Elteni Insights

Clear thinking for a changing threat landscape.

Cybersecurity analysis, regulatory updates and practical guidance for financial services leaders, technology teams and the people responsible for managing risk.

Latest analysis

What security leaders need to know.

December 30, 2021 · BCP, Cyber, FINRA

FINRA Keeps Its Business Continuity Rule Intact

FINRA Rule 4370 requires firms of all sizes to be prepared for business disruptions by maintaining a business continuity plan. After conducting a “Pandemic Review” of the rule, […]

Read the insight →

December 13, 2021 · Apache, Exploit, Hackers, Hedge Fund, Investment Adviser, Reverse Shell, Vulnerability

Apache Log4j 2 Vulnerability

You probably heard the news this weekend about the new critical remote code execution vulnerability affecting Apache log4j 2. A remote code execution vulnerability is an attack that […]

Read the insight →

October 9, 2021 · Alternative Asset Management, BEC, Business Email Compromise, Cloud, Cyber, Exploit, Hackers, Hedge Fund, Identity Theft, Investment Adviser, Malware, Microsoft, Microsoft Windows 10, Password, Phishing, PII, Privacy, Private Equity, Ransomware Attack, RIA, Vulnerability

Next Generation Ransomware Attacks

Ransomware, the word alone evokes fear into many companies. How did this form of crime actually start? In 1989, Dr. Joseph L. Popp created the first ransomware called […]

Read the insight →

September 14, 2021 · Apple, Cyber, Exploit, Hackers, Identity Theft, PII, Privacy, Technology, Vulnerability

Critical Apple vulnerability exploited to eavesdrop!

Apple has released an emergency security update to address vulnerabilities in iOS and iPadOS for a zero-click zero day exploit that allows the installation of malware on a […]

Read the insight →

August 30, 2021 · Alternative Asset Management, BEC, Business Email Compromise, Cloud, Cyber, Hackers, Hedge Fund, Identity Theft, Investment Adviser, PII, Private Equity, RIA, SEC

The SEC issues fines for deficient cybersecurity programs!

Today the Securities and Exchange Commission (SEC) sanctioned eight firms in three actions for failures in their cybersecurity policies and procedures that resulted in email account takeovers exposing […]

Read the insight →

July 2, 2021 · Cyber

Critical Print Spooler Vulnerability, Netgear Auth Bypass, and REvil Ransomware

PrintNightmare, Vulnerability Affecting Windows Print Spooler Eleven years ago, an escalation of privilege bug in the Windows print spooler services was used in the Stuxnet attack, the notorious […]

Read the insight →

SEC Charges Firm for Cybersecurity Failures

June 15, 2021 · Cyber, OCIE, Privacy, Regulatory, SEC, Vulnerability, Vulnerability Disclosure

SEC Charges First American Financial Corporation With Cybersecurity Disclosure Controls Failures

On June 15, 2021 “The Securities and Exchange Commission (“SEC”) announced settled charges against real estate settlement services company First American Financial Corporation for disclosure controls and procedures […]

Read the insight →

April 13, 2021 · Business Email Compromise, Cloud, Cyber, Exploit, Hackers, Hedge Fund, Investment Adviser, Malware, Microsoft, Microsoft Windows 10, NTLM hash, OWASP, Password, Penetration Test, Phishing, Red Team, Technology, Vulnerability

What is Ethical Hacking? Everything You Need to Know About Ethical Hacking—With Examples

Our founder Anand Mohabir was interviewed by Kindra Cooper, from Springboard, on the topic of Ethical hacking. “There’s a lot that comes into play when you’re trying to […]

Read the insight →

March 4, 2021 · Alternative Asset Management, Awareness, Azure, BCP, BEC, Business Email Compromise, Cloud, coronavirus, Cyber, Exploit, Hackers, Hedge Fund, Identity Theft, Insider threats, Investment Adviser, Malware, OCIE, OWASP, Password, Penetration Test, Phishing, PII, Privacy, Private Equity, Regulatory, RIA, SEC, Table Top, Vulnerability, WFH, Work from home

2021 SEC OCIE Cybersecurity Exam Priorities

Yesterday the U.S. Securities and Exchange Commission (SEC) Office of Compliance Inspections and Examinations (OCIE) released its 2021 exam priorities. In the letter the SEC highlighted that their […]

Read the insight →

January 13, 2021 · CFTC, Ransomware Attack, SEC

CFTC issues an alert about potential Microsoft Azure and Office 365 compromise resulting from SolarWinds breach

On January 13, 2021, the Market Participant Division (MPD) of the CFTC sent an email to registrants informing them about an alert that was issued by the DHS […]

Read the insight →

Clear thinking for a changing threat landscape.

What security leaders need to know.

Turn cybersecurity insight into practical action.