Ravi Thatavarthy, CISSP

🔍 Analyzing the Impact of Facial Recognition in the Justice System Our latest discussion on the Shared Security Podcast, sheds light on the contentious topic of facial recognition and its impact on those who are wrongly incarcerated. Co-host Kevin Johnson brings a critical perspective on the implications it has for innocent individuals. Don't miss out on this important conversation! Plus, we cover "broken" news on the recent 'regreSSHion' SSH vulnerability, and essential advice on disposing of old tech devices safely! Links below to watch and listen on your favorite podcast platform! 🎧

10

1 Comment

“Much of that identity theft could be prevented if consumers would only freeze their credit files with the major credit bureaus. The three bureaus are Equifax, Experian and TransUnion. …Freezing your credit files prevents new credit cards or loans from being opened in your name. A frozen file can also prevent someone from getting your income tax return in some states or accessing your Social Security account online. Despite the ease of freezing your files and the risks of not doing it, various surveys indicate that only between 10 and 20 percent of consumers have frozen their credit files. It’s likely you wouldn’t consider leaving your home unlocked and your front door open while you’re out of state on vacation. Leaving your credit files open for identity thieves is similar. …What does it mean to freeze your files? Anytime you apply for a new credit card or loan, the bank will check your credit score and evaluate your ability to repay the account. If you freeze your credit files, it means no bank or credit card issuer could access them. Therefore, it wouldn’t open a new account in your name because it wouldn’t be able to determine your credit score, how much you already owe and how well you repay existing debts. So freezing your files puts a big padlock on your personal information and protects you. …What are the consequences of not freezing your files? Identity theft victims can expect to spend an average of 28 hours untangling the mess, including filing police reports, disputing charges, submitting affidavits (sworn statements) and getting credit reports corrected. Take 20 minutes sometime in the next week to take care of yourself [with each credit bureau - Experian, Equifax and TransUnion]… [P]ut it on your calendar like any other commitment. Twenty minutes is a lot better than 28 hours [or more to resolve identity theft fraud].” https://lnkd.in/ectHMfE7 For a quick start on placing credit freezes, visit FrozenPii.com, built by a data breach victim for data breach victims. See comments for more info.

11

2 Comments

SEC Charges R.R. Donnelley & Sons Co. $2.1 Million Fine for Cybersecurity-Related Controls Violations On June 18th, 2024, the U.S. Securities and Exchange Commission announced that RR Donnelley, a global provider of business communication and marketing services, agreed to pay over $2.1 million to settle disclosure and internal control failure charges relating to cybersecurity incidents and alerts in late 2021. This SEC settlement with RRD highlights critical issues around cybersecurity and internal controls. Key findings include inadequate controls over material non-public information (MNPI), heightened insider trading risks, and violations of the Securities Exchange Act of 1934. Key Allegations: - Inadequate controls to prevent MNPI misuse - Insider trading risks due to poor monitoring - Regulatory violations and insufficient disclosure controls Inadequate Cybersecurity Response: - Between Nov 29 and Dec 23, 2021, RRD's internal intrusion system issued numerous alerts. - Alerts were reviewed by a third-party MSSP and escalated to internal cybersecurity personnel. - Despite escalations, RRD failed to take timely action, leading to unauthorized data exfiltration of 70 GB, including personal and financial information of 29 clients. - Issues identified included lack of prioritization, workflow for alerts, and inadequate auditing of the MSSP's performance. - Only after an external company alerted the CISO did the firm respond effectively. How AdvisorDefense Can Assist Registered Investment Advisors (RIAs): We offer a comprehensive suite of services tailored to help RIAs meet SEC regulations and bolster their cybersecurity defenses. Our mission is to empower RIAs with the necessary tools and expertise to navigate the cybersecurity landscape, ensuring compliance with regulatory requirements and protecting client information. By partnering with AdvisorDefense, RIAs can enhance their cybersecurity posture, ensure compliance, and protect their clients from evolving cyber threats. Protect your clients. Maintain your reputation. Ensure compliance. Contact us to learn more about how we can support your firm. https://lnkd.in/eVKtr3_x #Cybersecurity #SEC #Compliance #RIAs #AdvisorDefense #CyberRiskManagement #FinancialServices #RegulatoryCompliance #CyberThreats #CyberSecurityAwareness #CyberSecuritySolutions

10

NJ12 Kane In Your Corner recently shared an insightful article on what to do if you've been a victim of identity theft. Cybersecurity expert Scott Schober provides valuable tips on how to protect yourself from scammers and cybercrime. Check out the article here: https://lnkd.in/e5hhvxNf #ID #Scammer #cybersecurity #cybercrime

7

Imagine diving deep into threat intelligence to uncover insights on potential threats targeting your industry, company, or even your colleagues. With Investigations Management, you can seamlessly manage and share these findings without leaving Ignite! 🕵️‍♂️💼 Investigations Management serves as your personal case management system for Flashpoint intelligence. It allows you to assign tasks, control access to sensitive information, and keep a close watch on threat actors or groups—all within the Ignite platform. 📊🔒 - Keep all your investigations organized in one place, ensuring no detail gets overlooked. - Assign tasks related to threat analysis or response directly within Investigations Management, keeping your team aligned and productive. - Safeguard sensitive data with controlled access settings, ensuring confidentiality at all times. - Stay updated on ongoing investigations and monitor threat actors or groups proactively. - Seamlessly integrate Flashpoint intelligence updates into your workflow, leveraging the latest insights effortlessly. - Collaborate effectively with your team, sharing insights and recommendations to strengthen your security posture. Empower your team to stay ahead of potential threats while optimizing your workflow within Ignite. It's your ultimate tool for proactive threat management and intelligence sharing. 🔍🛡️ #threatintelligence #investigations #Flashpoint #intelligence #risks #security

4

Balancing the innovation speed of technology with protecting against #cybersecurity threats can be difficult for family offices. Our article discusses the best strategies to minimize #risk. #cyber

17