Information Security
FFIEC Releases Cybersecurity Assessment Observations, Recommends Participation in Financial Services Information Sharing and Analysis Center
November 4, 2014 - The Federal Financial Institutions Examination Council (FFIEC), on behalf of its members, today released observations from the recent cybersecurity assessment and recommended regulated financial institutions participate in the Financial Services Information Sharing and Analysis Center (FS-ISAC).
Staples investigates data breach
October 21, 2014 - Office supply retailer Staples has become the latest firm to reveal that it is investigating a possible data breach that could leave customer payment card details at risk.
Research from BAI Shows Digital Efforts Top-of-Mind for Retail Banks
October 14, 2014 - BAI, the financial services industry's resource for breakthrough information and intelligence, has released "BAI Retail Banking Outlook," its latest research report identifying emerging retail-banking habits and trends. The survey of nearly 400 global industry professionals highlights the growing emphasis financial institutions are placing on mobile banking and social media.
FS firms gear up for .bank domains
September 30, 2014 - Financial services firms will be able to use '.bank' domains from next year after a collection of industry organisations struck a deal with Icann.
Kaspersky Lab and INTERPOL Survey Reports: 60 Percent of Android Attacks Use Financial Malware
October 22, 2014 - According to the results of the "Mobile Cyber Threats" survey issued by Kaspersky Lab and INTERPOL between August 2013 and July 2014, malicious programs targeting Android-based devices in order to steal money were used in 60 percent of attempted attacks registered by Kaspersky Lab security products. These cybercriminals frequently targeted Android users in Russia, but also in Ukraine, Spain, United Kingdom, Vietnam, Malaysia, Germany, India and France.
Two Thirds of Enterprise Java Applications Contain Mostly Third Party Code Yet Considered Secure
October 9, 2014 - Waratek, the Java application protection and management company, today announced the results of a survey conducted at the JavaOne 2014 Conference last week. Nearly two-thirds of senior IT professionals polled said their Java applications contain 50 percent or more third party code. Meanwhile, nearly 80 percent believe their applications are somewhat (46%) or very secure (33%). These findings are surprising given the recent disclosure of two massive vulnerabilities in widely used third-party libraries -- the "Shellshock" and "Heartbleed" bugs.
POS manufacturer breach puts cards at risk
September 29, 2014 - Some 324 restaurants across the United States have had card data swiped following a breach at POS manufacturer Signature Systems.
Crook dumps Target card details on Russian forum
October 17, 2014 - A cyber-crook has uploaded the details of more than five million cards, many of them stolen during the data breach at US retailer Target, to a Russian carding site, says security firm Group-IB.
CGI’s new UK security facilities to deliver protective monitoring and cyber threat analysis services
October 8, 2014 - CGI (NYSE: GIB) (TSX: GIB.A) has opened a state-of-the-art UK Security Operations Center (SOC) in South Wales to provide 24/7, real-time protective monitoring for clients' in-house and cloud-based systems. In addition, its new cybersecurity center in Reading will provide clients with an advanced threat investigation service.
Home Depot says 56 million payment cards compromised in breach
September 19, 2014 - US retail chain Home Depot says that 56 million payment cards are at risk following a malware-laden cyber-attack on eftpos tills across its stores in the US and Canada.
TD Bank slapped with $850,000 fine over 2012 data breach
October 16, 2014 - TD Bank has agreed an $850,000 settlement with the Attorney General of New York over a data breach in 2012 that compromised the financial records of 260,000 customers nationwide.
JPMorgan denies hacking report
October 3, 2014 - JPMorgan Chase has dismissed as "false" a report that its systems have been breached by hackers for the second time in recent months.
Nigerian bank falls victim to $40 million insider cyber-heist
September 15, 2014 - Nigerian police are on the hunt for an IT staffer at Skye Bank who hacked into the bank's systems and transferred $40 million to a raft of bogus accounts before going on the run.
