https://krebsonsecurity.com/2021/03/fintech-giant-fiserv-used-unclaimed-domain/
Read this article and the comments at the end.
7 replies (most recent on top)
Krebs could write an article all about [the CISO] I left the company middle of last year, and I can say with the way he rules the kingdom, its no surprise the security org has been hemorrhaging talent. The man is a menace, rules by fear, and has an ego as fragile as a butterfly wing. I have never, in my 16 years of industry experience, seen people get fired for asking questions in the wrong tone during town hall meetings.
His “open door” policy is a trap, the second you walk in that door you have a mark on your back
There are some genuinely talented engineers at Fiserv that are stuck between a rock and a hard place. [The CISO] is the chaos of Nero and vindictiveness of Caesar all rolled into one beady eyed package.
I suppose arrogant responses also includes the customer post from the credit union, well written and no cursing like most FData shills do.
and this surprises who?
Yikes - Fiserv is imploding at the seams at record rates. I reckon it's time some federal regulators step in and pull the plug on the whole operation, to set an example that insecure low-quality rubbish simply cannot be tolerated when it comes to sensitive customer data. Hopefully this is a wake-up call for "leadership" and HR.
Comment from the article:
“Fiserv February” seems to be an annual event. That is the month Fiserv caused a data breach at my credit union. I am the CEO of the consumer owned credit union mentioned in this article that is taking Fiserv to court over it’s pervasive security failures. My heart goes out to all the other impacted consumers and institutions that have been victimized by yet another grossly irresponsible privacy blunder by Fiserv. I encourage everyone to take their banking business to a financial institution like ours that dumped Fiserv and is willing to advocate for strong consumer privacy. We look forward to getting justice for our members as part of ongoing litigation against Fiserv.
Makes sense, the CISO in the Zelle area is a retread that landed in the role because he washed out everywhere else. The don’t hire security professionals
Arrogant responses by Fiserv.