And the survey says…
The results of our Online Banking Security Survey are in and will be published here as a three part series. The first installment focuses on a clear shift in the threat landscape, the second on what banks are doing to protect their customers, and finally, the series will wrap up with a look at the [...]
PhoneFactor Publishes New Whitepaper on Online Banking Fraud
Incidents of online banking fraud have risen to unprecedented levels, while retail and commercial banking customers are growing increasingly dependent on their trusted service providers to insulate them from the malicious threats that continue to increase in number and severity. A recent study released by the Ponemon Institute and Guardian Analytics (2010 Business Banking Trust [...]
New Partnerships and Products Help Banks Protect Customers from Online Fraud
PhoneFactor has extended its reach into the banking industry by partnering with Fiserv, the leading global provider of financial services technology solutions, providing online banking and bill payment services to thousands of financial institutions, and launching the Universal Banking Gateway. Both will allow PhoneFactor to easily integrate with online banking applications to provide much-needed out-of-band [...]
Implications of the Twitter attack using the SSL gap
When we released the SSL authentication gap details a couple of weeks ago, I was convinced that this was a serious issue that needed immediate attention. Although most everyone agreed, there were a few commentators out there that weren’t as concerned about the problem as I was. Well, fast-forward a few days, and the situation [...]
PhoneFactor Team Discovers Vulnerability in SSL Authentication
Earlier this week, PhoneFactor released the details of a serious vulnerability in SSL/TLS authentication, which was discovered by PhoneFactor team members Marsh Ray and Steve Dispensa in August 2009. The SSL authentication gap allows for a standard man-in-the-middle attack in which an attacker is able to inject malicious data and commands into the authenticated SSL [...]
