Wall Street & Technology's Security Weblog

Click iTunes icon
or copy url below into your rss reader.



How to Hide Your Computer Tracks at Work
February 12, 2010 @ 10:15 AM | By Greg MacSweeney

On this Friday, just before a holiday (3-day) weekend and after a monster snowstorm earlier this week, here is a little something to make your Friday a little more bearable. Most of you know that your boss can legally dictate what you can and can't do on the company computer. But this video from WSJ.com and Fox News shows that there are ways to get around that. Just don’t get caught. And, obviously, I don’t endorse or advocate any of these activities. I’ve never tried them either, since I’m on a MAC.

Comment on this blog entry


Big Chill Seen if Bear Stearns Managers Walk
November 03, 2009 @ 10:48 AM | By Greg MacSweeney

Reuters Columnist Matthew Goldstein says too little attention is being paid to the criminal trial of of former Bear Stearns managers charged with lying to investors in the spring of 2007 about the health of once-giant hedge funds. Outcome of the trial could determine how other prosecutors pursue similar financial fraud cases.

Comment on this blog entry


Investment Bankers: CIA Wants You
May 29, 2009 @ 07:14 AM | By Greg MacSweeney

The CIA is recruiting investment bankers and other Wall Street types. If they can pass a few hurdles and stomach the $130,000 salary, the financial whizzes will work on tracking economic threats to national security. Steve Henn reports in this audio segment from American Public Media’s Marketplace.


Comment on this blog entry


Watch Out for the Conficker Worm
March 31, 2009 @ 10:04 AM | By Greg MacSweeney

CNET's Natali Del Conte shares tips with Maggie Rodriguez about the April 1 ''Conficker'' worm, which could steal financial information and other data from computers. However, while experts are concerned about the complexity of the worm, they don't know if this virus is the real deal, or an April Fool's hoax.


Watch CBS Videos Online

Comment on this blog entry


Financial Workers Regularly Forget USB Sticks at Dry Cleaners
January 26, 2009 @ 11:16 AM | By Melanie Rodier

As data loss reaches an all time high, a new survey shows financial workers in the UK are regularly forgetting USB sticks at the dry cleaners.

According to a survey by Texas-based data security firm Credant Technologies, 9,000 USB sticks were forgotten in people’s pockets in the UK last year as they took their clothes to the local dry cleaners.

Financial workers in the City of London are particularly forgetful: one dry cleaner in the heart of the financial district said he is getting an average of 1 USB stick every two weeks, while another said he had found at least 80 in the last year.

continued...
Comment on this blog entry


Mumbai Financial Firms, Technology Providers Incensed After Attacks
December 05, 2008 @ 07:52 AM | By Greg MacSweeney

Last week's terror attacks rocked the Mumbai business community. Niraj Sheth, a reporter from the Wall Street Journal, speaks with Tata Consultancy Services’ CEO S. Ramadorai and Ashok Wadhwa, CEO and managing director of Ambit Corporate Finance Pvt. Ltd., about how they are taking action to ensure Mumbai is both safe and business-friendly.


Comment on this blog entry


The Overlooked Challenge of Data Security in an M&A
November 17, 2008 @ 05:06 PM | By Melanie Rodier

Mergers and acquisitions in the financial industry have come fast and furious over the last couple months, each one raising multiple challenges for the companies involved. A vital, but easily overlooked one, is data security. When companies are in the midst of an M&A, how do they protect their customers’ confidential data?

continued...
Comments(2)


To Avoid Data Breaches, Firms Need to Improve Detective Controls
August 21, 2008 @ 11:38 AM | By Melanie Rodier

To boost their chances of preventing costly data breaches , financial firms must improve their detective controls, according to an analyst at SMART Business Advisory and Consulting.

Firms seem to understand the importance of preventative controls, such as having firewalls and access control lists. "But they lack a good grasp of detective controls," says Tony Hernandez, managing director at SMART.

continued...
Comment on this blog entry


Investment Firm's Massive Data Breach Caused by File-Sharing
July 10, 2008 @ 04:36 PM | By Melanie Rodier

A huge data breach at an investment firm has thrown the spotlight on the dangers of allowing employees to use popular online file-sharing software such as LimeWire, after an incident saw an employee use the service to trade music or a movie, and unwittingly expose his organization's entire database to potential criminals.

continued...
Comments(1)


Merrill, NYSE Execs Talk about IT Security
June 17, 2008 @ 05:12 PM | By Melanie Rodier

Internal threats, particularly where company employees from different departments collaborate over a long period of time to defraud the firm - are proving to be one of the biggest security headaches for financial firms, a conference at the New York Stock Exchange heard on Tuesday.

continued...
Comment on this blog entry


How Secure is India?
May 14, 2008 @ 08:46 AM | By Melanie Rodier

One of India's first surveys on security across the country's financial institutions has found that 30% of banks reported to have been victims of identity theft during the last year.

continued...
Comment on this blog entry


Sophisticated Web Attacks Force Banks to Re-Think
April 23, 2008 @ 03:51 PM | By Melanie Rodier

The sophistication of increasingly widespread fraudulent techniques such as Man-in-the-Browser attacks are forcing financial institutions to re-assess how they fight electronic fraud.

continued...
Comments(1)


Could Lehman Bros have prevented latest fraud?
March 31, 2008 @ 05:49 PM | By Melanie Rodier

Lehman Bros has filed a lawsuit against Marubeni Corp., the Japanese trading giant, responsible for defrauding the New York-based investment bank out of US$352 million through a scam carried out by two rogue employees.

continued...
Comment on this blog entry


ISO Promotes Biometric Standard for Financial Firms
February 12, 2008 @ 11:25 AM | By Melanie Rodier

With the aim of boosting security in the financial services industry, ISO, the world's largest developer of international standards, has issued a new biometric standard for financial firms.

continued...
Comment on this blog entry


Cyber Crime Film Draws Attention
February 06, 2008 @ 01:09 PM | By Melanie Rodier

Several dozen financial industry and technology professionals recently gathered at the Tribeca Grand Hotel in New York, to attend a private advanced screening of "The New Face of Cybercrime," a documentary film by Academy Award-nominated filmmaker Fredric Golding.

continued...
Comment on this blog entry


Banks Must Heighten Security Following New Round of Attacks
January 16, 2008 @ 01:50 PM | By Melanie Rodier

A security expert says financial institutions must adopt a strong multi-factor security solution, which can protect them from all kinds of online attacks and do not need to be re-written when a new threat is identified.

continued...
Comments(1)


iPhone Gets Secure VPN Solution
December 11, 2007 @ 12:00 PM | By Melanie Rodier

In a bid to turn Apple’s iPhone into a business tool, Astaro, a unified threat management solution maker, announced it will now offer iPhone support to VPNs controlled by its Astaro Security Gateway appliance.

continued...
Comment on this blog entry


Intelligence Chief Warns Banks of Chinese Espionage threat
December 03, 2007 @ 02:40 PM | By Melanie Rodier

UK intelligence network MI5 has contacted 300 chief executives and security experts at leading British financial institutions, warning them that Chinese state organizations may be spying on them.

continued...
Comments(1)


Upsurge of Attacks Against Banking Sites
November 26, 2007 @ 05:05 PM | By Melanie Rodier

Security firm F-Secure has warned of an upsurge in attacks against banking sites, using a new generation of malicious codes in a technique called "Man in the Browser".

continued...
Comment on this blog entry


Top Level Financial Execs Targets of Cyber Attack
November 20, 2007 @ 02:58 PM | By Melanie Rodier

In the last 24 hours, there has been a spike in malicious attacks against banks, and in particular against C-level executives at financial institutions around the world.

continued...
Comment on this blog entry


iPhone: Not Right For Financial Industry Now, But Survey Shows It Could Be In Future
September 24, 2007 @ 05:40 PM | By Melanie Rodier

According to a new survey, most financial services firms are not currently considering using Apple's iPhone on a corporate level – but this could change in the future.

continued...
Comment on this blog entry


The Danger of Revealing Too Much on Facebook...
September 20, 2007 @ 05:08 PM | By Melanie Rodier

At Wall Street and Technology's Executive Peer Roundtable on Security Risk this week, delegates pressed financial firms to consider the security threat posed by employees -- or potential employees -- using social networking sites, such as Facebook and MySpace.

It is critical to secure applications and data inside a company, they said. But it is equally important to keep a careful eye on communications between employees and the outside world.

continued...
Comment on this blog entry


Why TD Ameritrade’s Data Breach Is So Worrisome…
September 17, 2007 @ 06:12 PM | By Melanie Rodier

Last week, TD Ameritrade became the latest financial firm to hit the headlines after suffering a data breach, with over 6.3m customer records stolen. Other financial institutions have also reported data breaches recently: these include JPMorgan, Fidelity Investments and Ameriprise Financial. These incidents generally stemmed from stolen laptops or careless employees (who, in the case of JPMorgan threw a bunch of clients' financial paperwork in the garbage in the street).

So, what makes TD Ameritrade’s breach so different?

continued...
Comment on this blog entry


New Security Alert: TD Ameritrade suffers Data Breach, Over 6.3m Records Stolen
September 14, 2007 @ 03:59 PM | By Melanie Rodier

TD Ameritrade Holding Corp said contact information for more than 6.3 million customers was stolen after one of its databases was hacked into.

The online broker apologized to its clients and said the breach stemmed from unauthorized code in its systems that allowed hackers to access an internal database. The discovery – and elimination of the unauthorized code – was made by the brokerage following an internal investigation of stock-related SPAM.

continued...
Comment on this blog entry


Four Pump-and-Dump Scammers Plead Guilty
September 11, 2007 @ 12:11 AM | By Cory Levine

Four men have pleaded guilty to charges relating to a pump-and-dump market manipulation scheme that netted more than $20 million in profit. According to the U.S. Department of Justice, securities of more than 15 publicly traded companies had their prices inflated through deceptive trading practices and misinformation spread through false statements in press releases and spam e-mails sent to tens of millions of e-mail addresses.

continued...
Comments(1)


4,000 Financial Firms To Get Urgent, Automatic Security Alerts
August 27, 2007 @ 02:33 PM | By Melanie Rodier

With the number of cyber attacks continuing to rise, top security watchdog Financial Services Information Sharing and Analysis Center (FS-ISAC) has announced a partnership with MessageOne to provide urgent fully automated security alerts to its 4,000-member firms.

continued...
Comment on this blog entry


Job Hunters and Recruiters Targeted by Data Thieves
August 22, 2007 @ 05:50 PM | By Melanie Rodier

Job hunters posting resumes online – and recruiters perusing them - are at risk. Symantec says a Trojan targeting popular job site Monster.com has recently stolen more than 1.6 million records.

continued...
Comment on this blog entry


Financial Firms Ban Facebook
August 21, 2007 @ 03:03 PM | By Melanie Rodier

A growing number of companies are blocking their employees from using the popular social networking Web site Facebook on fears of proscrastination and security. But there are some things you can do - at least to make it safer.

According to a survey of 600 global companies carried out by security firm Sophos, 50 percent of companies ban their employees from accessing Facebook.

Most are concerned that employees are wasting company time. But many are also afraid their employees are sharing too much information on the site, which could in turn lead to targeted phishing attacks against their employer.

continued...
Comment on this blog entry


E*TRADE Gets Proactive About E-Mail Fraud
August 14, 2007 @ 11:45 AM | By Michael Ellison

Welcome. My name is Mike Ellison and I am the EVP at Corporate Insight. We’re a firm that looks at the retail experience at a number of brokerage, mutual fund, and banking firms. From time to time, I’m going to be blogging on subjects related to wealth management. Much of what I will be talking about will come from our experiences in maintaining live accounts at the firms we follow in our research. When we uncover something I feel would generate some lively discussion, I’ll post it and hopefully you’ll chime in with your opinions.

To open our discussion, we recently received an email from E*TRADE on identifying and avoiding fraud that I think should generate some dialog.

continued...
Comment on this blog entry


Merrill Lynch Reports Computer Theft
August 13, 2007 @ 04:51 PM | By Melanie Rodier

Merrill Lynch has become the latest financial institution to hit the headlines because of a security lapse.

Last week, the brokerage announced it would offer free credit monitoring to an unspecified number of employees after a laptop containing staffing records and personal financial details was stolen from its corporate offices in New Jersey.

continued...
Comment on this blog entry


Voice Biometrics Now Viable Security Option, says CellMax
August 08, 2007 @ 04:50 PM | By Melanie Rodier

Financial institutions looking to protect themselves against identity theft and security lapses should be looking to voice biometrics, says Tel Aviv, Israel-based CellMax Systems.

Voice biometrics - the technology that authenticates the identity of a person based on their voice – is a good solution for any company doing business over a communications network that needs a person to be positively identified on the other end, Ziv Barzilay, founder and CTO of voice biometrics company CellMax, says.

continued...
Comment on this blog entry


Web 2.0: A New Port of Entry for Hackers?
July 23, 2007 @ 02:03 PM | By Melanie Rodier

If your company has leapt onto the Web 2.0 bandwagon – embracing applications like blogs, wikis and podcasts that foster increased collaboration and communication - it could be exposing its corporate networks to new attacks from hackers.

continued...
Comment on this blog entry


Canaras Capital Protects its Data Against Botnet Threat
June 26, 2007 @ 05:58 PM | By Ivy Schmerken

If you work for an alternative asset management firm, so much rides on protecting intellectual property, customer data and the reputation of your firm. That is the message from Raffi Jamgotchian, chief information officer at Canaras Capital LLC, an alternative asset manager specializing in credit markets that was founded in 2006.

With botnets and other dangerous forms of crimeware anonymously launching distributed attacks on companies, Canaras Capital set out to protect the firm’s reputation.

continued...
Comment on this blog entry


7 out of 10 Popular Web Applications are Dangerous
May 23, 2007 @ 04:07 PM | By Melanie Rodier

A new study has found that the Web application security landscape is still fraught with danger – and financial services firms had better watch out.

At least seven out of popular 10 Web applications have vulnerabilities that could potentially lead an unauthorized party to steal critical personal information such as social security numbers or transfer money to their accounts, according to a report by Santa Clara, Calif-based Cenzic .

continued...
Comment on this blog entry



March 2010
Sun Mon Tue Wed Thu Fri Sat
  1 2 3 4 5 6
7 8 9 10 11 12 13
14 15 16 17 18 19 20
21 22 23 24 25 26 27
28 29 30 31      

Weblogs of Interest
Dark Reading: Firewalled

Chief Risk Officer: New Era of Risk Management

InformationWeek's Blog Digest

Parry Aftab, the Privacy Lawyer

Categories


Archives
March 2010
February 2010
January 2010
December 2009
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
January 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
January 2007
December 2006
November 2006
October 2006
September 2006
August 2006
July 2006
June 2006
May 2006
April 2006
February 2006
January 2006

Popular Articles