Links in “Cybersecurity/Data Breaches”
- Cybersecurity Wars: Bankers Fire Back at OCC’s Curry
ABA takes exception to Comptroller's speech for giving "uncalled-for criticism of the banking industry" for cybersecurity breaches, rather than a call for vendors to step up their game. [4/21]
- Data Security Responsibility: OS Manufacturers, App Developers or Consumers
When it comes to mobile data security, each party has a role, but not equally. [4/21]
- Heartbleed Watch: Here Come the Criminals
As fast as IT departments are working on protecting their computers from Heartbleed, criminals are racing to exploit it. Experts also warn of "phishing" attacks, in which criminals send millions of emails offering to protect recipients from Heartbleed by clicking a link or opening an email that will infect recipients' computers with malware. [4/21]
- Threat: Rogue Mobile Apps That Deliver Malware
Thousands of app stores globally, many of them unregulated, lead to mobile malware that can be delivered through rogue apps that imply they're linked to a bank. [4/17]
- OCC Echoes Cyber Security Concerns at CES
OCC Comptroller Curry speaks to rising risks and trickling effect of cybersecurity for banks of all sizes and issues cautions and reminders for sound IT management to protect consumer trust and data. [4/17]
- So Far Minimal Impact From HeartBleed
The early reports from credit unions are that they are seeing minimal if any adverse impact from the Hearbleed data leak. Still credit unions should be confirming with their vendors that they are not using the version of the OpenSSL tool that was subject to the breach. [4/14]
- A Look at FFIEC’s Alert on Heartbleed
NAFCU's recap of last week's FFIEC alert on the "Heartbleed" vulnerability. [4/14]
- Recap of Cyber-resources Recommended by the FDIC
Here is a recap of the government services recommended by the FDIC to assist banks in addressing cyber threats. [4/14]
- Do You Know What You Need to Do About the Heartbleed Security Risk?
According to a statement from the FFIEC, credit unions and other financial institutions need to be in contact with their third party vendors to ensure that they are progressing towards addressing this latest risk to websites protected by OpenSSL encryption. The FFIEC statement recommends four steps that financial institutions should take , including requiring users and administrators to change their passwords after applying the OpenSSL patch, if applicable. CUNA Mutual has also issued a Risk Alert to its bond policy holders that provides further recommendations about communications with members. See also. [4/11]
- FDIC Promotes Cyber Resources
The FDIC promotes the active use of cyber-related risk resources to respond to ever emerging threats facing today's FIs. The issued press release seeks to ensure that Information Security staff are aware of and subscribe to a list of 5 reliable and recognized resources aimed at identifying cyber risks as they emerge. [4/11]
