Feeds

Eurogeddon? Pah. UK banks are more terrified of hackers - big banker

Threadneedle Street ignores collapsing currency, stares fearfully at monitors

Beginner's guide to SSL certificates

Hacking attacks present a bigger risk to the operation of UK banks than problems caused by the ongoing eurozone crisis, according to a senior Bank of England director.

Andrew Haldane, the BoE's director of financial stability, told parliament's Treasury Select Committee that representatives of Britain's top banks are telling him that cyber attacks have become their biggest threat over recent months.

Banks have focused on credit, market and liquidity risk over the past five years because of upheavals caused first by the sub-prime mortgage crisis and banking bailouts of 2008. These were followed by the ongoing eurozone crisis (whose latest casualty appears to be Greece's equivalent of the BBC) and a general recession across the EU.

This focus may have distracted attention away from operational risks such as cyber security, which are coming more to the fore of late, according to Haldane.

The ATM cash-out scam, which cost two Middle Eastern banks $45 million last year, happened after hackers broke into a database of prepaid debit cards. The details of the scam sent shivers across the financial industry.

There's also concerns that high-volume DDoS attacks of the type that interrupted the operations of US banks last year might easily be deployed against banks in Britain to similar effect.

"You can see why the financial sector would be a particularly good target for someone wanting to wreak havoc through the cyber route," Haldane said, according to Reuters.

"Understanding and management of this risk was still at a somewhat early stage," he added.

David Gibson, vice president at data governance software specialist Varonis, said that cyber-criminals are after any customer data they can extract from financial services institutions, in order to monetise their frauds. He added that issues around information security extend well beyond the financial services sector.

“All businesses – and not just banks – have a role to play in eradicating their bad digital habits and taking more control of their security by implementing basic security best practices: such as ensuring that staff only have access to the data they need, that all access to all data is monitored, and abuse is investigated,” Gibson said. ®

Protecting users from Firesheep and other Sidejacking attacks with SSL

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
China hacked US Army transport orgs TWENTY TIMES in ONE YEAR
FBI et al knew of nine hacks - but didn't tell TRANSCOM
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.