Brad Deflin

Discover how Digital Federal Credit Union leveraged Axonius to maximize asset visibility and improve security control coverage in this recent case study. View the full study and hear from Mike Conroy, Assistant Manager of Information Security Risk here: https://axoni.us/3BszOcV #Axonius #casestudy #cybersecurity

18

Sign up for the Cyber Florida newsletter and get the latest news and events straight to your inbox. Join today! #cyber #cybersecurity #CyberFlorida #secure #news

1

Timestamping is a critical element for the financial industry. Trading audits and cybersecurity investigations are just two key areas where timestamping comes into play. #Hoptroff #SAFRAN #PTP #NTP https://ow.ly/R1NW50T1bkO

1

What is the difference between securing physical assets versus digital ones? In a recent episode of the Future of Cyber Risk podcast, David Lingenfelter, Chief Information Security Officer at PENN Entertainment, Inc, explains that casinos used to think of security in terms of brick and mortar. However, things have changed significantly. Now, not only do physical locations and assets need to be protected, but so do digital elements. For example, there must be a balance between giving the right people reasonably easy access to where they need to go while still keeping security top of mind. Check out the full episode here: https://ow.ly/zzll50RfmMv #futureofcyberrisk #cybersecurity #cyberrisk #threatintelligence #riskmanagement

18

1 Comment

(SEC - Select Area) SEC Announces Enforcement Results for Fiscal Year 2024 Emerging Technologies and Emerging Risks Fiscal year 2024 saw heightened investor risk from emerging technologies and cybersecurity incidents and from market participants using social media to exploit elevated investor interest in emerging investment products and strategies. The Division kept pace, investigating noncompliance and false or misleading disclosures involving artificial intelligence, social media, cybersecurity, crypto, and more. #SEC #2024 #enforcements #risks #technology https://lnkd.in/eExnp9qH

3

🌟 BlackRock and Morgan Stanley Achieve FDC3 2.0 Conformance Certification, Leading Industry Interoperability, Announces FINOS 🌟 FDC3 ushers a new era of buy-side, sell-side connectivity as industry leaders surface adoption of the open standard in their financial desktop platforms 📖 Press Release: https://hubs.ly/Q02Rx_PL0 🗣 Key Voices from the Industry: Madeleine Dassule – Partner and CIO Infrastructure Platform, Wellington Management: "FDC3 has gained significant momentum, as evidenced by these new conformance and adoption results. And we’re very excited to see innovations such as FDC3 for the Web, and FDC3 Identity and Security, being driven by the open source community." Gabriele Columbro – Executive Director, FINOS: "Having industry leaders like BlackRock and Morgan Stanley now certified by FINOS as FDC3 2.0 Conformant is a major milestone as it will no doubt exponentially grow the network effect FDC3 is already experiencing. Paired with adoption from leading financial data platforms, it’s hard to overstate what a watershed moment this is in breaking long-standing industry silos and vendor lock-in." Lance Braunstein – Senior Managing Director, Head of Aladdin Engineering, BlackRock: "At the heart of fintech innovation is the ability to seamlessly integrate diverse financial systems, and open source accelerates this by promoting collaboration and transparency across the industry. BlackRock is proud to achieve FDC3 2.0 Conformance Certification for our Aladdin platform. FDC3 standards will ensure seamless interoperability and workflow efficiency, future-proofing the Aladdin ecosystem for faster, secure, and flexible client value delivery." Brian Ingenito – Executive Director, Distinguished Engineer at Morgan Stanley: "Achieving FDC3 2.0 Conformance Certification is a significant milestone for Morgan Stanley and is a step in our journey to enable FDC3 interoperability across our portfolio of applications covering a range of programming languages and platforms. We believe that open standards like FDC3 are essential for unlocking new scenarios and efficiencies in user experience on the desktop for both our employees and our clients." #FDC3 #FINOS #Interoperability #OpenSource #Finance #TechInnovation #Collaboration

24

3 Comments

ICYMI: SEC establishes Interagency Securities Council (ISC): The SEC has established the Interagency Securities Council (ISC) to support collaboration between federal, state and local agencies.  #cyber #cybersecurity #informationsecurity #technology #innovation #channelpartners #management

1

We want to hear from you. Would you like to write a guest blog or participate in a podcast? If so, contact us at [email protected] #security #integrasintelligence #duediligence #privateinvestigators #investigationinsiders #podcast #privateinvestigations #backgroundchecks #litigationsupport #employmentscreening #riskmanagement #executiveprotection #securityassessment

6

D&O expert Walker Newell dives into the historical background of SEC cyber and securities enforcement, as well as two different possible futures for regulation in this space now that the SolarWinds has largely been struck down. https://lnkd.in/e4YPnzJW #wsinsights #DOnotebook #SEC #CyberRegulation

4

(FINRA) Cybersecurity Alert - FINRA Notifies Member Firms of MOVEit Software Vulnerability (CVE-2024-5806) Impact: All Firms Firms should review this information with any vendors who provide information technology services to the firm. On June 25, 2024, Progress Software released the MOVEit Transfer Critical Security Alert Bulletin (the Alert Bulletin) for CVE-2024-5806, a newly identified Critical Vulnerability, which was described as an Improper Authentication vulnerability in MOVEit Transfer, Secure File Transfer Protocol (SFTP) module and could lead to Authentication Bypass. In the Alert Bulletin, Progress Software recommended performing an upgrade to the latest software version. The Alert Bulletin also described a newly identified vulnerability in a third-party component used in MOVEit Transfer, which elevates the risk of the original issue mentioned above if left unpatched. While the patch distributed by Progress Software on June 11th successfully remediates the issue identified in CVE-2024-5806, this newly disclosed third-party vulnerability introduces new risk. Please work with your internal teams to take the following steps to mitigate the third-party vulnerability: 🔹 Verify you have blocked public inbound RDP access to MOVEit Transfer server(s); and 🔹 Limit outbound access to only known trusted endpoints from MOVEit Transfer server(s). When the third-party vendor releases a fix, Progress Software will make that available to MOVEit Transfer customers. #FINRA #Buckler #CybersecurityAlert #AlertBulletin #MOVEit #thirdparty #tprm #vendorrisk #vendorriskmanagement #VRM #vulnerability #patch #unpatched https://lnkd.in/eyGBX2gv

1

On Thursday April 18th 2024, the NSA released an updated FAQ regarding its Commercial National Security Algorithm (CNSA) Suite 2.0.   Crypto4A completed a side-by-side comparison of this new revision and the previous version. Check out this article to find out the additions/changes: https://lnkd.in/g-Xr5C7D National Security Agency, #CNSA, #Algorithm, #security

19

Take part in our upcoming webinar, Cybercrime 2024: The Current Top Ways to Lose Your Life's Savings, featuring Gary Warner, Director of Research in Computer Forensics at UAB. This event will delve into critical topics to enhance your digital security and safeguard your financial assets against cyber threats. Register for his September 18 webinar at https://buff.ly/3SvgoK2. #UABAlumni #cybercrime

4

FINRA has updated Frequently Asked Questions related to FINRA Rule 2210 and #Chatbot communications and related #ArtificialIntelligence #AI considerations. https://lnkd.in/gXpZsBEm #FINRA #compliance #complianceprofessionals #CCO #SEC

2

Join us for a Lunch & Learn on Navigating FTC Safeguard Rules & Creating a WISP to protect sensitive data! Don't miss out on this valuable information on December 4th at 11:00 AM. The link is below for more details and to get tickets. #FTC #WISP #DataProtection #Cybersecurity #LunchAndLearn https://zurl.co/zxsr

3

Meet Aeva Black, Section Chief for Open Source Security at Cybersecurity and Infrastructure Security Agency (CISA) and Jack Cable, Senior Technical Advisor also at CISA 👋 Both Aeva and Jack will join Tidelift CEO and co-founder Donald Fischer on Wednesday, June 5 at Upstream for a session titled. “Secure by design: a proactive approach to open source health and security.” 🔐 As you might have heard, just a few weeks ago, a number of companies (including Tidelift ✍️) signed CISA’s Secure by Design pledge. This pledge was a ceremonial continuation of CISA’s year-long initiative to promote building good #cybersecurity practices into technology products from the start rather than making good security an aftermarket technical feature. In this session, Aeva and Jack will share more about the industry-wide efforts discussed in the Secure by Design guidelines, the historical analogies of where this design-first approach has had real impact in other notable industries, and they’ll cover how CISA is working directly with both industry leaders and the #opensource community to proactively improve the software supply chain. If you’re looking to learn more about how the Secure by Design initiative came to be and the actions organizations can take to start their journey into open source, you won’t want to miss this talk at #Upstream2024 on Wednesday, June 5. https://bit.ly/4dY7ygO

11

NYC Chief Information Security Officer Kelly Moan speaks with PIX11’s Monica Morales about: · High-paying cyber jobs available now · Keeping NYC safe behind the scenes · The free #NYCSecure mobile app Watch #monicamakesithappen.

159

14 Comments

 (SEC) Oct 21, 2024 - The Securities and Exchange Commission’s Division of Examinations today released its 2025 examination priorities. CYBERSECURITY: Information Security and Operational Resiliency 🔹 The Division will continue to review registrant practices to prevent interruptions to mission-critical services and to protect investor information, records, and assets. Operational disruption risks remain elevated due to the proliferation of cybersecurity attacks, firms’ dispersed operations, weather-related events, and geopolitical concerns. As part of its examinations in this area, the Division will examine registrants’ procedures and practices to assess whether they are reasonably managing information security and operational risks. 🔹 A perennial examination priority, the Division’s focus on cybersecurity practices by registrants remains vital to ensure the safeguarding of customer records and information, as applicable. ***𝐏𝐚𝐫𝐭𝐢𝐜𝐮𝐥𝐚𝐫 𝐚𝐭𝐭𝐞𝐧𝐭𝐢𝐨𝐧 𝐰𝐢𝐥𝐥 𝐛𝐞 𝐨𝐧 𝐟𝐢𝐫𝐦𝐬’ 𝐩𝐨𝐥𝐢𝐜𝐢𝐞𝐬 𝐚𝐧𝐝 𝐩𝐫𝐨𝐜𝐞𝐝𝐮𝐫𝐞𝐬, 𝐠𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞 𝐩𝐫𝐚𝐜𝐭𝐢𝐜𝐞𝐬, 𝐝𝐚𝐭𝐚 𝐥𝐨𝐬𝐬 𝐩𝐫𝐞𝐯𝐞𝐧𝐭𝐢𝐨𝐧, 𝐚𝐜𝐜𝐞𝐬𝐬 𝐜𝐨𝐧𝐭𝐫𝐨𝐥𝐬, 𝐚𝐜𝐜𝐨𝐮𝐧𝐭 𝐦𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭, 𝐚𝐧𝐝 𝐫𝐞𝐬𝐩𝐨𝐧𝐬𝐞𝐬 𝐭𝐨 𝐜𝐲𝐛𝐞𝐫-𝐫𝐞𝐥𝐚𝐭𝐞𝐝 𝐢𝐧𝐜𝐢𝐝𝐞𝐧𝐭𝐬, 𝐢𝐧𝐜𝐥𝐮𝐝𝐢𝐧𝐠 𝐭𝐡𝐨𝐬𝐞 𝐫𝐞𝐥𝐚𝐭𝐞𝐝 𝐭𝐨 𝐫𝐚𝐧𝐬𝐨𝐦𝐰𝐚𝐫𝐞 𝐚𝐭𝐭𝐚𝐜𝐤𝐬.*** 🔹 The Division will also review alternative trading systems’ safeguards to protect confidential trading information. 🔹 With respect to 𝐭𝐡𝐢𝐫𝐝-𝐩𝐚𝐫𝐭𝐲 𝐩𝐫𝐨𝐝𝐮𝐜𝐭𝐬 𝐚𝐧𝐝 𝐬𝐞𝐫𝐯𝐢𝐜𝐞𝐬 𝐢𝐧 particular, the Division will continue to consider cybersecurity risks and resiliency goals associated with third-party products, sub-contractors, services, and any information technology (IT) resources used by the business without the IT department’s approval, knowledge or oversight, or non-supported infrastructure. The focus will include assessments of how registrants identify and address these risks to essential business operations. 🔹 The Division will assess registrant compliance with Regulations S-ID and S-P, as applicable. Examinations will focus on firms’ policies and procedures, internal controls, oversight of third-party vendors, and governance practices. #Buckler #SEC #2025ExaminationPriorities #SECExam #FinancialServices 🔹 SEC Press Release https://lnkd.in/g_rUQDTU 🔹 PDF: Fiscal Year 2025 - Examination Priorities - Division of Examinations https://lnkd.in/gjcw3DMx

4