FS

The Financial Services Information Sharing and Analysis Center is releasing the API in order “to foster universal adoption of a more secure and robust data sharing framework."

An association of banks and financial technology companies has released a tool that it hopes will help financial institutions securely share data about consumers across the online financial tools that they use.

The Financial Services Information Sharing and Analysis Center (FS-ISAC) is releasing an application programming interface (API) in order “to foster universal adoption of a more secure and robust data sharing framework,” according to a statement released on Tuesday.

“Over a lifetime, consumer data may be scattered throughout several financial institutions,” the FS-ISAC says, which creates a need for consumers to log into multiple accounts to manage loans, deposits, payments and investments. The new API tokenizes sensitive user information, which the association says facilitates and secures the transfer of data from company to company.

“Creating a standard API for secure data sharing benefits everyone in the data aggregation ecosystem,” FS-ISAC Chief Operations Officer Eric Guerrino said in a release. “We want to ensure that everyone from the consumer to the financial institution and the data aggregators can share information safely, quickly and accurately.”

The new API is intended to benefit services that aggregate customer financial information on one platform, like Mint, Finicity and others. It would eliminate the need for those services to maintain multiple versions of “screen-scraping scripts.” Aggregators commonly use such scripts to log into customers’ financial accounts and manually extract information the customer wants to see on the aggregator platform.

Screen scraping has been criticized in the financial industry as an inefficient and insecure practice.

When a company adopts the new API, “the consumer will be able to access their own information seamlessly and securely, creating a higher degree of awareness, control and accuracy over sensitive data,” the association says.

CFPB’s proposed data rules would improve security, privacy and competition

By giving the public greater control over their banking data, the Consumer Financial Protection Bureau's proposal would deal a blow to data brokers.

Hacker team-ups pose 2021 threat to financial industry, group cautions

Cloud security firm Qualys reportedly victimized by prolific scammers

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure