Information Security
Carbanak and Beyond: Banks Face New Attacks
February 9, 2016 - A year after Kaspersky Lab warned that cyber-criminals would start to adopt the tools and tactics of nation-state backed APTs in order to rob banks, the company has confirmed the return of Carbanak as Carbanak 2.0 and uncovered two more groups working in the same style: Metel and GCMAN. They attack financial organizations using covert APT-style reconnaissance and customized malware along with legitimate software and new, innovative schemes to cash out.
Gyft reports security breach
February 8, 2016 - In an ongoing effort to protect the accounts and account information of its users, Gyft is notifying users who may have been affected by a security incident.
ISACA's CSX Launches Two Free Cybersecurity Tools
January 21, 2016 - Global IT and cybersecurity association ISACA has launched two free digital tools through its Cybersecurity Nexus (CSX):
First EU-wide cyber-security rules backed by MEPs
January 14, 2016 - Firms supplying essential services, e.g. for energy, transport, banking and health, or digital ones, such as search engines and cloud computing, will have to take action to improve their ability to withstand cyber-attacks under new rules approved by Internal Market MEPs on Thursday.
HSBC remains offline following cyber attack
January 29, 2016 - HSBC customers remain locked out of internet banking into the afternoon after the bank was subject to a denial of service attack on Friday morning.
UK finance sector ups IT spending amid fintech uncertainty
January 18, 2016 - British financial services firms expect IT to be the main area to see an increase in capital spending over the next year as the industry braces itself for the fintech revolution.
ISACA Survey: 63% of IT Professionals Are Against Governments Having Backdoor Access to Encrypted Information Systems
January 11, 2016 - Close to two-thirds (63%) of global IT professionals oppose giving governments backdoor access to encrypted information systems, and similar numbers (59%) feel that privacy is being compromised in an effort to implement stronger cybersecurity laws. The survey by global IT and cybersecurity association ISACA of 2,920 members in 121 countries also reveals marked skepticism about the likelihood of organizations sharing data breach information voluntarily as called for by the recently passed U.S. Cybersecurity Information Sharing Act of 2015.
Wendy's investigates possible card data breach
January 27, 2016 - American fast food chain Wendy's is investigating possible fraudulent charges to cards used at some of its restaurants.
WISeKey and Kaspersky Lab to develop wearables security tech
January 18, 2016 - With smart watches, fitness trackers and payment wristbands expected to account for one in five mobile payment transactions by 2020 – representing $500 billion a year– it is inevitable that they will become a growing target for cyber-attack, according to WISeKey and Kaspersky Lab.
UK banks accused of weak login page security
January 7, 2015 - More than half of banks and building societies in the UK are leaving their online customer login pages vulnerable because of insecure SSL instances, according to security experts at Xiphos Research.
Mobile payments fuelling data security fears
January 26, 2016 - A global study of 3700 IT security practitioners conducted by the Ponemon Institute shows increasing risks to payment data and a lack of confidence in securing mobile transactions.
Malware found at 250 Hyatt hotels
January 15, 2016 - Hyatt Hotels has found signs of malware designed to steal payment card information at 250 of its sites.
JPMorgan dupes 20% of staff in to opening fake phishing email
December 21, 2015 - Just weeks after falling victim to a massive cyber theft of customer assets, JPMorgan sent a fake phishing email to all employees to test their reaction. You can probably guess what happened next.