Threat Intelligence, Phishing Testing, and Monitoring

June 15, 2021

The FBI has warned of recent criminal activity in which threat actors impersonate investment advisers and brokers online.

June 10, 2021

The Financial Industry Regulatory Authority (FINRA) has issued an alert warning of reported additional phishing attempts using fake FINRA credentials. Per the notice, an ongoing email phishing campaign has been reported, in which the fake FINRA domain name of "gateway-finra[dot]org" is being used.

May 26, 2021

Find out what financial firms have identified as three of the knottiest issues facing compliance teams this year, the top five compliance areas that could benefit from better technology, and the biggest hurdles to compliance technology adoption in our latest peer analysis infographic.

May 25, 2021

The General Data Protection Regulation (GDPR) reached its third-year anniversary on 25 May 2021. Three years after implementation, we speak with Alex Scheinman, Managing Director, ACA Aponix, about the impact of the regulation, how the COVID-19 global pandemic, Brexit and Schrems II influence the regime, and where data privacy rules will head next.

May 20, 2021

The Financial Industry Regulatory Authority (FINRA) has issued a regulatory notice in response to a noticed increase in customer account takeovers (ATOs). During these ATOs, bad actors compromise account information, gain unlawful entry into customer online brokerage accounts, make fraudulent transactions, siphon out funds, and commit other crimes. Similarly, bad actors have increasingly been using simulated identities to open online accounts, and unlawfully access funds and data. FINRA’s regulatory notice summarizes the observations of 20 firms of various business models and sizes on the subject.

May 19, 2021

The SolarWinds breach and the Microsoft Exchange server breach are striking, both in the extent and the breadth of their damage. The damage is ongoing; as part of the attack pattern, backdoor malware designed to give the attackers persistent access to the compromised organizations has been planted for future criminal activity. The recent executive order on cybersecurity testifies to the severity of the problem and the need for a centralized, proactive response. Learn what patterns we have observed and the mitigating strategies we recommend.