Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Know Your Customer (KYC) isn’t merely a regulatory requirement; it’s the linchpin of financial integrity and security. In an era where fraudulent activities and money laundering schemes are increasingly sophisticated, KYC stands as the first line of defense. It serves a dual purpose: safeguarding financial institutions from becoming unwitting accomplices in illegal activities and protecting the economy at large from financial crimes.

If you recently took a relaxing European vacation and flew Air Europa, check your credit card statement. They are the latest victim of a malicious hack exposing customer credit card numbers, expiration dates, and even the associated stored CCV codes—which contradicts Payment Card Industry Data Security Standard (PCI DSS) regulations.

At the recent Xalient 2023 Summit: Shaping a Secure Connected Future held at the iconic Abbey Road Studios in November, there were several fascinating talks around the challenges facing senior leaders in IT as they prepare for the future.

Data is the lifeblood of organizations. It drives decision-making, fosters innovation, and underpins business operations. However, this wealth of data is scattered across multiple cloud platforms, making it an attractive target for cybercriminals, and rendering traditional approaches to data protection obsolete. This is where data-centric security comes into play. This article will explore the concept of data-centric security, why businesses need it, and the benefits it offers.

CISA sent out a warning about a Russian advanced persistent threat (APT) called Star Blizzard warning about their long-game social engineering tactics. They create fake email and social media accounts, contact their potential victims, talk about a non-threatening subject to gain the victim’s confidence, and wait to launch their malicious attack. I call this long-game social engineering.

Researchers at Nisos warn that North Korean threat actors are impersonating skilled job seekers in order to obtain remote employment at US companies. “The identified personas claim to have highly sought-after technical skills and experience and often represent themselves as U.S.-based teleworkers, but Nisos investigators found indications that they are based abroad,” the researchers write.