Data security

American Express has filed a notice with the Attorney General in California, informing some of its cardholders that their account information may have been compromised.

Merchants that postponed their EMV migration are feeling the sting of losses connected to the EMV liability shift. They are now shoring up their fraud defenses and—in some cases—speeding up their EMV-migration plans.

Biometric authentication has been "replacing" passwords for a long time, but for the most part accounts still rely more on remembered credentials than physical identifiers.

Data security vendor and researcher Trustwave has appointed company veteran Michael Petitti as senior vice president of global alliances.

The fight over the security protections on the San Bernardino, Calif., iPhone is about more than a single device or Apple's product line.

The Central Bank of Bangladesh is threatening to sue the New York Fed over money wired out of its account. The Fed says it did nothing wrong, the transfer was authenticated and executed by Swift.

As the Central Bank of Bangladesh threatens to sue the Federal Reserve Bank of New York over at least $80 million stolen from its account there, the Fed says its systems were not compromised.

For financial institutions, there are scary parallels between the IRS' failure to protect sensitive personal information and their own such struggles.

A mature governance framework and risk culture that reaches all employees are among the attributes of a high-functioning "risk organization."

In focusing on private blockchains, banks make the same mistake companies made in the nineties when they favored private information networks over the open protocols of the Internet.