Links in “Cybersecurity/Data Breaches”
- Chilling New Chapter in Cyber Attacks
A nation-state cyber espionage group attacks a security firm that has been closely monitoring it over the past few years. The attackers hacked their way into the company's network to gather intelligence on the company's latest technologies for thwarting attacks. [6/11/15]
- Email Notification to Government Workers May Pose Risk
Security experts are scratching their heads over the Office of Personnel Managementâs decision to notify current and former federal government workers by email that they may have been victims of the recent data breach. Experts are concerned that the emails could be leaked publicly and copied by phishers. Employees that do not have email addresses will receive written notifications by mail. [6/11/15]
- OPM’s Breach: A Case Study of What Not To Do With IT Security
The hack of the federal government's Office of Personnel Management exposed a "lack of professionalism and knowledge" that is about 20 years behind the security curve. There was no IT security staff until 2013, IT was operated by contractors whose contracts were expired, and there was not even a comprehensive inventory of the network. Apparently, "the hackers knew this network better than the people that operated it." [6/10/15]
- NCUA Staff May be Victims of OPM Data Breach
Several current and former NCUA employees are thought to be victims of the large data breach of the Office of Personnel Management. The breach of OPM computers was reported last week, but dates back to April. Sensitive data of at least 4 million may have been affected. [6/10/15
- What’s Next: The Cyber Long Con
Finding your card was used to buy some gas in a different state is one thing. But what about hackers who implant a bug that skims off a tiny fraction of a retailers online purchases, then when the news of the bug is revealed, profits again by shorting the retailer's stock? The long cyber con is very real. [6/8/15]
- What Your Customers Should Do If They Suspect a Data Breach
Tips for what bank customers should do if they suspect their identity may have been compromised. [6/8/15]
- Four Million Government Workers at Risk Due to Massive Data Breach
The U.S. Government Office of Personnel Management has announced that its network has been the victim of a massive data breach. Hackers based in China have stolen information related to the employee records and security clearances for 4 million current and former federal government employees. [6/5/15]
- ATM Skimming Breach Strikes Virginia Credit Union
Several Virginia Credit Union ATMs were used in the skimming scam, resulting in 2,000 vulnerable debit cardholders. The breach was discovered during normal ATM maintenance and seems to have taken place over a limited period of time. VACU is working to issue new cards and refunding victims. [6/4/15]
- Curry: Technology Isn’t Killing Banks
In a speech at the BITS Emerging Payments Forum, Comptroller of the Currency Curry discussed the impact of emerging technologies on the banking industry and questions that need to be addressed in the future. Citing the growth of online banking as an example of how the banking and depository industry has evolved with emerging technologies, Curry stated that other such predictions that technological advancements will replace banks in the present and future. Curry highlighted cybersecurity as a continuing concern that accompanies emerging technologies. [6/4/15]
- The Future of Software Security
An exploratory working group looks at gaps, SWAMPS, common weakness enumeration, and mobile app security threats. [6/3/15]
