Tag: finance
-
CISOs: Stop trying to do the lawyer’s job
Tags: breach, business, ciso, compliance, cybersecurity, data, email, finance, group, guide, incident response, international, jobs, law, privacy, RedTeam, risk, risk-management, security-incident, service, skills, strategy, technology, training, updateThere’s a joke that’s been floating around boardrooms for years: “What’s the difference between lawyers and engineers? Lawyers don’t think they’re engineers.”This light-hearted jab highlights a fundamental difference between the two professions. Engineers, and by extension CISOs, focus on building and fixing things, learning a wide array of skills, sometimes sticking their hands into technologies…
-
India’s banking on the bank.in domain cleaning up its financial services sector
With over 2,000 banks in operation, a domain only they can access has clear potential to make life harder for fraudsters First seen on theregister.com Jump to article: www.theregister.com/2025/02/10/india_bank_dotin_plan/
-
India wants all banking to happen at dedicated bank.in domain
With over 2,000 banks in operation, the potential to make life harder for fraudsters is obvious First seen on theregister.com Jump to article: www.theregister.com/2025/02/10/india_bank_dotin_plan/
-
DEF CON 32 Exploiting Bluetooth From Your Car To The Bank Account
Authors/Presenters: Vladyslav Zubkov, Martin Str Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/def-con-32-exploiting-bluetooth-from-your-car-to-the-bank-account/
-
Exciting Advances in Privileged Access Management
Why should we be excited about Privileged Access Management? Have you ever pondered the gravity of the implications of not managing Non-Human Identities (NHIs) and their Secrets in your company’s cybersecurity strategy? The rapid digitization of industries such as healthcare, financial services, travel, DevOps, and SOC teams makes securing machine identities an area of utmost……
-
The SolarWinds $4.4 billion acquisition gives CISOs what they least want: Uncertainty
Tags: attack, breach, business, cisa, ciso, cyber, cybersecurity, finance, government, group, risk, risk-management, service, software, strategy, supply-chain, tool, updateWhen SolarWinds on Friday announced a $4.4 billion cash deal for it to be acquired by private equity (PE) firm Turn/River Capital, it delivered the last thing that nervous enterprise CISOs want: Uncertainty, to be followed by more uncertainty.”Whenever a security company gets acquired by private equity, you never want to throw a party,” said…
-
Student group sues Education Department over reported DOGE access to financial aid databases
The University of California Student Association, which serves all of the system’s campuses statewide, is suing the Department of Education over reported access by Elon Musk’s DOGE workers to federal student aid databases. First seen on therecord.media Jump to article: therecord.media/university-of-california-students-sue-education-department-doge
-
Modern Bank Heists 2025: Revenge of the Zero Days
Tom Kellermann’s Annual Report on Key Threats to Financial Sector. Zero days. Supply chain attacks. APIs and cloud environments as growing threat vectors. These are among the topics discussed in this seventh annual Modern Bank Heists report, and author Tom Kellermann discusses their impact on financial institutions – and which defensive gaps need to be…
-
Yahoo Finance: U.S. Lawmakers Push to Ban China’s DeepSeek AI Over Security Risks Feroot Security Analysis
Washington, D.C. U.S. lawmakers announced a bill to ban DeepSeek, the Chinese AI chatbot app, from government devices following a security analysis by Feroot Security that revealed alarming privacy and national security risks. The research suggests that DeepSeek collects user data, including digital fingerprints, login credentials, and behavioral information, potentially sending it to servers…The post…
-
Third-Party Risk Management Failures Expose UK Finance Sector
Orange Cyberdefense found that over half of UK financial firms suffered at least one third-party attack in 2024, linked to significant gaps in risk management strategies First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/third-party-risk-failures-uk/
-
India’s RBI Introduces Exclusive “bank.in” Domain to Combat Digital Banking Fraud
India’s central bank, the Reserve Bank of India (RBI), said it’s introducing an exclusive “bank.in” internet domain for banks in the country to combat digital financial fraud.”This initiative aims to reduce cyber security threats and malicious activities like phishing; and, streamline secure financial services, thereby enhancing trust in digital banking and payment services,” the RBI…
-
CIOs and CISOs grapple with DORA: Key challenges, compliance complexities
Tags: access, automation, banking, business, cio, ciso, communications, compliance, control, country, cyber, cybersecurity, data, dora, finance, framework, GDPR, governance, jobs, law, monitoring, network, nis-2, penetration-testing, privacy, regulation, resilience, risk, risk-management, service, skills, supply-chain, technology, threat, tool, training, vulnerabilityIn force since January, the Digital Operational Resilience Act (DORA) has required considerable effort from CIOs and CISOs at 20 types of financial entities to achieve compliance. For many, the journey is not complete.”In the past months, financial entities targeted by DORA have been busy internally defining roles and responsibilities related to ICT security, identifying…
-
India to launch new domain name for banks to fight digital fraud
India’s central bank is introducing an exclusive >>.bank.in
-
The Cyber-Driven Domino Effect: How Financial and Security Crises Bankrupt Businesses
First seen on scworld.com Jump to article: www.scworld.com/perspective/the-cyber-driven-domino-effect-how-financial-and-security-crises-bankrupt-businesses
-
Abyss Locker Ransomware Attacking Critical Network Devices including ESXi servers
The Abyss Locker ransomware, a relatively new but highly disruptive cyber threat, has been actively targeting critical network devices, including VMware ESXi servers, since its emergence in 2023. This ransomware group employs sophisticated tactics to infiltrate corporate networks, exfiltrate sensitive data, and encrypt systems for financial extortion. Its focus on virtualized environments has made it…
-
Basket of Bank Trojans Defraud Citizens of East India
Cheap banking scams are often easier to pull off in a country with older devices, fewer regulations, and experienced fraudsters. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/bank-trojans-defraud-citizens-east-india
-
Ukraine’s largest bank PrivatBank Targeted with SmokeLoader malware
UAC-0006, a financially motivated threat actor, targets PrivatBank customers with advanced phishing attacks. CloudSEK’s research reveals malicious emails… First seen on hackread.com Jump to article: hackread.com/ukraine-largest-bank-privatbank-smokeloader-malware/
-
Welchen Cybergefahren der europäische Handelssektor gegenübersteht
Die digitale Transformation macht den Einzelhandel zum begehrten Angriffsziel für Cyberkriminelle. Europa steht im Visier von Hackern und staatlichen Akteuren, die ihre Attacken oft mit raffinierten Phishing-Methoden einleiten. Besonders beliebt: täuschend echt gefälschte Webseiten bekannter Technologiemarken, PayPal, Facebook, Nike, Adidas und Luxuslabels. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/security-management/welchen-cybergefahren-der-europaeische-handelssektor-gegenuebersteht/
-
New Banking Attacking Users of Indian banks to Steal Aadhar, PAN, ATM Credit Card PINs
A sophisticated malware campaign, dubbed >>FatBoyPanel,
-
21% of CISOs pressured to not report compliance issues
Tags: awareness, breach, business, ceo, ciso, compliance, control, corporate, cybersecurity, data, dora, finance, framework, governance, incident response, infrastructure, insurance, law, nis-2, regulation, resilience, risk, security-incident, trainingCISOs are increasingly getting caught between business pressures and regulatory obligations, leaving them struggling to balance corporate loyalty and legal accountability.To wit: One in five (21%) security leaders have been pressured by other executives or board members not to report compliance issues at their companies, according to a recent study by security vendor Splunk.The same…
-
Thailand to Cut Off Power to Scam Centers – Will it Work?
Officials Hope to Curb Global Fraud by Targeting Border Operations in Myanmar In a drastic move to curb fraud along the Myanmar border, Thailand announced plans to cut power and telecommunications in border areas of Myanmar linked to scam operations. The move is aimed at crippling criminal syndicates running notorious call centers that orchestrate scams,…
-
Mobile Malware Targeting Indian Banks Exposes 50,000 Users
Indian banking malware attack exposes 50,000 users, stealing financial data via SMS interception and phishing First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/mobile-malware-indian-banks/
-
Canadian Charged in $65M KyberSwap, Indexed Finance DeFi Hack
Canadian man charged in $65 million DeFi hack. Exploited KyberSwap, Indexed Finance smart contracts, laundered funds, and attempted extortion. Faces 20 years. First seen on hackread.com Jump to article: hackread.com/canadian-charged-kyberswap-indexed-finance-defi-hack/
-
Destructive Attacks on Financial Institutions Surge
Contrast Security reveals a 12.5% annual increase in destructive cyber-attacks on banks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/destructive-attacks-banks-surge-13/
-
Why CRQ Methodologies Should Be Usable, Defensible, and Informative
In a thoroughly digital world, cyber incidents can have a huge financial impact, with the average cost of a data breach skyrocketing to $4.88 million. Still, too many businesses struggle Read More First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/why-crq-methodologies-should-be-usable-defensible-and-informative/
-
More destructive cyberattacks target financial institutions
Financial institutions will continue to be the ultimate targets for criminals and threat actors, as a successful attack offers a significant payoff, according to Contrast … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/02/05/financial-institutions-cybersecurity-incidents/
-
Union groups sue Treasury over giving DOGE access to sensitive data
Union groups that represent 7.2 million people filed a lawsuit Monday against the Treasury Department for handing over information including Social Security numbers, tax return data and bank account details to Elon Musk’s Department of Government Efficiency (DOGE). First seen on therecord.media Jump to article: therecord.media/union-groups-sue-treasury-over-giving-doge-access-to-data
-
Reimagining KYC to Meet Regulatory Scrutiny
FIs Expected to Move from Periodic Reviews to Perpetual KYC. Banks are struggling to keep up with evolving KYC expectations. Despite efforts to modernize, outdated processes continue to leave compliance gaps, leading to increased regulatory action. Penalties for financial institutions surged with KYC-related fines more than doubling to $51 million. First seen on govinfosecurity.com Jump…