Cybersecurity and Risk Insights and Alerts
Cyber risks and threats continue to evolve, and firms are under pressure to meet SEC and FCA expectations for operational resilience as well as their own internal and client expectations for cybersecurity and privacy. Stay current on the latest cybersecurity, privacy, and risk threat and regulatory alerts, and build your cybersecurity and privacy knowledge with insights from our cybersecurity and technology risk experts.
ACA Aponix Cybersecurity Checklist
Cyber alerts and insights
Urgent Update for Apple iOS
Apple has issued urgent updates for its iPhone, iPad, and iWatch devices. According to Apple, these updates patch a discovered “cross site scripting” vulnerability that allows bad actors to inject malicious code into web pages. The code could be enabled when users access these pages using browsers on Apple devices. This vulnerability may already have been exploited.
- Cybersecurity
Fake Regulatory Emails Received from "IFMR"
Multiple firms have reported receiving emails from an organization posing as the International Fund Manager Regulator (IFMR). There is no legitimate international global regulatory authority for fund managers. This email is a phishing attempt.
- Cybersecurity
- Phishing
FINRA Warns of Fake Emails
The Financial Industry Regulatory Authority (FINRA) has issued an alert warning of reported phishing attempts using fake FINRA credentials. Per the notice, an ongoing email phishing campaign has been reported, in which the fake FINRA domain name of supports @finra-online.com is being used.
- Cybersecurity
NFA Warns of Fake Emails
The NFA issued a notice to members warning of reported phishing attempts using fake NFA credentials. The phishing campaign includes emails using a fake domain that mimics the NFA’s domain name.
- Cybersecurity
Microsoft® Exchange® Servers Suffer Multiple “Zero-Day” Attacks
Microsoft has reported that it has suffered four “zero-day” attacks targeting its on-premises email and calendaring Exchange Server products. The reported vulnerabilities apply to on-premises versions of Microsoft Exchange Server. Learn what steps to take to protect your firm.
- Cybersecurity
Five Reasons to Attend ACA Regulatory Horizon 2021 | Navigating Evolving Risks
There is just one week to go until Regulatory Horizon 2021 | Navigating Evolving Risks, our free-to-attend European based conference for financial services firms is running from 2-4 March. We outline five reasons why this event is worth adding to your calendar.
- Compliance
- Mirabella
- Cybersecurity