Links in “Cybersecurity/Data Breaches”

Efforts to seek to deny cybercriminals the publicity they seek is understandable, but the toll of keeping mum on customer trust could be worse than what the cybercriminals are doing. [11/15]

Two incidents in the U.K. involved criminals seeking to steal millions by using staff KVM switches to record staff keystrokes and screen activity to steal passwords. [11/14]

Smaller institutions are seeing an increased number of fraud attacks by highly organized criminal gangs, reports Shirley Inscoe of the Aite Group. Larger institutions are beginning to use very sophisticated software to identify voices and other markers to detect fraud. As a result, these organizations are turning their sights on smaller institutions that may not be as well-protected. [11/4]

Rather than just something your customer knows (name and password), layered security involves something your customers have (card, token, device), something your customers are (fingerprint, voice, iris), where your customers are (GPS location), along with activity, date/time and usage trends, and more. [10/28]

10th anniversary of the first National Cyber Security Awareness Month is good time to take a look at that sometimes glossed over element of a sound security plan: encryption key management. [10/17]

New NCUA Board member Richard Metsger said that the relationship between NCUA and the credit unions it regulates should be cooperative, even though the parties may come to an issue from different perspectives. He added that the agency is focused on ensuring that credit unions are sufficiently capitalized, are protected from interest rate and concentration risks, and have effective safeguards in place to protect against cyber attacks. [10/16]

Losses from cyber attacks expected to nearly double from $409 million in 2011 to $794 million in 2016. [10/9]

The majority of data security breaches are opportunistic attacks, preventable with even a modicum of effort. [10/8]

A breach last week of the Adobe network resulted in the theft of consumer information from 2.9 million customers. Sources told Credit Union Times the impact on credit unions may be substantial as the theft included Adobe’s source code. Credit unions are warned to keep their Adobe products fully patched and updated. [10/7]

Information security reminder, courtesy of Adobe, whose system has been attacked, compromising the information of nearly 3 million customers, including IDs, encrypted passwords, debit card numbers, expiration dates and more. [10/4]