Information Security, SSAE 16, ISO 27001, CISA, Cert-IN
Anything under the umbrella of IT Security, Computer Security, IT Controls
To bolster security, banks in New York are planning to enact new regulations for any third party vendors they do business with.
The report “Update on Cyber Security in the Banking Sector: Third Party Service Providers,” released by the New York State Department of Financial Services (NYDFS) highlights key security risks associated with vendors in the banking sector.
Read more here.
Two deeply researched reports underscore the following: the vast majority of hacking attacks are successful because employees click on links in tainted emails, companies fail to apply available patches to known software flaws, or technicians do not configure systems properly.
Read more here.
Internet users were denied access to Google Inc’s Malaysia website on Tuesday, and were redirected to a hacked page saying "Google Malaysia Hacked by Tiger-Mate #Bangladeshi Hacker". The company has reached out to the organisation that manages the domain name to resolve the issue, MYNIC, a Google Malaysia spokesperson said in a statement to Reuters.
Read more here.
The Samurai Web Testing Framework (AKA SamuraiWTF) is a live linux environment that has been pre-configured to function as a web pen-testing environment. The CD contains the best of the open source and free tools that focus on testing and attacking websites.
Read more here.
Watcher is a passive web application vulnerability scanner.
Read more here.
Regulatory compliance requirements provide instructions for organizations on how to protect the data of their employees, business operations, and customers that are stored on their servers. The process of satisfying compliance requirements starts with IT auditing, performed either by an internal or external professional auditor using specialized software.
Read more here.
“Global Payment Card Fraud Trends and Statistics,” a new report from Mercator Advisory Group, examines global payment card fraud in four countries: the U.K, France, Australia and South Africa.
The report discusses overall fraud rates by type, including counterfeit card, lost or stolen card, card ID theft, intercepted mail, and card-not-present.
Read more here.
Onapsis Bizploit is an SAP penetration testing framework to assist security professionals in the discovery, exploration, vulnerability assessment and exploitation phases of specialized SAP security assessment. The framework currently ships with many plugins to assess the security of SAP Business Platforms. Additional plugins are available for broader platform support including Oracle.
Read more here.
Pentoo is a Gentoo based penetrating testing linux LiveCD. It’s basically a Gentoo install with lots of customized tools, customized kernel, and much more.
Read more here.
This month The Bancorp will become the first FI to roll out the new security feature for its mobile app from FIS.
FIS, a provider of banking and payments technology, has added biometric access to its mobile application to further ensure that only authorized users can access their FIS mobile accounts, a press release said.
Read more here.