor authentication (MFA). With one tap, users are able to quickly and easily login to their account.

Cybersecurity 98

Cybersecurity Financial Services VPN Technology 98

Security Boulevard

DECEMBER 8, 2021

The European Payment Services Directive 2 (PSD2) has mandated financial institutions to open their customers’ account information, including historical and current data, to the Third-Party Provider (TPP) their customers engage with.

Banking 95

Banking Financial Services Marketing Accountability 95

Krebs on Security

SEPTEMBER 29, 2021

The idea is that even if the user’s password gets stolen, the attacker still can’t access the user’s account without that second factor — i.e. without access to the victim’s mobile device or phone number. The OTP interception service featured earlier this year — Otp[.]agency

Passwords 321

Passwords Mobile Authentication Banking 321

Security Affairs

APRIL 6, 2023

Financial services are the main target for cybercriminals, so the threat for the organizations and their customers is severe. The leak also affected Bloom Money and Admiral Money – two financial companies based in the UK, and Reed, which is the UK’s top recruitment agency. env) belonging to idkit.com, owned by OCR Labs.

Banking 85

Banking Financial Services Identity Theft Accountability 85

Cisco Security

MARCH 23, 2021

In our Threat Trends blog series , we attempt to provide insight into the prevalent trends on the threat landscape. This is what we covered in part one of this Threat Trends release on DNS Security, using data from Cisco Umbrella , our cloud-native security service. Financial Services. Part 2: Industry trends.

DNS 137

DNS Financial Services Manufacturing Healthcare 137

Malwarebytes

OCTOBER 27, 2023

In a security blog about Octo Tempest Microsoft states: “Octo Tempest monetized their intrusions in 2022 by selling SIM swaps to other criminals and performing account takeovers of high-net-worth individuals to steal their cryptocurrency.”

Social Engineering 95

Social Engineering Engineering Ransomware Backups 95

Security Boulevard

MAY 14, 2021

Over $1 million was stolen from just under 200 accounts at the Memphis, TN based financial services company. The latest news that First Horizon Bank was the victim of a credential stuffing attack proves just how valuable credential harvesting can be.

Financial Services 59

Financial Services Banking Accountability 59

eSecurity Planet

SEPTEMBER 30, 2021

Underground services are cropping up that are designed to enable bad actors to intercept one-time passwords (OTPs), which are widely used in two-factor authentication programs whose purpose is to better protect customers’ online accounts. By using the services, cybercriminals can gain access to victims’ accounts to steal money.

Authentication 107

Authentication Social Engineering Phishing Banking 107

Malwarebytes

SEPTEMBER 30, 2021

Two-factor authentication is a great way to protect your online accounts, and we always recommend you turn it on. Yesterday, security intelligence firm, Intel 147, revealed it had noticed an uptick of activity in threat actors providing access to services in Telegram that circumvent two-factor authentication (2FA) methods.

Social Engineering 89

Social Engineering Banking Authentication Passwords 89

Thales Cloud Protection & Licensing

APRIL 29, 2024

This blog will briefly overview the most essential developments shaping the legislative and compliance environment. Digital Services Act (DSA) The DSA places greater responsibility and accountability on online platforms of all sizes. It targets illegal content, disinformation, and harmful practices.

Risk 71

Risk Manufacturing Digital transformation Cybersecurity 71

The Last Watchdog

DECEMBER 21, 2021

Some 11,800 computer software companies, 10,000 IT services vendors, 5,500 health care organizations and 3,200 financial services firms continue to maintain on-premises Exchange email servers, according to this report from Enlyft. Best practices a must. At the moment, ransomware attacks are front and center.

Marketing 222

Marketing Financial Services Ransomware Software 222

Security Affairs

MAY 10, 2022

“Frappo” was initially designed to be an anonymous cryptocurrency wallet based on a fork of Metamask and is completely anonymous, it doesn’t require a threat actor to register an account. Detailed analysis of the Phishing-As-A-Service Frappo is available here: [link]. To nominate, please visit:? Pierluigi Paganini.

Phishing 72

Phishing Banking Retail Financial Services 72

Thales Cloud Protection & Licensing

FEBRUARY 27, 2023

This is especially useful for those who do not have a bank account, as they can still participate in digital financial transactions through peer-to-peer payments with CBDCs. According to the World Bank account ownership rates vary across the world. More than 130 Central Banks have been exploring CBDCs since 2014.

Banking 71

Banking Cryptocurrency Financial Services Accountability 71

Centraleyes

DECEMBER 18, 2023

How DORA is Transforming the Management’s Role in Financial Services EU’s Digital Operational Resilience Act (DORA) ushers in a new era for financial services firms, placing extensive operational resilience requirements and heightened board oversight mandates on various entities within the EU’s financial sector.

Financial Services 52

Financial Services CISO Risk Technology 52

Thales Cloud Protection & Licensing

NOVEMBER 27, 2018

The cybersecurity regulation ( 23 NYCRR 500 ) adopted by the New York State Department of Financial Services (NYDFS) is nearly two years old. Even though these regulations only apply to New York, financial institutions across the U.S. The 2017 bill, the first of its kind, will be fully implemented as of March 1st, 2019.

Cybersecurity 72

Cybersecurity Financial Services Data privacy Encryption 72

Centraleyes

MAY 14, 2024

Jane is developing an AI algorithm for a financial service company. One example is the AI Bill of Rights in the United States which asserts that AI systems must be accountable, transparent, and secure. Prioritizing accountable AI governance communicates a clear message to all employees: utilize AI responsibly and ethically.

Government 52

Government Artificial Intelligence Risk Accountability 52

Security Boulevard

APRIL 29, 2024

This blog will briefly overview the most essential developments shaping the legislative and compliance environment. Digital Services Act (DSA) The DSA places greater responsibility and accountability on online platforms of all sizes. It targets illegal content, disinformation, and harmful practices.

Risk 72

Risk Manufacturing Cybersecurity Digital transformation 72

Krebs on Security

MARCH 23, 2020

A Twitter account for Web Listings Inc. Cached versions of weblistingsinc.org at archive.org show logos similar to the one featured on the Web Listings mailer, and early versions of the site reference a number of “business partners” in India that also perform SEO services. Image: Better Business Bureau.

Scams 259

Scams Marketing Internet Internet 259

Security Affairs

MAY 24, 2023

“These workers deliberately obfuscate their identities, locations, and nationalities, typically using fake personas, proxy accounts, stolen identities, and falsified or forged documentation to apply for jobs at these companies. correspondent or payable-through account sanctions.” ” continues the announcement.

Government 80

Government Cryptocurrency Media Technology 80

Security Boulevard

SEPTEMBER 26, 2022

accounts and other important data were targeted, Yahoo! Download the Venafi as a Service Data Sheet and Try a FREE 30 Day Trial. . Top Financial Services Encryption Threats and Insight from a Former Hacker! Consequences from the Yahoo Data Breach. s breach were vast and equally as destructive. Related Posts. UTM Medium.

Data breaches 69

Data breaches Digital transformation Cyber Attacks Encryption 69

Security Boulevard

JUNE 16, 2021

While the passing of PSD2 SCA is a watershed moment and a loud wake-up call for retail banking and financial services industries, readiness continues to confound financial institutions across the region. banks have failed to provide a sandbox for third-party service providers by the deadline. The reason? .

Banking 122

Banking Marketing Financial Services Retail 122

CyberSecurity Insiders

JUNE 4, 2021

So, how can we ride the digital wave for financial services and shape an innovative mobile experience that customers use in the long term? Our Digital First blog series. The blogs will cover: Ways banks can introduce stronger, yet still seamless, levels of authentication to protect the technology and prevent fraud.

Mobile 64

Mobile Banking Digital transformation Technology 64

Thales Cloud Protection & Licensing

NOVEMBER 1, 2018

Hopefully, this marks the beginning of true identity management solutions rather than the complex, fragmented set of user account management systems that we typically see today. Check back in for part two of my blog, slated to post tomorrow. appeared first on Data Security Blog | Thales eSecurity. Blockchain to the rescue?

Banking 70

Banking Financial Services Data privacy Mobile 70

Duo's Security Blog

JUNE 28, 2022

Previous legislation – including the New York State Department of Financial Services cybersecurity regulations in 2017 and California Consumer Privacy Act in 2018 – established guidelines for protecting consumer information that could only be enforced on a regional level. The FTC’s amendments to the Safeguards Act changes all of that.

Authentication 52

Authentication Financial Services Technology Information Security 52

Thales Cloud Protection & Licensing

JULY 9, 2018

Tokens are increasingly being used to secure other types of sensitive personally identifiable information (PII), including social security numbers, telephone numbers, email addresses, account numbers, as well as protected heathcare information (PHI). Financial Services. Human Resources.

Digital transformation 75

Digital transformation Financial Services Healthcare Encryption 75

Thales Cloud Protection & Licensing

MARCH 22, 2018

This blog was originally published on Business Reporter. The concept of payment, at its most fundamental, is simply about people agreeing to exchange goods or services. The stated aim of decentralisation in Bitcoin, for example, is to remove the middle man entirely, and instead end fraud and financial disputes through transparency.

Banking 108

Banking Financial Services Accountability Technology 108

Security Boulevard

OCTOBER 19, 2022

million downloads per day across industries including financial services, technology, retail, healthcare and manufacturing. airlines; the top four credit card issuers; three out of the four top accounting and consulting firms; four of the five top U.S. . -- Tim Ramlot, Software Engineer at Jetstack and cert-manager maintainer.

Retail 69

Retail Software Marketing Engineering 69

CyberSecurity Insiders

FEBRUARY 3, 2022

Most customers and practitioners start a cloud native security journey by implementing shift-left security testing and preventive controls while also gaining visibility into risks and artifact inventories across registries and cloud accounts. For more information, please visit the Aqua Blog. About Aqua Security.

Risk 52

Risk Digital transformation Financial Services Retail 52

McAfee

DECEMBER 23, 2019

It comes as no surprise that financial services, insurance, and healthcare were popular targets, given their proximity to sensitive, easily-monetizable data. In that case, an unauthorized person used Boost numbers and PIN codes to break into an unknown number of customer accounts. Key Actions to Take in 2020 .

Healthcare 54

Healthcare Insurance Artificial Intelligence Authentication 54

Centraleyes

MARCH 3, 2024

Who : Identify key stakeholders, from leadership to employees, ensuring effective communication and accountability. This engagement promotes a shared understanding of risks and encourages a culture of accountability. In dissecting compliance risk , explore the “who, what, where, when, and how” for a robust strategy.

Risk 52

Risk Technology Accountability Marketing 52

LRQA Nettitude Labs

JULY 5, 2023

In addition to the topics below that you can expect to see reviewed and discussed in the forms of blog posts or webinars, LRQA Nettitude would also like to extend an open invitation for feedback and collaboration. In the initial stages of implementation, regulators might provide guidance on how to demonstrate accountability.

Artificial Intelligence 52

Artificial Intelligence Data privacy Social Engineering Risk 52

CyberSecurity Insiders

FEBRUARY 4, 2022

Most customers and practitioners start a cloud native security journey by implementing shift-left security testing and preventive controls while also gaining visibility into risks and artifact inventories across registries and cloud accounts. For more information, please visit the Aqua blog. . . About Aqua Security.

Risk 52

Risk Digital transformation Financial Services Retail 52

SecureWorld News

SEPTEMBER 10, 2020

The company says that ransomware accounted for 41% of cyber claims. These industries include consumer businesses, healthcare, and financial services. In a blog post outlining the report, authors listed four things that organizations must takeaway when reading the report. And the most popular attack vector was phishing.

Cyber Insurance 55

Cyber Insurance Insurance Ransomware Cyber Attacks 55

Thales Cloud Protection & Licensing

APRIL 4, 2019

Two years ago this would have seemed impossible, but clearly the shift to the cloud is accelerating, even for the most security conscious organizations like banks and financial services companies. The post A New Era for Data Protection appeared first on Data Security Blog | Thales eSecurity.

Banking 66

Banking Encryption Marketing Financial Services 66

The Last Watchdog

NOVEMBER 9, 2020

In one very recent caper, the attackers targeted the CFO of a financial services firm, as he worked from home, Sherman says. This includes refraining from using a work email to sign up for random online accounts or web apps. This column originally appeared on Avast Blog.).

IoT 279

IoT Healthcare Internet Internet 279

Thales Cloud Protection & Licensing

NOVEMBER 16, 2017

Ahead of the May 2018 legislation, we’ve been asking organisations if they’re #FITforGDPR – whether they’re ready to improve their personal data protections, as well as take on the increased accountability for data breaches, should they occur. As expected, responses have been mixed. A role of responsibility.

Retail 63

Retail Data breaches Financial Services Healthcare 63

Security Affairs

JULY 30, 2019

Experts spotted a Java ATM malware that was relying on the XFS (EXtension for Financial Service) API to “ jackpot ” the infected machine. In that case, the malware was relying on the XFS (EXtension for Financial Service) API to “ jackpot ” the infected machine. Introduction.

Malware 89

Malware Banking Advertising Financial Services 89