2 min read
Financial institutions have long relied on network‑based controls to keep criminals out of Internet Banking systems and other critical infrastructure. But those controls are becoming less effective as criminals increasingly hide behind residential...
Read More
2 min read
One of the most important processes in cybersecurity for financial institutions today is third-party due diligence. However, it is also one of the...
2 min read
Back in May 2024, I wrote that there were signs ransomware might finally be on the decline. I have continued to monitor various sources regarding...
2 min read
The curtain rises. The scene: a quiet sunny day on the teller line.
2 min read
In today's digital landscape, securing user authentication is more critical than ever. Recently, I explored the benefits of using Yubikeys and...
3 min read
For years, having long and complex passwords has been ingrained in us as a requirement, so it may seem strange to consider eliminating passwords...
3 min read
Most ransomware gangs gain their foothold in an organization by taking advantage of at least one vulnerability. The vulnerability may be on a user...
2 min read
When the Dodd-Frank Act was passed in 2010, it included Section 1033. This section required the Consumer Financial Protection Bureau (CFPB) to create...
2 min read
I have a lot of passion for my role as a Virtual Chief Information Security Officer (vCISO) for financial institutions, and I am always happy to tell...
2 min read
In late August, the FFIEC announced that they would sunset the Cybersecurity Assessment Tool (the “CAT”) on August 31, 2025. It had been apparent for...