CFPB’s proposed data rules would improve security, privacy and competition

By giving the public greater control over their banking data, the Consumer Financial Protection Bureau’s proposal would deal a blow to data brokers.

The post CFPB’s proposed data rules would improve security, privacy and competition appeared first on CyberScoop.

Continue reading CFPB’s proposed data rules would improve security, privacy and competition

Experian, You Have Some Explaining to Do

Twice in the past month KrebsOnSecurity has heard from readers who’ve had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn’t theirs. In both cases the readers used password managers to select strong, unique passwords for their Experian accounts. Research suggests identity thieves were able to hijack the accounts simply by signing up for new accounts at Experian using the victim’s personal information and a different email address. Continue reading Experian, You Have Some Explaining to Do

Equifax partners with Interos to help customers manage potential supply chain disruptions

Equifax and Interos announced a partnership to offer businesses comprehensive supplier risk assessments in a time where planning for risk and disruption is the default rather than the exception. Together, Equifax and Interos provide companies a 360-deg… Continue reading Equifax partners with Interos to help customers manage potential supply chain disruptions

IRS Will Soon Require Selfies for Online Access

If you created an online account to manage your tax records with the U.S. Internal Revenue Service (IRS), those login credentials will cease to work later this year. The agency says that by the summer of 2022, the only way to log in to irs.gov will be through ID.me, an online identity verification service that requires applicants to submit copies of bills and identity documents, as well as a live video feed of their faces via a mobile device. Continue reading IRS Will Soon Require Selfies for Online Access

If hackers are exploiting the Log4j flaw, CISA says we might not know yet

Federal officials cautioned Monday that, while the widespread Log4j vulnerability hasn’t led to any major known intrusions in the U.S., there could be a “lag” between when the flaw became known, and when attackers exploit it. Cybersecurity and Infrastructure Security Agency Director Jen Easterly said that there were months between the discovery of the vulnerability that led to the 2017 Equifax breach, which exposed the personal information of nearly 150 million Americans, and word of the breach itself, invoking one of the most notable hacks in history. “We do expect Log4j to be used in intrusions well into the future,” Easterly said on a call with reporters. “There may be a lag between when this vulnerability is being used and when it is being actively deployed.” Apache Struts, an open-source tool, was at the center of the Equifax breach, and Apache’s Log4j is a ubiquitous open-source logging tool. Easterly said […]

The post If hackers are exploiting the Log4j flaw, CISA says we might not know yet appeared first on CyberScoop.

Continue reading If hackers are exploiting the Log4j flaw, CISA says we might not know yet