Blog

The 20-year Legal Battle Over Credit Card Fees Is Over — and for Once, Everyone’s a Winner

Legal battle over credit card swipe fees ends after 20 years, resulting in reduced fees that benefit merchants and consumers. Visa and Mastercard will lower fees and maintain stability for years, promoting competition and innovation in the payment system while ensuring consumers retain credit card rewards and protections. The settlement provides clarity and confidence for financial systems, demonstrating effective public policy balance.

https://thehill.com/opinion/finance/5602073-visa-mastercard-swipe-fees/

Orgs Move to SSO, Passkeys to Solve Bad Password Habits

Organizations are increasingly adopting passwordless authentication methods like SSO and passkeys due to ongoing weak password habits and the limitations of password-based and basic MFA solutions. Surveys indicate a significant shift, as most CISOs report implementing or planning to implement these technologies, which promise improved security, a lower risk of phishing, and a better user experience. Still, many organizations face challenges such as limitations of legacy systems, user resistance, and high costs, which slow down widespread adoption.

https://www.darkreading.com/identity-access-management-security/sso-passkeys-password-bad-habits

CISA, FBI and Partners Unveil Critical Guidance to Protect Against Akira Ransomware Threat

CISA and FBI released guidance on protecting against Akira ransomware, targeting small and medium businesses. The advisory includes indicators of compromise and recommended actions for organizations, emphasizing swift measures for data protection.

https://www.cisa.gov/news-events/news/cisa-fbi-and-partners-unveil-critical-guidance-protect-against-akira-ransomware-threat

Regulators Don’t Fear AI

Regulators are embracing AI, shifting from fear to demand as seen in frameworks like the EU AI Act and CSRD. These regulations embed automation into compliance, necessitating transparency and reliability. Companies relying on manual compliance are at a disadvantage, while early adopters of AI enhance data integrity and transparency. The focus has shifted to utilizing AI for efficient compliance, marking a new era where it becomes a fundamental asset for regulatory success.

https://www.techmonitor.ai/comment-2/ai-regulators-new-approach?cf-view

Most CISOs Now Own AI Security: Here’s What That Means for Your Business

CISOs face increased responsibilities for AI security and data privacy, with 84% now overseeing AI security. Rapid AI adoption creates new vulnerabilities, requiring strategic crowd-sourced security approaches. Effective use of crowdsourcing leads to better detection and cost-effective solutions while addressing talent shortages in cybersecurity. Organizations must adopt a proactive security posture to future-proof against threats, integrating crowdsourced security as a vital strategy.

https://www.scworld.com/perspective/most-cisos-now-own-ai-security-heres-what-that-means-for-your-business

Why Every CISO Should Demand a Comprehensive Software Bill of Materials (SBOM)

CISOs must prioritize comprehensive Software Bills of Materials (SBOM) because modern software is complex and relies heavily on third-party components, which can hide vulnerabilities. An SBOM provides full visibility into all software components, helping organizations assess risks and compliance. Incomplete SBOMs or lack of them from vendors can lead to exposure during cyber threats, exemplified by incidents like Log4Shell and SolarWinds. Maintaining SBOMs as living documents and integrating them into development lifecycles is essential for proactive risk management, necessitating cultural commitment and policy enforcement from software development leaders.

https://www.techradar.com/pro/why-every-ciso-should-demand-a-comprehensive-software-bill-of-materials-sbom

Companies Want More From Their Threat Intelligence Platforms

Companies seek improvements in threat intelligence platforms, citing issues with alerts' accuracy, integration with tools, and information overload, according to Recorded Future's report. Over half of enterprises use multiple services, with a notable demand for faster data delivery and tailored analysis. Despite issues, firms are enhancing their threat intelligence maturity, investing in comprehensive solutions and automated processes.

https://www.cybersecuritydive.com/news/threat-intelligence-customer-complaints-recorded-future/805300/

NIS: Cyber Governance as a Boardroom Matter

NIS2 Directive mandates corporate boards oversee cybersecurity as a governance issue, implementing duties for risk management, training, and incident response. Effective from 2024 in Italy, it holds boards accountable with fines up to €10M for non-compliance. The directive broadens its scope beyond critical infrastructure, imposing requirements on various sectors and emphasizing supplier cybersecurity scrutiny. Companies must integrate compliance strategies, adapt policies, and prepare for regulatory audits to safeguard trust and protect business integrity. Key deadlines include readiness for incident notifications by January 2026 and full compliance by October 2026.

https://www.hoganlovells.com/en/publications/nis2-cyber-governance-as-a-boardroom-matter

Credit Union Cybersecurity Crisis 2025: Strategic Analysis & The Seceon Platform Imperative

Credit unions face a dire cybersecurity crisis in 2025, with limited resources and increasing threats leading to potential collapse. Key issues include insufficient staffing and outdated security tools, resulting in a high breach impact of $8.2M per incident and slow detection times. The Seceon Platform offers a solution by integrating multiple security functions into one AI-driven system, enhancing compliance, reducing costs, and significantly speeding up threat detection. Urgent action is needed for credit unions to adopt modern cybersecurity practices to ensure their survival and member trust.

https://securityboulevard.com/2025/11/credit-union-cybersecurity-crisis-2025-strategic-analysis-the-seceon-platform-imperative/

Fraud and Scam Prevention Series: Navigating Increasingly Sophisticated Cybersecurity Threat and Fraud Tactics

Cybersecurity threats are increasingly sophisticated, fueled by AI tools used by fraudsters. The FBI reported over $16 billion in internet crime losses for 2023, with data breaches costing average U.S. companies about $9.36 million. Organizations must adapt by enhancing cybersecurity practices, including prioritizing cyber hygiene, minimizing data, promoting interdepartmental collaboration, and refining financial procedures. As fraud tactics advance, businesses need comprehensive strategies to protect against evolving threats, emphasizing the importance of proactive measures and collaboration between cybersecurity and fraud prevention teams.

https://www.wiley.law/alert-Navigating-Increasingly-Sophisticated-Cybersecurity-Threat-and-Fraud-Tactics

Scroll to Top