Stolen identity credentials were the second most compromised data type leading to unauthorized access to corporate networks, according to Verizon’s 2011 Data Breach Investigations Report. “Stolen credentials are most often a means to an end but are increasingly an end in and of themselves. They can be used to further an attack by gaining privileged […]

Google Android smartphone users now have to watch for a new trojan that steals one-time banking passwords. SC Magazine reports the Zeus trojan is a version of Zitmo, a mobile trojan application, that’s designed to steal mobile transaction authentication numbers (mTANs) in relation to banking transactions. The malware disguised itself as the banking security app […]

In an effort to draw companies to adopt its IdentityGuard security program, Entrust is offering a hard-token replacement program. Companies that wish to partake in the hard-token replacement program must already be users of IdentityGuard 9.3 or higher, or purchase IdentityGuard 10.0. Entrust will replace up to 5,000 users’ hard tokens with mobile and soft […]

Gemalto announced the launch of its 2011 eBanking Security Guide. This ten-step guidebook for securing online banking offers North American banks a solution to meet Federal Financial Institutions Examination Council’s (FFIEC) guidance. Gemalto’s eBanking Security Guide is free of charge and illustrates, step-by-step, how banks best address the new landscape of layered security, risk-based authentication […]

Some may consider Kenneth Weiss the godfather of two-factor identification. The founder of Universal Secure Registry and developer of token-based authentication technology has since moved on to other security technology that uses voice biometrics and the mobile phone. The new system would identify a user by their voice, a PIN and a randomly generated number […]

Authentication services provider StrikeForce Technologies’s Out-of-Band Transaction Verification and Authentication service enables banks to enable their online banking platforms to meet the 2011 FFIEC authentication guidance supplement. StrikeForce’s patented system offers multiple deployment modes that can be managed on-site or hosted through StrikeForce’s SAS 70 cloud service. The platform also offers multiple business models and […]

Software security provider VASCO Data Security International says that the Federal Financial Institutions Examinations Council’s (FFIEC) 2011 supplement to the 2005 Internet Banking Environment Guidance doesn’t go far enough in Internet banking security requirements. VASCO has felt this way since the original guidance, which it believes led banks to opt for cheap but unsafe security […]

To help UK businesses fight fraud and identity theft in high value or high risk transactions, BT has launched a new authentication service. Called BT Managed Authentication, this service will supplement BT’s Managed Security Solutions product line. The service is designed for companies that have a large number of customers who log in to specific […]

Singapore stockbroker DBS Vickers Securities has upgraded the security for its online trading platform to two-factor authentication. The system uses a device that generates a time-sensitive PIN. Users must entire their IDs, login password and the 2FA PIN in order to gain access to the trading system. The two-factor authentication system replaces a dual-password authentication […]

Kenneth Weiss, founder of Universal Secure Registry (USR) and developer of token-based authentication technology, has announced his latest technology will be able to utilize voice recognition and can be used on mobile phones, according to an IT World article. Weiss sees the new technology, which operates as a three-factor authentication service, as a necessary security […]