It’s no secret that banking applications – both traditional and emerging fintech apps – still remain a prime target for financially-motivated cyberattacks. Cybercriminals are money-motivated, targeting the applications and institutions with the potential for the highest reward.
Cyber Security
Cyber criminals, state-sponsored hackers and even the occasional disgruntled employee are constantly looking to gain unauthorized access for a variety of purposes: theft of money, cyber espionage, personal information for sale or for use in scams, and damage to critical infrastructure for just a few of the most common.
So how does an organization mitigate an entire world full of continual cyber attacks? Just as buildings have a number of necessary elements of physical security: access control, cameras, alarms and so on; there are similar key elements of cyber security that are absolutely vital for just about any modern business.
It starts with identifying and closing the most common doors that attackers use. For example, phishing attacks on employees are far and away the most common initial point of entry. The breach of even a low-level employee account can quickly turn into an escalation in access privileges and the ability to reach sensitive information. This is also true of smart devices, which are generally more poorly secured than computers and phones.
Despite the growing popularity and economic importance of mobile apps, many businesses fail to prioritize mobile application security and privacy in the development process.
A Cloudflare CDN flaw that can expose some location data to an attacker was patched before being ethically disclosed, but the security researcher that discovered it says that the trick still works with the use of a VPN service and some extra steps.
Advancements such as Infrastructure as Code, DevSecOps and Security as Code are making a difference in the world where the most life-critical organizations release new code hourly.
Fortinet warned customers to immediately patch an authentication bypass critical vulnerability in FortiSwitch Manager, FortiGate, and FortiProxy which are being actively exploited in the wild.
At least 30,000 U.S. organizations are victims of an unusually aggressive Chinese cyber-espionage unit exploiting vulnerabilities in Microsoft Exchange mail Server software. The previously unknown state-sponsored Chinese hackers identified as...
A suspected fraudster accessed credit data of 24 million South Africans and 800,000 businesses in a massive Experian data breach.
A recent study conducted by Chubb in major Asia-Pacific markets reveals that SMEs tend to be both overconfident and underprepared when it comes to cyber awareness.
New EKANS ransomware is the first for-profit strain of ransomware designed to shut down specific processes used in industrial control systems made by GE and other major manufacturers.
As regulators get more serious about enforcing data protection rules, the severity of penalties issued against enterprises who fail to secure their customer data continues to grow and there's higher demand for better executive accountability as seen in the recent cases of Uber and Drizly.










