Vulnerability management
-

Returning to the Office as Pandemic Restrictions Ease
With many of the COVID-19-related restrictions easing up around the country, returning to the office will come with its own set of security-related challenges. In addition to using the Drawbridge Platform, the items below should be considered as you plan to return the firm to business as usual: Machines that have been off for a prolonged period…
-

Please Surf Responsibly: Drawbridge’s Best Practices for Building a Safer Internet
Safer Internet Day – February 11, 2020 The key to teaching your children and teens about Internet Safety is: Start NOW Safer Internet Day, a worldwide event observed on February 11th, aims to promote the safe and positive use of digital technology for all users – especially children and teens. Drawbridge’s mission is to keep…
-

CYBERSECURITY NEWS: SEC Observations
SEC OCIE Publishes Observations on Cybersecurity and Resiliency Practices On Monday, January 27th, 2020, the U.S. Securities and Exchange Commission’s Office of Compliance Inspections and Examinations (OCIE) issued examination observations related to cybersecurity and operational resiliency practices. The observations focus on the following areas: Governance and Risk Management Access Rights and Controls Data Loss Prevention…
-

Cybersecurity News: SEC & CFTC Update
Cybersecurity News Alert 2020 SEC EXAMINATION PRIORITIES On Tuesday, January 7th, 2020, the U.S. Securities and Exchange Commission (SEC) released the examination priorities for 2020. The SEC has shifted their examination priorities from years past in an effort to adapt to emerging risks, but cybersecurity continues to remain a top priority for the SEC. The…
-

Drawbridge Expands Cybersecurity Offering with Launch of DrawbridgeConnect-R™ Platform
Drawbridge Expands Cybersecurity New Vulnerability Management as a Service (VMaaS) platform offers firms comprehensive vulnerability scanning, remediation and reporting Drawbridge, a premier cybersecurity software and services firm specializing in the needs of hedge fund and private equity managers, today announced the launch of DrawbridgeConnect-R™, a Vulnerability Management as a Service (VMaaS) platform. DrawbridgeConnect-R continuously analyzes…
-

Hedge Funds Besieged by on Daily Basis
Hackers are exploiting inherent weaknesses in mature hedge funds on a daily basis, say a security vendor and the chief technology officer of an established fund, leading to huge boosts in cybersecurity spending. “Hedge funds are being targeted simply because of cash movements where frequent large transfers are normal at a small business that doesn’t…
-

CYBERSECURITY RISK ALERT: Vulnerability
Microsoft has recently identified a vulnerability (CVE-2019-0676) within Internet Explorer (IE). When IE improperly handles objects in memory, it is possible for an attacker to test for the presence of files on disk. Attackers can exploit this vulnerability by sending the user a link leading to a malicious website and coercing them to follow the…
-

CYBERSECURITY NEWS ALERT: December 2018
On December 20th, the Financial Industry Regulatory Authority (FINRA) released a report detailing the effective cybersecurity practices and common risks observed during recent examinations. The report focused on the following key areas: Branch Controls Phishing Attacks Insider Threats Penetration Testing Mobile Device Security Branch Controls: Maintaining rigorous cybersecurity controls is a firm’s best defense against attacks…
-

Press Release: Drawbridge Teams with CrowdStrike to Provide Industry-leading Incident Response Services to Alternative Investment Vertical
Stamford, CT – Drawbridge today announced a partnership with CrowdStrike to provide incident response and proactive services within the Drawbridge Cybersecurity offering. The financial services vertical is under heightened scrutiny by both investors and regulators to make sure they have a strong cybersecurity program in place. A good foundation can be built with proactive technologies coupled with consulting guidance, however, the…
-

Nearly one-third of firms face up to 10 cyber attacks – Business Insurance
A report by U.K.-based Sapio Research found that more than 30% of local financial firms suffered up to 10 cyberattacks in the last 12 months, Finance.co.uk reported. The report found that financial firms experienced an average of five attacks apiece. Nearly half of IT executives said that small businesses do not know how to implement…
-

Cybersecurity Risk Alert – Facebook
Facebook Cybersecurity Risk Alert: On Tuesday, September 25th, Facebook discovered a security breach affecting approximately 50 million users. Attackers exploited a vulnerability in the “View As” feature of Facebook, which allows users to view their profile from the perspective of another user. As a result of the exploit, the attackers stole Facebook access tokens, which…
