Elteni Insights

Clear thinking for a changing threat landscape.

Cybersecurity analysis, regulatory updates and practical guidance for financial services leaders, technology teams and the people responsible for managing risk.

Latest analysis

What security leaders need to know.

February 12, 2024 · Alternative Asset Management, Awareness, Breaches, Business Email Compromise, Cloud, Cyber, FINRA, FTC, Hackers, Hedge Fund, Investment Adviser, Microsoft, Newsletter, NYDFS, OCIE, Password, PII, Private Equity, Private Funds, Regulatory, Rules, SEC, Technology, Vulnerability

2024 February Newsletter

ELTENI’S CYBER SCOOP Latest News In this newsletter, we highlight the FINRA regulatory oversight report, law enforcement continuing their crackdown on cyber criminals and the impact of Artificial […]

Read the insight →

January 5, 2024 · Alternative Asset Management, Awareness, Breaches, Business Email Compromise, Cloud, Cyber, FINRA, FTC, Hackers, Hedge Fund, Investment Adviser, Microsoft, Newsletter, NYDFS, OCIE, Password, PII, Private Equity, Private Funds, Regulatory, Rules, SEC, Technology, Vulnerability

2024 January Newsletter

ELTENI’S CYBER SCOOP Latest News In this newsletter, we uncover an SEC Director’s op-ed on disclosure rules. A major international cybersecurity crackdown by law enforcement. The SEC op-ed […]

Read the insight →

December 7, 2023 · Alternative Asset Management, Awareness, Breaches, Business Email Compromise, Cloud, Cyber, FINRA, FTC, Hackers, Hedge Fund, Investment Adviser, Microsoft, Newsletter, NYDFS, OCIE, Password, PII, Private Equity, Private Funds, Regulatory, Rules, SEC, Technology, Vulnerability

2023 December Newsletter

ELTENI’S CYBER SCOOP Latest News In this newsletter, we uncover additional regulatory rules being approved for Clearing Agencies. Also, the numbers are in, and enforcement actions are […]

Read the insight →

November 7, 2023 · Alternative Asset Management, Awareness, Breaches, Business Email Compromise, Cloud, Cyber, FINRA, FTC, Hackers, Hedge Fund, Investment Adviser, Microsoft, Newsletter, NYDFS, OCIE, Password, PII, Private Equity, Private Funds, Regulatory, Rules, SEC, Technology, Vulnerability

2023 November Newsletter

ELTENI’S CYBER SCOOP Latest News In this newsletter, we uncover a major cybersecurity revelation. The SEC has taken action against SolarWinds Corporation and its CISO, Timothy G. […]

Read the insight →

March 22, 2023 · Alternative Asset Management, Breaches, Cyber, Exploit, Fraud, Hedge Fund, Identity Theft, Investment Adviser, Phishing, Private Equity, Private Funds, RIA, Table Top, Vulnerability

Phantom Extortion Phishing Targeting Financial Services Firms!

Recently a few of our clients were recipients of phishing email leveraging scare tactics, also known as the Phantom Extortion Scam. This scam involves cyber criminals sending fake […]

Read the insight →

January 5, 2023 · Breaches, Cyber, Hackers, Identity Theft, Password, Phishing, PII, Privacy, Vulnerability

LastPass, a popular password management service, has revealed that malicious actors have gained access to unencrypted customer data, including web URLs, email addresses, company names, billing addresses, telephone […]

Read the insight →

August 1, 2022 · BCP, Cyber, Hackers, NYDFS, Penetration Test, Regulatory, Vulnerability

NYDFS Proposed Enhancements – Second Amendment to 23 NYCRR 500

On July 29, 2022, the New York Department of Financial Services (NYDFS) provided several potential enhancements to the existing Part 500 Cybersecurity Rules. The Draft Amendments can be […]

Read the insight →

February 9, 2022 · Cyber, Hedge Fund, Investment Adviser, OCIE, Private Equity, Private Funds, Regulatory, RIA, Rules, SEC, Services, Vulnerability Disclosure

The SEC proposes new Cybersecurity rules

Earlier today the Securities and Exchange Commission voted to propose rules related to cybersecurity risk management for registered investment advisers, and registered investment companies and business development companies […]

Read the insight →

January 7, 2022 · Cyber, Hackers, NYDFS, Rules, SEC

NYDFS’s first time charging a company for not adhering to their Cybersecurity Regulation Part 500 of Title 23

The New York Department of Financial Services (“NYDFS”) has charged First American Insurance company with multiple section code violations pertaining to cyber security policies. This is NYDFS’s first […]

Read the insight →

January 7, 2022 · Breaches, FTC, Hackers, NYDFS, Private Funds, Rules

Safeguards Rule will be updated to better protect consumer financial information from cyber attacks and security breaches

In October 2021, the Federal Trade Commission (FTC) stated that it would expand its Safeguards Rule in order to better protect consumer financial information from cyber attacks and […]

Read the insight →

Clear thinking for a changing threat landscape.

What security leaders need to know.

Phantom Extortion Phishing Targeting Financial Services Firms!

Is this the end of LastPass?

NYDFS Proposed Enhancements – Second Amendment to 23 NYCRR 500

The SEC proposes new Cybersecurity rules

NYDFS’s first time charging a company for not adhering to their Cybersecurity Regulation Part 500 of Title 23

Safeguards Rule will be updated to better protect consumer financial information from cyber attacks and security breaches

Turn cybersecurity insight into practical action.