The Latest News

  • Mobile Payments: Apple Pay vs. Rivals

    ABA's Kenneally on Security Risks of New Payments Options Mobile Payments: Apple Pay vs. Rivals
    Steve Kenneally

    Fraud risks associated with Apple Pay have raised new worries about mobile payments, says Steve Kenneally of the American Bankers Association. During the ABA's Risk Management Forum April 15-17, experts compared three mobile solutions. Read more...

  • Target, MasterCard Settle Over Breach

    Retailer Offers Issuers a Total of Up to $19 Million Target, MasterCard Settle Over Breach

    Target has agreed to pay a total of up to $19 million to issuers of MasterCard payment cards over losses and expenses they incurred as a result of the retailer's massive 2013 data breach. Read more...

  • PCI DSS Updated to Address SSL Risk

    Security Standards Council Urges Use of Current TLS Protocol PCI DSS Updated to Address SSL Risk

    The PCI Security Standards Council has published a new version of its data security standard that calls for ending the use of the outdated Secure Sockets Layer encryption protocol that can put payment data at risk. Read more...

  • Banks' Vendor Monitoring Comes Up Short

    New York State Regulator Considering More Scrutiny Banks' Vendor Monitoring Comes Up Short

    Banks are not doing enough to ensure that third-party service providers are taking adequate cybersecurity steps, according to the New York State Department of Financial Services, which is considering ramping up regulatory scrutiny. Read more...

  • Hotel Company Reveals Second Breach

    POS Malware Potentially Exposed Card Data Hotel Company Reveals Second Breach

    White Lodging Services Corp. has revealed a malware attack against point-of-sale systems at 10 of the hotels it manages, potentially exposing payment card data. The disclosure comes about a year after it confirmed a similar malware-related breach. Read more...

  • Interview

    PCI DSS Version 3.1 - What's New?

    Troy Leach of PCI Council Explains New Version of Standard By Tom Field
    PCI DSS Version 3.1 - What's New?

    The PCI Council has just released PCI DSS 3.1, which calls for mothballing the SSL encryption protocol. What do security leaders need to know about the revised standard? Troy Leach of the council offers insights.

  • Article

    National Breach Notice Bill Advances

    Measure Would Pre-empt State Breach Notification Laws By Eric Chabrow
    National Breach Notice Bill Advances

    A House committee approved on April 15 a national data breach notification bill, but the committee chairman concedes that the legislation isn't quite ready for a vote by the full House of Representatives.

  • Blog

    RSA Conference 2015: Banking Preview

    Attribution, Information Sharing Are Hot Topics for Institutions By Tracy Kitten
    RSA Conference 2015: Banking Preview

    In the wake of the breaches suffered by JPMorgan Chase, Sony and Anthem, attack attribution and information sharing are playing more prominent roles for banking leaders, and they will be key discussion points at the upcoming RSA Conference 2015 in San Francisco.

  • Article

    House Panel Passes Info Sharing Bill

    Democratic Attempts to Limit Liability Safeguards Fail By Eric Chabrow
    House Panel Passes Info Sharing Bill

    After beating back amendments by Democratic members to limit liability protections for businesses, the House Homeland Security Committee on April 14 unanimously approved cyberthreat information sharing legislation on a voice vote.

  • Interview

    Exclusive: Inside Verizon Breach Report

    Verizon's Bob Rudis on Takeaways from Latest Investigations By Tom Field
    Exclusive: Inside Verizon Breach Report

    High-profile breaches at Home Depot, Sony and others led many to declare 2014 "The Year of the Breach." But was it really? Verizon's Bob Rudis shares insights from the 2015 Verizon Data Breach Investigations Report.

More news...

Webinars

  • Investigative Analytics: Velocity to Respond

    Federated searching across the enterprise coupled with automated discovery tools and investigative analytics enables immediate visualization of how suspicious communication travels across the...

  • PREMIUM MEMBER EXCLUSIVE

    The Fraud Ecosystem, Deep Web and Fraud-as-a-Service (FaaS)

    As various batches of stolen credit card "dumps" are offered for sale with discount structures and money-back guarantees, it is clear just how sophisticated the Fraud Ecosystem has become. The...

More webinars...

White Papers

More whitepapers...
ARTICLE China Wants Banking Backdoors

Chinese authorities reportedly want foreign software and hardware vendors that sell to its banking...

Latest Tweets and Mentions

ARTICLE China Wants Banking Backdoors

Chinese authorities reportedly want foreign software and hardware vendors that sell to its banking...

The ISMG Network