Building Your IT Risk Management Program
Examiners have made it clear: if your management team understands the risk exposure of information and technology to your bank, you are definitely heading in the right direction. If risk is considered in all technology decision making, an effective IT risk management process has been implemented.
Another Ponzi Case – And a Warning for Investors
He was living the high life—taking up residence in a Miami Beach mansion worth more than $5 million, cruising around in a million-dollar yacht and his leased Mercedes-Benz, shelling out more than $400,000 for floor seats at Miami Heat basketball games, and donating thousands of dollars to the athletic program of a local university (the school was so appreciative it named a student athlete lounge after him).
Email Attack Targets HR Departments
Here’s a very good reason to send periodic information security reminders to your employees – in particular: Do not open e-mail attachments from anyone you do not know! A targeted attack aimed at human resources departments and hiring managers in the U.S. and Europe was spotted this week — and sent 250,000 emails during a four-hour period yesterday at the height of the assault.
Trojan Pretends To Be Window 7 ‘Compatibility Checker’
According to an article posted by Dark Reading, a Trojan horse masquerading as a tool that helps users get ready for Windows 7 is on the loose and about to become widespread.
Microsoft Updates for Multiple Vulnerabilities
Microsoft has released updates to address vulnerabilities in Microsoft Outlook Express, Microsoft Windows Mail, Microsoft Windows Live Mail, Microsoft Office, and Microsoft Visual Basic for Applications.
Wi-Fi Key-Cracking Kits Sold in China
According to PC World, dodgy salesmen in China are making money from long-known weaknesses in a Wi-Fi encryption standard, by selling network key-cracking kits for the average user.
Visa Warns of Fraud Attack from Criminal Group
Visa is warning financial institutions that it has received reliable intelligence that an organized criminal group plans to attempt to move large amounts of fraudulent payments through a merchant account in Eastern Europe, possibly as soon as this weekend, according to an article posted on Krebs On Security.
Hacker Develops Multi-Platform Rootkit for ATMs
An article posted by Network World has me a tad bit worried. Evidently, security researcher Barnaby Jack plans to deliver a talk entitled “Jackpotting Automated Teller Machines,” at the Black Hat Las Vegas conference. Jack will demonstrate several ways of attacking ATM machines.
Mark Your Calendars: IBA IT Security Conference
Mark your calendars! The Indiana Bankers Association has scheduled their IT Security Conference for 2010.
Treasury Department Web Sites Redirect Visitors to Malicious Sites
According to a post on The Register, several US Treasury Department web sites are redirecting visitors to other sites that try to install malware on their computers. The attack uses an embedded iframe in three Treasury web sites that invokes scripts from another site.