Report: Big U.S. Banks Are Stiffing Account Takeover Victims

When U.S. consumers have their online bank accounts hijacked and plundered by hackers, U.S. financial institutions are legally obligated to reverse any unauthorized transactions as long as the victim reports the fraud in a timely manner. But new data released this week suggests that for some of the nation’s largest banks, reimbursing account takeover victims has become more the exception than the rule. Continue reading Report: Big U.S. Banks Are Stiffing Account Takeover Victims

Fintech Giant Fiserv Used Unclaimed Domain

If you sell Web-based software for a living and ship code that references an unregistered domain name, you are asking for trouble. But when the same mistake is made by a Fortune 500 company, the results can range from costly to disastrous. Here’s the story of one such goof committed by Fiserv [NASDAQ:FISV], a $6 billion firm that provides online banking software and other technology solutions to thousands of financial institutions. Continue reading Fintech Giant Fiserv Used Unclaimed Domain

Venmo and PNC Bank are fighting over third-party data access

Information security and access to third-party data is at the heart of a dispute between an established financial giant and Venmo, the PayPal-owned payment app that’s challenged big banks. Customers from Pittsburgh-based PNC Bank have complained in recent months that they no longer can transfer funds to their Venmo accounts. The change disrupted customers’ financial transfers, and has resulted in a public back-and-forth between Venmo and the bank. Venmo has told customers to tweet complaints at PNC. In turn, PNC has encouraged frustrated customers to move to Zelle, a Venmo competitor operated by a network of banks. In an Oct. 29 tweet, PNC’s customer service account said the bank has made a “security enhancement” which “may be causing difficulty when you try to link your PNC [account] with Venmo.” As part of its security upgrade, PNC stopped Plaid, a third-party data aggregator, from accessing PNC customers’ account and routing information, […]

The post Venmo and PNC Bank are fighting over third-party data access appeared first on CyberScoop.

Continue reading Venmo and PNC Bank are fighting over third-party data access

Google’s Health Record Storage Controversy, US Border Search Ruling, Zelle Scams

You’re listening to the Shared Security Podcast, exploring the trust you put in people, apps, and technology…with your host, Tom Eston. In episode 95 for November 18th 2019: Google’s access to the medical records of millions of Americ… Continue reading Google’s Health Record Storage Controversy, US Border Search Ruling, Zelle Scams

The Risk of Weak Online Banking Passwords

If you bank online and choose weak or re-used passwords, there’s a decent chance your account could be pilfered by cyberthieves — even if your bank offers multi-factor authentication as part of its login process. This story is about how crooks increasingly are abusing third-party financial aggregation services like Mint, Plaid, Yodlee, YNAB and others to surveil and drain consumer accounts online. Continue reading The Risk of Weak Online Banking Passwords