New ATM Guidelines Issued by FFIEC – What You May Have Missed & What You Can Do

Recently, the Federal Financial Institutions Examination Council (FFIEC) released an alert regarding ATM machine control panels. The guidance aims at addressing a recent wave of ATM cash-out attacks that have been dubbed “Unlimited Operations” by the secret service. The guidance explains that in this kind of attack, criminals gain access to the web-based control panels …

Read more

Tackling Today’s Evolving Fraud

It almost seems like a day doesn’t go by without someone reporting the discovery of hundreds of millions of pieces of user-specific information related to credit and debit cards, e-mail addresses, or log-in credentials being sold on underground markets[1]. If these numbers are true, the banks are paying the price for these leaks in a …

Read more

How to Properly Leverage Mobile for Out-of-Band Authentication

In the wake of the most recent FFIEC guidance published in 2011, many financial institutions and service providers have undertaken very expensive and time-consuming projects to replace the traditional challenge questions and answers that they previously used as a security measure. One of the more popular solutions suggested as an alternative was to provide out-of-band …

Read more

Satisfy FFIEC Guidance for Social Media with Brand Intelligence by Easy Solutions

FFIEC Guidance published on December 11, 2013 and effective immediately, addresses mounting risk factors facing financial institutions related to social media. The FFIEC states that all financial institutions should effectively assess and manage risks associated with all activities conducted via social media platforms. These risks include compliance risk, legal risk, reputation risk, and operational risk

Read more

Kickstarter for Advanced Mobile Malware – New Carrier Policy Will Drive Malware Innovation

Late last year, AT&T, Sprint and T-Mobile together announced that they will no longer offer or support Premium SMS services (with Verizon following shortly after).  Premium SMS supports things like ordering ring-tones, checking horoscopes and all sorts of other things I have never done.  It also supports legions of spammers, shady SMS aggregators and 3rd …

Read more