Tag: finance
-
Vietnamese Hacker Group Deploys New PXA Stealer Targeting Europe and Asia
A Vietnamese-speaking threat actor has been linked to an information-stealing campaign targeting government and education entities in Europe and Asia with a new Python-based malware called PXA Stealer.The malware “targets victims’ sensitive information, including credentials for various online accounts, VPN and FTP clients, financial information, browser cookies, and data from gaming software,” First seen on…
-
What is Digital Lending Application (DLA) Audit?
Digital lending has emerged as a game-changer, reshaping the borrowing experience with unprecedented speed, convenience, and accessibility. Gone are the days of endless paperwork and prolonged waiting times”, now, individuals can secure loans within minutes from the comfort of their homes. However, as financial transactions shift to digital platforms, the importance of adhering to compliance…
-
Critical vulnerabilities persist in high-risk sectors
Finance and insurance sectors found to have the highest number of critical vulnerabilities, according to Black Duck. Finance and insurance industry faces highest … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/15/finance-industry-vulnerabilities/
-
The Magic ITAM Formula for Navigating Oracle Java Licensing
IT asset managers have their hands full when they’re trying to strike the best path forward for their companies’ use of Java. Finance leaders at many companies are turning to ITAM professionals and asking them to reduce the cost of Java with a magic ITAM formula. Azul Vice President of Worldwide Channel Sales Simon Taylor……
-
Bank of England U-turns on Vulnerability Disclosure Rules
The UK’s financial regulators have discarded plans to force critical suppliers to disclose new vulnerabilities First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/bank-england-uturns-vulnerability/
-
Yorozu Corporation Faces Cyberattack, Delays Financial Report Submission Amid Data Breaches
Yorozu Corporation, a major Japanese manufacturer of automotive components, announced that it would apply for an extension to the submission deadline for its semi-annual securities report due to the impact of a ransomware attack on its systems. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/yorozu-corporation-cyberattack/
-
Neue Phishing-Mail in Umlauf: Paypal-Konto angeblich gesperrt
First seen on golem.de Jump to article: www.golem.de/news/bezahldienst-phisher-drohen-paypal-kunden-mit-gesperrten-konten-2410-190354.html
-
FTC orders Marriott to pay $52M and enhance security practices
The Federal Trade Commission said an investigation revealed that poor security practices led to three data breaches at Marriott and Starwood hotels be… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366613513/FTC-orders-Marriott-to-pay-52M-and-enhance-security-practices
-
Ransomware attack leaks social security numbers of over 230,000 Comcast customers
Financial Business and Consumer Solutions (FBCS), a debt collection agency previously used by Comcast, was the subject of a ransomware attack in Febru… First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/ransomware-attack-leaks-social-security-numbers-of-over-230-000-comcast-customers/
-
Android Botnet ‘ToxicPanda’ Bashes Banks Across Europe, Latin America
Chinese-speaking adversaries are using a fresh Android banking Trojan to take over devices and initiate fraudulent money transfers from financial inst… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/android-botnet-toxicpanda-bashes-banks-europe-latin-america
-
Federal Reserve Bank of Atlanta’s Ria Aiken: Championing inclusion, opportunity
Tags: financeFirst seen on scworld.com Jump to article: www.scworld.com/news/federal-reserve-bank-of-atlantas-ria-aiken-championing-inclusion-opportunity-in-cybersecurity
-
How the Trump Administration May Reshape Security, Privacy
Attorney Lisa Sotto on Anticipated Changes in Regulatory Focus at FTC and CISA. Donald Trump’s return to the White House with a renewed focus on deregulation may shift the priorities of federal agencies in enforcing data privacy and cybersecurity policy, said Lisa Sotto, partner at Hunton Andrews Kurth and chairperson of the DHS Data Privacy…
-
Protecting Your Clients During the Holiday Season: A Guide for Family Offices
The holiday season is a time of joy and celebration, but it’s also a prime time for cybercriminals to target high-net-worth individuals. While family offices are constantly focused on protecting their clients’ financial assets and personal information year round, the holiday season is one where extra vigilance is needed as people often lower their guard……
-
Exposed United Nations Database Left Sensitive Information Accessible Online
More than 115,000 files related to UN Women included detailed financial disclosures from organizations around the world, and personal details and test… First seen on wired.com Jump to article: www.wired.com/story/un-women-database-exposure/
-
Moody’s Rating adds telecoms, airlines, utilities to highest risk category
The financial ratings service says industry digital reliance increases cyber risk. First seen on cyberscoop.com Jump to article: cyberscoop.com/moodys-rating-high-risk-telecom-aviation-power/
-
Hot Topic breach: Has your credit card info been compromised?
If you’re wondering whether your personal and financial data has been compromised in the massive Hot Topic breach, you can use two separate online tools to check: Have I … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/12/hot-topic-breach/
-
AI amplifies systemic risk to financial sector, says India’s Reserve Bank boss
First seen on theregister.com Jump to article: www.theregister.com/2024/10/15/india_rbi_ai_risks/
-
Evaluating your organization’s application risk management journey
In this Help Net Security interview, Chris Wysopal, Chief Security Evangelist at Veracode, discusses strategies for CISOs to quantify application risk in financial terms. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/12/chris-wysopal-veracode-application-risk-management/
-
The Hidden Costs of API Breaches: Quantifying the Long-Term Business Impact
API attacks can be costly. Really costly. Obvious financial impacts like legal fines, stolen finances, and incident response budgets can run into the hundreds of millions. However, other hidden costs often compound the issue, especially if you’re not expecting them. This article will explore the obvious and hidden costs of API breaches, their long-term business…
-
Cyberattack Cost Oil Giant Halliburton $35 Million
In its latest financial report, Halliburton said the recent cybersecurity incident has so far cost the company $35 million. The post Cyberattack Cost Oil Giant Halliburton $35 Million appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/cyberattack-cost-oil-giant-halliburton-35-million/
-
U.S. agency cautions employees to limit phone use due to Salt Typhoon hack of telco providers
US CFPB warns employees to avoid work-related mobile calls and texts following China-linked Salt Typhoon hack over security concerns. The US government’s Consumer Financial Protection Bureau (CFPB) advises employees to avoid using cellphones for work after China-linked APT group Salt Typhoon hackers breached major telecom providers. The Consumer Financial Protection Bureau (CFPB) is a U.S.…
-
DDoS Attacks Targeting ISPs are Different Here’s How
ISPs face a few unique challenges and risks when it comes to DDoS attacks. Their size and complexity make them bigger targets for hackers, while their unique structural features require more tailored defenses. ISPs can be both direct targets of hackers and targets-by-association, as they host hundreds or thousands of customers large companies, banks,… First…
-
It’s Award Season, Again
Tags: ai, attack, ceo, control, cyber, cybersecurity, defense, detection, dns, finance, fraud, incident response, infrastructure, intelligence, mssp, resilience, service, threat, update, zero-trust -
ISMG Summit Highlights Growing Third-Party Vendor Threats
Financial Services Experts Call for Stronger Focus on Third-Party Risk Management. Financial services leaders and cybersecurity experts said at Information Security Media Group’s 2024 Financial Services Summit that third-party vendor security risks required the need for proactive, multi-layered security frameworks to combat the growing threat landscape. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-summit-highlights-growing-third-party-vendor-threats-a-26772
-
Preparing for DORA Amid Technical Controls Ambiguity
The European Union’s Digital Operational Resilience Act requires financial entities to focus on third-party risk, resilience, and testing. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/preparing-for-dora-amidst-technical-controls-ambiguity
-
AI increases fraud risk, fintechs say
Financial firms monitor for fraud by looking for unusual activity, but an artificial intelligence model can be trained to transact like a real person…. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-fraud-risk-fintech/731898/
-
Assessing Banking Product Risks to Improve KYC Programs
Trapets CEO Gabriella Bussien on Why Banks Need to Fine-Tune, Automate KYC Processes. KYC protocols traditionally focus on account-level verification, but examining KYC at the product level can help banks assess risk more accurately. Asking targeted questions based on product risk enables institutions to detect potential financial crimes, said Gabriella Bussien, CEO of Trapets. First…
-
Microchip Technology reports $21.4M expense from August cyberattack
The chipmaker said the financial impact from the attack was immaterial and largely linked to unscheduled factory outages. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/microchip-technology-cyberattack-financial-impact/732270/
-
Microchip Technology Reports $21.4 Million Cost From Ransomware Attack
Microchip Technology’s latest financial report reveals the company’s expenses due to the recent cybersecurity incident. The post Microchip Technology… First seen on securityweek.com Jump to article: www.securityweek.com/microchip-technology-reports-21-4-million-cost-from-ransomware-attack/