Tag: finance
-
‘Surveillance pricing’ means higher costs for consumers, preliminary FTC report says
Tags: financeThe FTC posted a preliminary report that said businesses do sometimes charge customers more for products based on insights gleaned from online behavior. The commission’s incoming GOP majority objected to the document’s release.]]> First seen on therecord.media Jump to article: therecord.media/surveillance-pricing-preliminary-ftc-report
-
Employees Enter Sensitive Data Into GenAI Prompts Far Too Often
The propensity for users to enter customer data, source code, employee benefits information, financial data, and more into ChatGPT, Copilot, and others is racking up real risk for enterprises. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/employees-sensitive-data-genai-prompts
-
DORA Takes Effect: Financial Firms Still Navigating Compliance Headwinds
The EU’s DORA regulation is in effect as of January 17, with mixed evidence around compliance levels among financial firms First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/dora-financial-firms-compliance/
-
University of Oklahoma isolates systems after ‘unusual activity’ on IT network
The school, which has more than 34,000 students, appeared on the leak site of a ransomware gang on Tuesday, with the group claiming to have stolen 91 GB of data that allegedly includes employee data, financial information and more.]]> First seen on therecord.media Jump to article: therecord.media/university-of-oklahoma-isolates-systems-unusual-activity
-
DORA’s Deadline Looms: Navigating the EU’s Mandate for Threat Led Penetration Testing
With DORA’s January 2025 compliance deadline approaching, financial institutions must embrace rigorous testing, tailored threat profiles, and continuous vigilance to safeguard against cyber threats. The post DORA’s Deadline Looms: Navigating the EU’s Mandate for Threat Led Penetration Testing appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/doras-deadline-looms-navigating-the-eus-mandate-for-threat-led-penetration-testing/
-
UK Considers Banning Ransomware Payments
The proposed mandate intends to discourage criminals from targeting critical national infrastructure and public services, as there will be no financial motivation. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/uk-banning-ransomware-payments/
-
Russian espionage and financial theft campaigns have ramped up, Ukraine cyber agency says
Tags: cyber, cybersecurity, defense, espionage, finance, government, incident, incident response, russia, theft, ukraineOver the past year, Ukraine’s cyber incident response center identified and addressed 1,042 cybersecurity incidents impacting government, defense, and critical services.]]> First seen on therecord.media Jump to article: therecord.media/russian-espionage-financial-theft-campaign
-
Wultra Raises Euro3M to Defend Quantum Cyber Threats Targets Financial Institutions
Tags: authentication, computing, cyber, cybersecurity, finance, fintech, risk, startup, technology, threatQuantum computing is set to revolutionize technology, but it also presents a significant security risk for financial institutions. Czech cybersecurity startup Wultra has raised Euro3 million from Tensor Ventures, Elevator Ventures, and J&T Ventures to accelerate the development of its post-quantum authentication technology, safeguarding banks and fintech against the coming wave of quantum threats. The…
-
Wultra Secures Euro3M to Protect Financial Institutions from Quantum Threats
Prague, Czech republic, 15th January 2025, CyberNewsWire First seen on hackread.com Jump to article: hackread.com/wultra-secures-e3m-to-protect-financial-institutions-from-quantum-threats/
-
Open Banking Shortcomings Threaten UK Global Leadership Position Research Finds
APIContext has released its UK Open Banking API Performance 2023-2024 Report, the annual analysis of the performance of the open banking APIs exposed by the large CMA9 UK banks (the nine largest banks required by UK law to provide open banking services), traditional High Street banks, credit card providers, building societies, and new digital banks (neobanks).…
-
The CFO may be the CISO’s most important business ally
CISOs frequently encounter inherent conflicts with business colleagues in their day-to-day responsibilities. In many ways, this is the nature of setting security policies for an organization. But the goal for CISOs should be to reset this dynamic and forge a strong, collaborative alliance with their critical leadership counterparts.Take the CFO, for example. For many CISOs,…
-
Stop wasting money on ineffective threat intelligence: 5 mistakes to avoid
Tags: business, ciso, compliance, cyber, cybersecurity, data, detection, edr, finance, group, incident response, infrastructure, intelligence, jobs, malware, monitoring, risk, risk-management, siem, soc, strategy, tactics, technology, threat, tool, update, vulnerability, vulnerability-managementStrong capabilities in cyber threat intelligence (CTI) can help take a cybersecurity program to the next level on many different fronts. When organizations choose quality sources of threat intelligence that are relevant to their technology environments and their business context, these external sources can not only power swifter threat detection but also help leaders better…
-
Case Studies on Fraud and AML Collaboration
Mission Omega’s Ian Mitchell on What Works and What Doesn’t in Program Integration. Fraud management and anti-money laundering represent two distinct disciplines in financial crime prevention. While AML primarily is a compliance-driven function, fraud is a risk management function driven by the organization’s risk appetite for fraud, said Ian Mitchell, co-founder of Mission Omega. First…
-
FRAML Reality Check: Is Full Integration Really Practical?
Experts Weigh the Pros and Cons of Work Culture and Merging AML and Fraud Teams. A recent report found that more than 57,000 Americans fall victim to scams every day. Financial fraud is rising globally. In response, the National Automated Clearinghouse Association is pushing for real-time fraud monitoring by 2026, requiring closer collaboration between fraud…
-
Chainalysis Expands Fraud Detection With Alterya Acquisition
Alterya’s AI-Powered Data Will Combat Scams Across Traditional Financial Ecosystems. Alterya’s AI agents now power Chainalysis’ fraud prevention, integrating off-chain data sources like Venmo and Zelle with blockchain analytics. This acquisition marks a significant step in detecting and stopping scams earlier in the fraud cycle, said CEO Jonathan Levin. First seen on govinfosecurity.com Jump to…
-
Biden’s final push: Using AI to bolster cybersecurity standards
Tags: access, ai, attack, china, cisa, compliance, cyber, cyberattack, cybersecurity, data, defense, detection, email, exploit, finance, framework, government, hacker, incident, infrastructure, intelligence, office, privacy, programming, resilience, risk, software, strategy, technology, threat, vulnerabilityIn a decisive move to strengthen national cybersecurity, President Joe Biden is poised to sign an executive order imposing stringent security standards for federal agencies and contractors. Scheduled for publication in the coming days, the directive will emphasize integrating artificial intelligence (AI) into cyber defense strategies while addressing systemic vulnerabilities in software security, reported Reuters.This…
-
PCI DSS Requirements With v4.0.1 Updates For 2024
PCI DSS refers to the Payment Card Industry Data Security Standard created by the PCI Security Standards Council (PCI SSC), an independent entity founded by major payment card brands, including Visa, JCB International, MasterCard, American Express, and Discover. PCI DSS is designed to protect cardholder data and ensure security of payment infrastructure. PCI DSS 4.0.1……
-
Paypal-Phishing: Angebliche monatliche Finanzberichte ködern Opfer
Derzeit schaffen es Phishing-Mails an Spam-Filtern vorbeizukommen, die einen monatlichen Finanzbericht für Paypal versprechen. First seen on heise.de Jump to article: www.heise.de/news/Paypal-Phishing-Angebliche-monatliche-Finanzberichte-koedern-Opfer-10237101.html
-
US bank FNBO uses Pindrop to tackle voice fraud, deepfakes
Learn how First National Bank of Omaha in the US is enhancing customer authentication and verification in its contact centres, eliminating friction points and making life easier for its customer service teams, with Pindrop voice security technology First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366617954/US-bank-FNBO-uses-Pindrop-to-tackle-voice-fraud-deepfakes
-
DoJ Indicts Three Russians for Operating Crypto Mixers Used in Cybercrime Laundering
The U.S. Department of Justice (DoJ) on Friday indicted three Russian nationals for their alleged involvement in operating the cryptocurrency mixing services Blender.io and Sinbad.io.Roman Vitalyevich Ostapenko and Alexander Evgenievich Oleynik were arrested on December 1, 2024, in coordination with the Netherlands’ Financial Intelligence and Investigative Service, Finland’s National Bureau of First seen on thehackernews.com…
-
In Other News: Bank of America Warns of Data Breach, Trucking Cybersecurity, Treasury Hack Linked to Silk Typhoon
Noteworthy stories that might have slipped under the radar: 2025 trucking cybersecurity report, Bank of America discloses data breach, Silk Typhoon behind US Treasury hack. The post In Other News: Bank of America Warns of Data Breach, Trucking Cybersecurity, Treasury Hack Linked to Silk Typhoon appeared first on SecurityWeek. First seen on securityweek.com Jump to…
-
Vulnerability Remediation vs Mitigation: Which Strategy Wins in Cybersecurity?
Cybersecurity vulnerabilities pose significant risks to organizations in today’s digital landscape. Left unaddressed, these vulnerabilities can lead to data breaches, financial losses, and reputational damage. Organizations must decide how to tackle vulnerabilities”, through remediation, mitigation, or a combination of both. But which strategy is more effective? This blog explores the nuances of vulnerability remediation vs…
-
PayPal Phishing Campaign Employs Genuine Links to Take Over Accounts
Fortinet warns of a phishing campaign that uses legitimate links to take over the victims’ PayPal accounts. The post PayPal Phishing Campaign Employs Genuine Links to Take Over Accounts appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/paypal-phishing-campaign-employs-genuine-links-to-take-over-accounts/
-
Medusind Breach Exposes Sensitive Patient Data
The US medical billing firm is notifying over 360,000 customers that their personal, financial and medical data may have been exposed First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/medusind-breach-patient-data/
-
New PayPal Phishing Scam Bypasses Security Measures
The cybersecurity community often encounters sophisticated phishing attempts, but a new PayPal phishing tactic recently dissected by Carl First seen on securityonline.info Jump to article: securityonline.info/new-paypal-phishing-scam-bypasses-security-measures/
-
Emails from legitimate PayPal address used in crafty phishing scheme
First seen on scworld.com Jump to article: www.scworld.com/news/emails-from-legitimate-paypal-address-used-in-crafty-phishing-scheme
-
PayPal Phishing Scheme Exploits Email Notifications
First seen on scworld.com Jump to article: www.scworld.com/brief/paypal-phishing-scheme-exploits-email-notifications