Cyber Alert

Cyber threats are constantly evolving and hackers are always looking for new methods to attack, so it’s important to stay on top of new threats and address them as quickly as possible. Our cyber alerts provide strategic guidance to help you protect your company from cyber attacks and understand how to best prevent or remediate issues related to ransomware, spearphishing, data breaches, and other threats to data privacy.

Subscribe to Cybersecurity and Risk Alerts and Events

Cyber Alerts

January 15, 2021

Cyber Alert

Mimecast E-Mail Security Service Hacked

Mimecast® e-mail security company has reported a breach that affects 10% of users in which hackers may be able to access company email and other data as well as infiltrate company networks. Learn how to protect yourself from this breach.

January 14, 2021

Cyber Alert

Regulators Probe Firms’ Exposure Following SolarWinds Hack

Regulators have taken steps to probe companies’ levels of exposure to the SolarWinds hack. Learn what information and actions have been requested so far.

December 18, 2020

Cyber Alert

Update: Major SolarWinds Breach

Following our Cyber Alert earlier this week about the SolarWinds breach, many extraordinary steps have been taken by industry leaders to respond to what may be the most material global intrusion campaign of the past decade.

December 14, 2020

Cyber Alert

Major SolarWinds Breach Affects Government and Businesses Worldwide

A major breach has compromised confidential data at several U.S. government agencies, including the Treasury Department and the Department of Commerce exposing information from the executive branch, the military, and intelligence services. It has likewise compromised leading telecommunications firms, technology firms, and international governments.

December 9, 2020

Cyber Alert

Vulnerability Reported in Microsoft Teams

A critical vulnerability affecting Microsoft® Teams® has been reported involving attackers sending a specially crafted chat message to Teams users. Once viewed, the message captures the recipient’s sign-on information and enables remote code execution on the user’s machine.

November 30, 2020

Cyber Alert

Zoom Scam Forces Closure of Australian Hedge Fund

Learn how hackers used a Zoom scam to execute a cyberattack that ultimately forced an Australian hedge fund to close after approving $8.7M in fraudulent invoices.

November 20, 2020

Compliance Alert

SEC Issues Risk Alert Identifying 6 Areas of Deficiencies in Investment Adviser Compliance Programs

The SEC's Office of Compliance Inspections and Examinations (OCIE) issued a Risk Alert on November 19 providing an overview of notable compliance violations found during examinations relating to the Compliance Rule (Rule 206(4)-7 under the Investment Advisers Act of 1940). Here's what you need to know.

October 9, 2020

Cyber Alert

FINRA Warns of Fraudulent Survey Emails

The Financial Industry Regulatory Authority (FINRA) has issued an alert regarding the appearance of fake emails purporting to be from the authority requesting that recipients fill out a survey. Learn what to look out for and how to protect your firm.

October 2, 2020

Cyber Alert

Treasury Department Issues Advisories Related to Ransomware

On October 1, the U.S. Treasury’s FinCEN and OFAC issued advisories warning of the growing threat of ransomware to U.S. business and individuals, describing recent trends in that area of digital crime, and pointing to the needs for proper safeguards and reporting, especially in light of potential violations of sanctions rulings.

September 17, 2020

Cyber Alert

SEC OCIE Warns of Increased Risk of Credential Stuffing

The SEC OCIE has issued an alert warning of an increase in the use of the “credential stuffing” tactic in attacks against SEC registrants, including broker-dealers, investment advisers, and investment companies. Credential stuffing can significantly increase financial, regulatory, legal, and reputational risk to firms and OCIE has made recommendations for protecting client accounts.

July 22, 2020

Cyber Alert

Critical Vulnerability Identified in Windows Servers

The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert identifying a critical vulnerability affecting all versions of Microsoft® Windows Server® configured with the Domain Name System (DNS) role enabled. The vulnerability could potentially allow a remote attacker to gain control of affected systems.

July 20, 2020

Cyber Alert

European Union Court Strikes Down Key EU-U.S. Data Sharing Agreement

The Court of Justice of the European Union (CJEU) has determined that the Privacy Shield agreement, a key data sharing agreement that allows signatory U.S. companies to transfer EU resident personal data to the U.S., is no longer valid. Learn what action you may need to take due to this change.