With this week’s news that a long known flaw in the SS7 mobile network communications protocol has been used to undermine SMS one-time passwords (OTP) and facilitate bank fraud, another viable threat has been added to the list of considerations FIs...

Built on a combination of spearphishing, reconnaissance, and social engineering, business email compromise has become big business. The FBI just announced that criminals attempted to steal over $5 billion thus far with this scheme.

Last week’s announcement from NIST that SMS one-time-passwords (OTP) were deprecated as a form of out-of-band (OOB) authentication put the industry in a tizzy. Funny thing was that NIST did hedge a bit in its language, but it seemed that the agency...

This past week has witnessed the release (i.e., black market sale) of two massive password files from social media website breaches, and there is an outstanding question posed by the timing and use of this data. Why now? Consider: The files...

Unfortunately, micro and small businesses make particularly attractive targets for fraudsters. In 2015, more than 250,000 of these businesses were the victims of unauthorized transactions against their business account.

Billions of transactions were facilitated by payment data that would at some point be transmitted across systems under the control of organizations with strict cybersecurity policies and strong controls – where it was practically untouchable – it...

Two trends converge to make this holiday season excruciating for merchants. First, EMV disrupts comfortable patterns at the point of sale, especially for merchants who decided to wait to activate EMV terminals until after the holiday rush. Second,...

As Cybersecurity Awareness month comes to an end, Javelin encourages everyone to recognize the cyberrisks related to mobile devices. Most people have a reasonable awareness of good security safeguards for their computer – use antimalware regularly...