Cybercrimes tend to increase during the holiday season, as malicious actors take advantage of the increased employee travel and distractions that are more common during the holiday season. To help protect from cyberattacks during the busy holiday season, the FBI and CISA compiled several recommendations that employees can take now to prevent from these kinds of attacks.
Read More
Fidelity Brokerage Services has agreed to pay $1.25 million after it failed to enforce “appropriate cybersecurity controls” in 2024, leading to a significant data breach affecting approximately 77,000 customers, according to an announcement by Secretary of the Commonwealth of Massachusetts William Galvin on April 27.
On February 2nd, 2026, the common text editor, Notepad++, shared an update to its initial announcement in December 2025 that it was the target of a software supply chain attack. According to the announcement, starting in June 2025, bad actors intercepted and redirected requests for updates to malicious infrastructure. These bad actors were then able to deliver malware through a software update channel that users trusted.
We have been notified of a recent phishing email campaign impersonating FINRA. Multiple firms have reported receiving emails that appear to be from FINRA, reference regulatory reporting requirements, and include attachments.
SonicWall, a popular network security company that advisers and other financial institutions use for its firewall or router products, recently confirmed a security incident resulting in unauthorized access to configuration backup files for customers using its cloud backup service.
On September 30th, the SEC Division of Investment Management gave an answer to the most challenging question for crypto assets: What entities are qualified custodians for crypto assets? Since qualified custodians must meet the definition of a banking institution for both the Adviser Act’s Custody Rule and the Investment Company Act’s.