Items include

cyber security

Podcasts
Nov 30, 2023
We sit down with Stephen Dougherty of the US Secret Service to hear insights for preventing cyber attacks. Our discussion explores who is vulnerable and types of cybercrime, including BEC schemes, romance scams, work-from-home scams, deep fakes and more. Stephen also provides tips for preventing cybercrime, and reporting suspicious activity to law enforcement or relevant authorities.
BID Newsletters
Jan 31, 2024
Federal authorities have issued an alert about a financial scam called “pig butchering", in which victims are lured into investing in phony schemes, often involving crypto currency. The losses can be significant. We provide tips on how to identify these scammers, if they contact you.
Feb 6, 2024
Employees using unapproved, public generative AI poses a major security risk for your business. We review what shadow AI is, how it leaves your business vulnerable, and what you and your employees can do to minimize the risk.
Jan 9, 2024
Bad actors can prey on a chatbot’s desire to be helpful, gaming its algorithms to provide access to customer accounts or financial systems. We discuss the risks of a chatbot that hasn’t been set up properly and what measures are being taken to make your CFI safer, if you deploy a chatbot.
Dec 12, 2023
We interviewed industry expert and PCBB’s President Mike Dohren about the key trends CFIs should look out for in 2024, including increased cyber risk, funding and liquidity struggles, and credit quality.
Dec 6, 2023
In this second part of our review of 2023, we look at the challenges brought about by the evolving fintech landscape, the ever-increasing cybersecurity threats, and mounting regulatory complexity. We explore how CFIs have responded to these situations.
Aug 23, 2023
Professional-looking scam emails crafted with AI are now hitting worker inboxes. Unfortunately, their polished look is making it harder to detect fraud. We provide tips for how to spot an AI-generated phishing email.
Aug 14, 2023
Can a banking app be secure and easy to use at the same time? Experts say yes, via emerging technologies — and a bit of a change in culture. We discuss the importance of balancing security concerns and user friendliness with your digital banking offerings.
Jul 24, 2023
As phishing attempts constantly evolve, CFIs must train their employees to keep up, such as regularly testing employees through simulated fake phishing campaigns. We share additional tips to help you develop the most effective cybersecurity training program you can to minimize these threats.
Jun 12, 2023
Artificial intelligence is taking voice recognition capabilities to new levels, creating multiple applications for financial institutions — both added conveniences for customers and enhanced security. Before embracing AI-backed voice software, however, financial institutions should be aware of the security risks they can create.
Aug 13, 2019
In our fourth "Inquiry and Insight" issue, Steve Brown answers questions on phishing, CECL and online lending competition.
May 4, 2023
CFIs are among many financial services companies that have been hit by ransomware attacks, and the financial services sector is among those most likely to pay the ransom. To fight back, CFIs need to create a hostile environment for cyber attackers.
Feb 10, 2023
Financial customers remain wary of mobile apps, even as usage continues to grow. We discuss how CFIs can address consumer security concerns to help them feel comfortable using financial apps.
Nov 23, 2018
Despite the rising popularity of finance apps, most people who use them have concerns about data privacy. How to educate your customers on the privacy risks.
Oct 10, 2018
Digital wallets, where cryptocurrency sits, and the exchanges on which they can be traded, present vulnerabilities that have already publicly been exploited. What can your bank do to stay safe?
Apr 5, 2023
As regulators step up their oversight of cybersecurity and prepare to impose new regulations, CFIs need to review their cybersecurity programs and plug any gaps accordingly. Regulatory proposals provide the perfect guide for where CFIs should focus their efforts.
Oct 5, 2021
Software vulnerabilities cause severe headaches for IT personnel. The number of vulnerabilities has almost tripled from just under 6,500 in 2015 to more than 18,300 in 2020. Is your IT team ready for this exponential explosion? We discuss why it is vital to address these software issues and provide you with three steps to help keep your institution and customers safer.
Nov 23, 2021
This year has certainly been a year of change. Today we look back on how some fundamental changes to the regulatory and cybersecurity landscape have affected community financial institutions. It’s been a year of renewed focus on compliance and risk, the LIBOR transition, and increasing threats from cybercriminals.
Dec 23, 2021
Due to the high stakes in cyber risks within the financial industry, regulatory agencies recently issued specific guidance called, “Computer Security Incident Notification Requirements for Banking Organizations and Their Bank Service Providers.” The new rule goes into effect on April 1, 2022, and financial institutions are required to comply by May 1, 2022. Here are the details.
Dec 2, 2019
Today we provide insight to customer inquiries on cybersecurity, verifying legal entities and the continuing evolution of digital banking.
Jun 14, 2018
New Payment Card Industry Data Security Standard requirements will go into effect June 30th. What you should know to stay compliant.
Feb 20, 2018
A recent survey finds more banks are feeling pressure in managing risk across all lines of business. How does your bank compare?
Jan 18, 2018
Social media financial scams reached $420mm for the top 25 largest US banks. Tactics for banks to manage social media risk and still stayed connected socially.
Oct 28, 2021
Cyberthieves are not slowing down. But, the Financial Services Information Sharing and Analysis Center provides an option to help. Thousands of financial institutions have joined an initiative to pool online intelligence information to fight back. Could your institution benefit from this too?
Nov 29, 2021
OTP fraud is a new threat that community financial institutions need to know about. One-time passwords (OTP) are intercepted by cyberthieves allowing them access to financial accounts clandestinely. With two-factor authentication more widespread, cybercrime services have seen entry points and cyberthieves have jumped in. Here is a summary of OTP fraud and what you should do about it.
Jan 24, 2022
Are you protected against drive-by skimming and supply chain website attacks? These can be hard to detect even with the usual cybersecurity measures such as firewalls, penetration tests, and security assessments. We explain how these attacks happen and what community financial institutions can do to mitigate the risk of these occurring to them.
Feb 28, 2022
Deepfakes have been around for a while, but they are now increasing dramatically with costly effects. Deepfakes are fabricated pictures, videos, or audio using advanced technologies to replace a person in an image or alter a person’s voice. Let’s explore the latest insights from industry experts, how much damage deepfakes are causing, and how to protect your institution from three related scams.
May 10, 2021
Dark web sites are only accessed with encrypted software to allow stolen financial information to be sold to cyberthieves anonymously. It is a lucrative operation as these illegal sites have been known to make over $1B. Three ways to help stem the tide of stolen financial data are using Open Source Intelligence tools to search the dark web, keeping updated on new threats, and working with law enforcement.
Jun 17, 2021
Infamous cybercriminals caused the Colonial Pipeline breach and also hacked into three community banks within the same timeframe. Seven tips can help protect your institution, including: educating employees, limiting network exposure, backing up data, automatically updating devices, contacting the FBI if attacked, reminding customers regularly, and keeping resources handy.
Jun 18, 2021
Cybercriminals are bold these days, as cyberattacks remain lucrative for them. In 2020, more than 19K businesses and individuals lost over $1.8B through email fraud, more than any other type of cybercrime. The best defenses for financial institutions in the fight against business email compromise are employee training, KYC & suspicious activity tracking along with security tools and customer information.
Sep 3, 2021
Multi-factor authentication has become more widely used by organizations with ongoing data breaches proving costly. Even community financial institutions have been hit. It may feel overwhelming to know how to start. So, we give you three considerations when deliberating on multi-factor authentication as well as a few options that are available.
Mar 1, 2021
Synthetic identity fraud costs financial institutions over $6B per year. This is a continuing problem that has been exacerbated by the coronavirus and affects the most vulnerable populations, such as children and seniors. It is critical to know how to identify and fight synthetic identity fraud with a layered approach and collaboration with other institutions. We provide some insight.
Feb 10, 2021
Passwords have long been the chief method of authentication for users. Yet, the human elements of memorization difficulty and affinity for convenience coupled with the new risks of the work-from-home environment have pushed several financial institutions to consider two-factor authentication. Is it time for your institution?
Feb 8, 2021
The average cost of a data breach in the US last year was $3.68MM and this number is only expected to get larger. Can a Security Operations Center (SOC) help your institution? We explore the options, including in-house, outsourcing, and SOC-as-a-Service to help guide you through this process.
Aug 25, 2020
Ransomware has been a growing threat. But, the greater reliance on digital access from the pandemic has resulted in an alarming spike in attacks.
Mar 18, 2020
BEC attacks have cost businesses $26B over the past 4Ys and cybercriminals keep stepping up their game. We share the latest information.
Feb 25, 2020
There are many security tools that can identify potential threats to your financial institution, but there are also many false positives too. We give you tips to help.
Jan 21, 2020
Suspected fraudulent transactions from mobile devices increased 138% since 2017. Staying on top of this is tough but important.
Jan 17, 2020
In a recent survey, 96% of community bank CEOs named cybersecurity risk as a top concern. With this in mind, we highlight the cybersecurity trends for 2020.
Dec 18, 2019
The FBI recently warned of attacks that bypass multi-factor authentication (MFA). Is MFA still a good solution?
Nov 27, 2019
Cyber criminals can now replicate digital fingerprints. We provide you with some tips to stay safe.
Oct 15, 2019
Experts say there are ways that banks can share helpful information about cyber incidents, without divulging too much and violating privacy laws. We explain how this could work.
Aug 19, 2019
A recent Accenture report describes how various threats could evolve in the future. We give you the highlights.
Jun 20, 2019
Mobile wallet technology is becoming increasingly popular. But, just like any technology rapidly on the rise, there are growing risks to consider.
May 9, 2019
As the remote work trend intensifies, it brings to the forefront the importance of strong cybersecurity practices. We provide some insight.
Apr 11, 2019
Synthetic identity fraud is difficult to track and halt due to its very nature. So, what can community banks do to prevent this dangerous fraud from happening?
Mar 19, 2019
Phishing is still a big problem. One of the best ways to educate people within your bank about the risks is to actually phish them on an ongoing basis.
Feb 13, 2019
According to McAfee Labs, data breaches rose 20%, in Q3 2018 vs. the same period in the prior year in the financial sector. What should you expect from cybercriminals in the future?
Jan 30, 2019
The exploitation of privileged users' access to a network is typically the main root cause of most large-scale breaches. Do you have a well-developed PAM to mitigate this big risk?
Jan 22, 2019
Bank features and criminal ingenuity are in an evolutionary arm's race, so it should surprise no one that criminals have figured out a way to turn ATM cardless technology to their advantage. We provide tips for your bank to stay safe.
Jan 15, 2019
Bankers know cybersecurity continues to be a top priority. To protect your bank, here are some tried and true ways to do so.
Jan 7, 2019
Cyberattacks happen 300x more frequently in financial institutions than other industries. A system of buddy banks was created to help. Are you Shelter Harbor-ready?
Dec 20, 2018
Botnets do have legitimate purposes, such as web indexing, but their dark side predominates. What community bankers should know.
Dec 19, 2018
Cybersecurity is serious stuff, but the FDIC's Cyber Challenge video series makes training a little easier for community banks. We give you the highlights.
Dec 6, 2018
Cisco reports that many small and medium-sized businesses can go out of business due to a cyberattack. How to help keep your business customers safe.
Nov 29, 2018
Banks can always do more when it comes to cyber breaches and threats. We provide the latest insights from Verizon's 2018 Data Breach Investigations Report.
Nov 15, 2018
Many banks use text message authentication, but thieves are finding ways to hack it. We provide an update along with tips to keep you and your customers safe.
Nov 6, 2018
The rate of voice fraud has risen more than 350% from 2013 to 2017 with no signs of abating. What can you do to protect your bank from this new threat?
Oct 16, 2018
A recent FICO study shows 80% of consumers don't see the need for what they consider unnecessary security procedures. How to strike a balance between security and customer satisfaction.
Oct 5, 2018
Because of the increased security of EMV chip cards, robbers are turning away from bank card theft and moving directly to ATM theft. What your bank should know.
Oct 1, 2018
Now that hackers use sophisticated tools to detect versions of commonly used passwords, the National Institute of Standards and Technology (NIST) issued revised password guidelines. We have the update for you.
Aug 29, 2018
Before you start blaming your young bank employees' online habits for security issues, you will want to see what one survey found out.
Aug 10, 2018
You can do your best to keep up with the latest cybersecurity measures, but they aren't perfect. Cyber risk insurance could help protect you if and when that day arrives.
Jul 3, 2018
A recent report by the FBI's Internet Crime Center provides stats and examples of some real cybercrime risks out there. We give you the highlights.
May 10, 2018
The World Economic Forum projects the cost of cybercrime to businesses will hit $8T over the next 5Ys. We outline ways to stay safe.
Apr 11, 2018
Payroll phishing scams are on the rise. What your bank can do to protect itself and its employees.
Mar 30, 2018
When should community banks outsource IT security measures? We have some answers.
Mar 20, 2018
More than half of banks report that they are unable to combat and keep up with the rapidly changing nature of fraud schemes. Other highlights from a recent fraud survey.
Feb 12, 2018
Ninety percent of cybersecurity budgets focus on securing the network while nearly 75% of all cyberattacks happen at the application level. The key threats in 2018.
Jan 31, 2018
Banks are recognizing that mitigating IT risk cannot be the sole responsibility of the IT department. Everyone, from the top down, at a bank needs to be involved.
Jan 10, 2018
There has been discussion about replacing the social security number. What could replace it and what are the ramifications for banks?
Dec 27, 2017
According to Chicago Fed research, there are 7 cyber threats that are the most common in community banks. Make sure you know them all and what to do.
Dec 18, 2017
In 1H 2016, 554mm records were compromised and the cyber thieves are getting more sophisticated. Some banks are turning to AI for help.
Sep 12, 2022
Online gaming platforms have become extremely popular in recent years, with 76% of children under 18 playing regularly and connecting their parents’ credit cards and bank cards to their gaming accounts. Financial education about the risks of online gaming payments can add value for young and older customers alike.
Jul 19, 2021
With the recent cyberattack on Kaseya, cyber concerns remain high among many businesses, especially small businesses. For good reason, as 43% of cyberattacks target small businesses. Community financial institutions may want to familiarize themselves with cyber insurance basics to help guide their business customers as more may turn to insurance to protect themselves. We provide four cyber insurance considerations.
Dec 17, 2020
According to IBM, baby boomers are expected to increase online holiday shopping by 116% this year. We share four ways to keep your senior customers safe from cyber thieves.
Nov 25, 2020
Credential stuffing is a common cyberattack that can lead to account takeover. What you should know to stay safe.
Dec 7, 2021
Bank mergers and acquisitions in the US hit $52B at the end of September, according to S&P Global and community financial institutions have been very active players. While exploring this option and developing your M&A strategy, it is important to not only consider the usual operational and credit risks, but also the potential for increased cyber risk. Here are three cyber risks to put on your radar.
May 7, 2018
Media attention can be helpful for your bank. However, cyber criminals can use the resulting information for attacks against you and your bank. How to be media savvy and safe.
Jul 7, 2022
Synthetic images have become so sophisticated that people and facial recognition systems are no longer able to tell the difference between AI-generated faces and real ones.
Oct 21, 2022
Organizations with fewer than 100 people account for 22% of all fraud cases and a median loss of $150K. Preventing financial fraud is easier when small business owners and employees know how to spot signs of trouble. CFIs can help their commercial customers by educating them about fraud — we provide several fraud-prevention steps for you to share.
Feb 1, 2023
While fraudsters will try any and all methods across every generation, certain practices for each generation typically bear the most fruit. CFIs should be aware of the types of online fraud that each generation is most susceptible to, then educate their customers on ways to not fall prey.
Feb 21, 2023
Wire fraud is an ongoing problem for CFIs and their customers. Implementing multiple verification methods can help combat this. We explore a variety of options and provide the pluses and minuses of each one.
Mar 14, 2023
The tactics that cybercriminals use are ever-changing. Keeping your customers and your institution protected against cyber fraud requires staying on top of the latest trends and making sure everyone knows what to look out for.
Aug 27, 2021
Since COVID-19, fraud has increased threefold, which is causing bankers to work harder than ever to fight fraud. Technologies have helped. Yet, with such large transaction volumes to process, it can be challenging, leading to a zone of uncertainty. We explain what this is and how to reduce this uncertainty with three key steps.
Mar 17, 2022
The use of QR codes has skyrocketed since the pandemic. This year, one billion smartphones are expected to access QR codes globally, according to Juniper Research. This increased use has gotten the attention of cybercriminals. Here are four ways you and your customers can protect yourselves.
Mar 25, 2022
Did you know that 15MM Americans experience identity theft annually? In an effort to help stem this tide, several organizations are using selfie authentication, which uses biometrics to validate a person’s identity along with other information. We outline the growth of this practice, along with consumer pushback, data privacy laws, and more.
Jan 19, 2021
Are you doing everything you can to help your customers fight fraud? We share four ways that your peers are doing this, including text messages, locking and unlocking cards, and education.
Dec 14, 2020
The PPP brought much-needed funds to many businesses. Yet, it has also brought fresh fraud opportunities. We highlight the three latest cybersecurity scams connected with PPP to protect you and your customers.
May 13, 2020
A recent report shares the newest cyber risks related to COVID-19. We give you the abbreviated version so you are prepared.
Apr 21, 2020
While most community financial institutions had a formal data security plan before the COVID-19 outbreak, cyber risks have increased as staff was moved to working remotely. Tips to secure your data security plan during the coronavirus situation.
Mar 27, 2023
The average cost of a data breach in the finance industry is estimated to be $5.97MM. Increasingly, financial institutions are using so-called white hat hackers to test the security of their systems. We discuss how they can help you improve your cybersecurity and protect your CFI and customers.
Nov 21, 2022
Hybrid work arrangements are here to stay. Given this reality, CFIs should be aware of the cybersecurity risks created when people work from home and how to protect against them.
Feb 13, 2023
Cyber insurance can be part of protecting against digital crime. We discuss how it can protect financial institutions and their customers against financial losses and provide other resources if and when a cyberattack occurs.
Nov 10, 2022
A recent survey indicates that 89% of IT security leaders at financial services firms think authentication systems that use biometrics, push notifications, and other alternatives are more secure than passwords. Though CFIs will have challenges implementing password-free systems, the reward could be safer data and better customer satisfaction.
Dec 1, 2022
Cyber criminals lurk in a murky digital netherworld just beyond a CFI’s security wall. Knowing how to monitor those cyber spaces can help protect against breaches. We discuss a few growing cyber threats as well as strategies to enhance your CFI’s digital protection to prevent potential attacks.
Dec 14, 2022
The cybersecurity landscape is constantly shifting and evolving. In our third and final recap of 2022, we look back at some of the trending cybersecurity risks posed to CFIs during the year and highlight key technology advancements helping to combat cybercrime.
Mar 18, 2022
With 58% of C-suite and senior business leaders reporting that cyberattacks increased by 10% or more in 2021 vs. 2020, cybersecurity is increasingly vital. We review the top cybersecurity concerns from the 2021 CSBS National Survey of Community Banks and share an important tool to use in protecting your institution against surging cyber risks.
Apr 5, 2022
Cybersecurity is a constant concern. Yet, with the latest Russian cyber threats, it is becoming even more important. Your small business customers could be affected, directly and indirectly. So, we dig deeper to provide you with the current top threats and critical protective measures.
Jun 6, 2022
According to the 2021 CSBS National Survey of Community Banks, cybersecurity risks remain the leading operational concern for community financial institutions. Here we look at six strategies institutions could deploy to contain the threat, protect their data and retain their customers’ trust.
Jun 10, 2022
Many financial institutions rely on interactive voice response to provide customers secure access to information about their accounts. While extremely efficient for customer service, insufficient security measures can also make them a gateway for fraud. We highlight several areas that bankers should be aware of regarding IVR fraud.
Jul 13, 2022
The FDIC recently published its 2022 Risk Review. We summarize some of the report highlights relating to market, operational, and climate-related risks emerging within the banking industry, and discuss their potential impact on community financial institutions.
Sep 8, 2022
A June 2022 report from Allure Security, a cybersecurity firm that specializes in protecting financial institutions, says that about 20% of CFI’s are the targets of website impersonation attacks. Rather than simply assume that website impersonation attacks are something that happens to larger banks, CFIs should be proactive about protecting themselves and their customers from this kind of fraud. We explore a few tactics to keep your CFI and your customers safe.
Oct 3, 2022
As the amount of online fraud continues to rise, there is mounting evidence that information-sharing initiatives around the world could provide a glimpse into the future of how financial institutions can most effectively identify and combat cybersecurity attacks.
Oct 12, 2022
The financial sector is facing a debilitating cybersecurity talent shortage. In a proactive response, many companies are broadening candidate pipelines and cultivating talent on their own terms. We dive into several examples of unconventional, yet practical, talent sourcing methods.
Oct 21, 2021
By 2025, experts say that 75.4B IoT devices will be connected globally, which is more than double from 2021. This surge in connected devices increases the opportunities for cyber thieves to find vulnerabilities and cause havoc for entire business systems, including community financial institutions. Do you have updated endpoint security to stop them?
Feb 15, 2022
With big threats of ransomware, financial institutions rely on their back-up systems to avoid paying a ransom and indemnify them, if their systems are not unlocked by the thieves. This has prompted cybercriminals to go straight to the source and target stored data. With 69% of financial institutions stating that an attack on their stored data would have a catastrophic effect on their business, data protection is critical. Here are three ways to do it effectively.
Apr 29, 2021
Online crime has increased during the pandemic, unfortunately. The latest FBI internet crime report shows that 241K victims have fallen prey to phishing or related scams, business email compromise has resulted in losses of greater than $1.8B, credit card fraud claimed almost $130MM in losses, and 2.5K ransomware complaints were filed. We give you reminders to continue to stay safe along with your customers.
Jul 30, 2021
In Verizon’s 2020 Data Breach Investigations Report, it was found that 81% of all breaches involved stolen or weak passwords. The human element in passwords is the main reason for the continuing frailty of passwords. Now, Apple and Google have new approaches to passwords. We guide you through them along with password managers and MFA to help keep your staff and customers safe.
Jan 6, 2021
How are financial institutions spending their technology dollars in 2021? Some of the areas include digital advancements, AI, digital currencies, and cybersecurity.
Oct 14, 2020
Password protection is especially important these days. We share three key password management reminders.
Mar 2, 2020
Our readers asked us about opening banking, cyber-attacks and AI in credit decisions. Today, we provide our insight.
Jan 3, 2020
The 2019 CSBS community banking survey has some valuable insights. We provide them to you today.
Oct 1, 2019
We bring you the latest updates on biometric privacy laws as you seek to strengthen your cybersecurity.
Oct 23, 2018
Unlike traditional biometrics, such as a fingerprint, invisible biometrics use sensors or computer coding that are unknown to an individual. We provide you with the details of this new technology.
Sep 5, 2018
A new report now predicts that in two short years, 1.9B bank customers will be using biometrics to perform a variety of functions. We give you a rundown of the latest in biometrics.
Aug 30, 2018
With the explosion of IoT devices comes increased cyber risk for banks. Guidance from the government has been released to keep organizations safe. We have the main takeaways.
Aug 2, 2018
Celent finds IT spending by US banks has risen by more than $10B in the past 5Ys. We help you avoid IT spending mistakes to get the most bang for your buck.
Jul 31, 2018
Accenture reports that the data many banks base business decisions on is easily manipulated. We provide you with the key takeaways of this report to help ensure your data is reliable.
Jul 6, 2018
A recent experiment found cybercriminals would be significantly more successful in their phishing efforts if they were to add AI to those efforts. What this could mean for community banks and their cybersecurity.
Jun 26, 2018
The number of identity fraud victims last year rose by 8% to 16.7mm US consumers, despite widespread efforts to stop this type of fraud. What more can your bank do?
May 15, 2018
A new survey by Safe Systems on community institutions and their IT staffing practices sheds some light on what your peers are doing, and what you can do to stay cyber safe.
May 2, 2018
According to a 2018 IT survey by Safe Systems, about 50% of community institutions said they had more than 100 devices connected to their networks. We provide learnings from this survey.
Apr 26, 2018
Mobile apps - including banking apps - are more at risk now than ever before. A Verizon report provides details on the types of risks and the practices recommended to protect your bank.
Mar 15, 2018
As information security has become an increasingly important issue for banks, more community banks are looking into hiring experienced CISO talent. Ways to attract the right person for this role.
Dec 11, 2017
Cyber thieves will typically go after the lowest hanging fruit. Areas of concern for banks: new account application fraud and deposit account hijacking. What can your bank do to mitigate these?
Nov 27, 2017
The latest biometric technology is facial recognition yet bank customers are wary. What bankers should know.
Jun 13, 2016