Banks Will Have 36 Hours to Disclose Cyber Incidents in 2022

Federal banking regulators recently issued a rule around reporting data incidents that’s scheduled to go into effect in April 2022.

---

NYDFS Outlines Common MFA Problems, Steps to Fix Them

The New York Department of Financial Services reiterated last week that rolling out MFA and ensuring its configured properly is essential to reducing cyber risk.

---

NYDFS Clarifies Portions of Cybersecurity Regulation in Update

The New York Department of Financial Services has updated its guidance on incidents affecting third party services and multi-factor authentication.

---

Vigilance Needed: Financial Services Firms Fight Imposter Scams

To tamp down on fraud and fight back against a new investment scam, the FBI and SEC is providing new guidance for investors to combat imposters.

---

Following Breach, Mortgage Company Pays $1.5 Million Settlement

The company's CISO acknowledged the breach to the supervisory authority only after it asked and 18 months after it happened.

---

NYDFS Releases New Cyber Insurance Risk Framework

With the world in flux and cybercrime an increasingly pervasive threat, cyber insurance has seen rapid adoption. How can a cyber insurance plan be effective? NYDFS has released a new framework to help.

---

New Rule Would Require Banks to Disclose Breaches in 36 Hours

If enacted, new federal rules would require banks to inform their primary federal regulator as soon as possible following a computer security incident.

---

FINRA Warns of Yet Another Phishing Attack Targeting Finance Industry

Emails from an ongoing campaign are not connected to FINRA and should be deleted, the organization warns.

---

SEC Looks to Tamp Down Credential Stuffing

The SEC's compliance arm is encouraging banks and financial institutions to remain vigilant in the face of an uptick in credential stuffing attacks.

---

NYDFS Charges First Company for Violating Its Cybersecurity Regulation

NYDFS made its first enforcement action around its Cybersecurity Regulation, 23 NYCRR 500, alleging errors and deficient controls led to a breach at an insurance company.

---