Insights

When organisations think about a data breach, attention often turns to attackers exploiting vulnerabilities, stealing credentials or gaining access to a network. The...

As of 17th January 2025, financial entities across the EU must comply with the stringent requirements of the Digital Operational Resilience Act (DORA). Organisations now face the challenge of ensuring their operational resilience aligns with this crucial regulation.

Our latest blog explores the five core pillars of DORA and highlights how Integrity360 can support your organisation in maintaining compliance and strengthening your cyber resilience. Don't wait—discover how we can help you navigate the new era of operational resilience starting today. 

The PCI Council has released valuable insights on Vulnerability Scans & ASV Guidance, particularly beneficial for SAQ A merchants.

Neil Gibb walks us through a typical day undercover as a physical cyber security specialist and shares Valuable advice for defending against physical threat actors.

Among the various standards and regulations designed to protect data, the Payment Card Industry Data Security Standard (PCI DSS) stands out as a critical framework, especially in the financial sector. But why does PCI DSS matter?

Financial service organisations are prime targets for cybercriminals, given their handling of sensitive personal data and large sums of money. Unfortunately, several cyber security myths within the financial services sector impede effective defence strategies. Below, we debunk these common myths and offer insights into building a resilient cyber security posture.

The digital finance landscape is evolving rapidly, with fintech at the forefront. However, as fintech companies continue to break new ground, they also navigate a minefield of cyber security threats. This blog looks into the cyber security challenges faced by the fintech sector and outlines how with the help of Integrity360 they can mitigate these risks to ensure a secure digital finance ecosystem.

Updated 18.8.26

TrickBot is a banking trojan that was first detected in September 2016 and since that time had been developed to incorporate the targeting of multiple geographies and online services. The malware was developed to gain unauthorized access to customer bank accounts to facilitate fraudulent transactions, but also targeted users of online services such as Salesforce and cryptocurrency services. The malware was reportedly delivered via spam emails containing malicious attachments, including those distributed by the Necurs botnet, and via the RIG exploit kit. In some cases, TrickBot used an exploit called EternalBlue (affects CVE-2017-0144) or Windows API calls to propagate in a local network. The functions and activities of TrickBot are reportedly very similar to the Dyre banking trojan, and it was assessed by researchers to be linked to this trojan, including that at least one of the developers of Dyre was involved in the development of TrickBot.

Integrity360 is aware of an increased in DDoS attacks globally which we would like to remind our clients to remain vigilant about.

While the effects of the Coronavirus develop, businesses across the world are turning to remote working to ensure the safety of their employees as well as the continuity of their services.

Data breaches in the financial services sector are never taken lightly considering the potentially devastating fallout that can take place in their aftermaths. The recent data breach reported by Capital One is being treated no differently.