Information Security

In response, the company took “certain systems offline” and is working to return to normal business operations.

If you use Microsoft Teams or SharePoint, you should be extra careful about the links and files you open. A new attack campaign has been discovered that uses these platforms to deliver malware named DarkGate, which can steal your data, spy on your activities, and even encrypt your files for ransom. 

It is exciting to learn about and experiment with the next-generation AI platforms such as ChatGPT and Bard. There is an incredible amount of potential to be unlocked and doubtless hundreds of ways in which we’ll soon see the title and settlement services industry impacted by this breathtaking new technology. But there’s a cautionary note to this advance: The most successful criminals are also racing to be the first to exploit this new technology.

Everyone knows that choosing a strong password is a critical step in securing the various systems and accounts we all use daily. However, you may be surprised to learn that some commonly held beliefs about passwords are more harmful than helpful. Read on to learn about three of these misconceptions to ensure that you and your business are armed with the right information to keep up with the latest password security best practices.

Artificial intelligence (AI) and its myriad uses is the hottest trend across all industries this year. But the title insurance industry is at the brink of a significant transformation, with AI and Large Language Models (LLM) like ChatGPT providing an opportunity to bring about groundbreaking efficiencies and accuracy. Listen to this webinar recording and where these powerful tools can be used while carefully managing potential risks.

The New York Department of Financial Services has issued three rounds of proposed amendments to its cybersecurity regulations. Read on for a review of the latest proposals and requirements for covered entities.

It's been over 10 days since Mr. Cooper experienced a cybersecurity incident that impacted its servicing system and now it believes customer data was exposed. According to an SEC filing, the attack could cost the company at least $5 to $10 million. According to the company's website as of Friday morning, "We are continuing to investigate precisely what information was exposed.

According to an October 2023 survey from CertifID, 54% of real estate professionals reported having experienced at least one seller impersonation fraud attempt within the past six months. Meanwhile, 77% of real estate professionals surveyed claimed to have seen an increase in seller impersonation fraud attempts within the same period.

Blue Ridge Bank, a community bank in Virginia that dove headfirst into the business of partnering with fintechs, has been in a pinch ever since getting hit with a broad enforcement action last year. After nearly a year of turmoil, the company's new CEO told S&P Global Market Intelligence this summer that the bank was reducing its focus on fintechs and shifting back to its roots in community banking.

The real estate industry is turning to artificial intelligence (AI) tools for a variety of new use cases ranging from identifying potential investments to forecasting how renovations may impact a property’s value. The National Association of Realtors has seen a "particularly rapid uptake" of AI tools by real estate industry firms.

Since 2004, the U.S. president and Congress have declared the month of October to be Cybersecurity Awareness Month. Read on for tips and resources from ALTA and the Cybersecurity and Infrastructure Security Agency (CISA).

In addition to the wire fraud detection features, Qualia Shield also provides a way for agents to integrate their client portal with banks.

Among the advantages of ChatGPT is the ability to generate content quickly with minimal effort. On the flip side, potential risks of the natural language processing tool include plagiarism, security, privacy and bias. Read on as title professionals debate the pros and cons, as well as a look at how Congress, the Consumer Financial Protection Bureau and Federal Trade Commission are approaching this technology.

The title industry has seen an increase in cyberattacks, including the severity of the repercussions that follow. Listen to this ALTA Insights webinar as Naval Officer Joe Brunsman, a well-known cyber insurance risk expert and best-selling author of Damage Control: Cyber Insurance and Compliance, takes a deep dive into the topics of cyber liability coverage, new safeguard data security requirements, important security regimes and important exclusions. What you don’t know will hurt you.

Federal agencies urged mortgage companies and banks to be more vigilant in reporting compromised real estate transactions to their local financial crime units and to do so in specific ways that would increase the likelihood of an investigation. A way for companies to help government agencies, such as the FBI and Secret Service, catch bad actors is by being mindful in how they fill out consumer complaints including the Internet Crime Complaint Center (IC3) form. Watch this video to learn how to submit information to the IC3.

Large Language Models (LLM), like ChatGPT, are capable of processing large volumes of data and extracting valuable insights. Processing happens in one of two ways, either by fine tuning a large language model with pre-existing text or by providing the text as “context.” Read to learn about the efficiencies and risks of LLMs and the indispensable role that they will inevitably play in the title industry.

The wire fraud protection company said the latest investment will fund continued product development and scale operations to meet the demands of an industry transacting trillions of dollars annually.

Imagine you’re surfing Zillow. You’re scrolling through the listings when you come to a dead stop. Your own property is on the site, up for sale, but you never intended to sell. Read this article to learn more about a land owner's experience with seller impersonation fraud in Washington state, and click here for more from ALTA on the red flags and precautions to this scam.

Seller impersonation has now been perfected by scammers working together on what appears to be a nationally coordinated effort.  The potential to harvest large sums of money has attracted the resources of organized crime syndicates. They’re increasingly emboldened and they are targeting higher value properties. The key is to incorporate multiple layers of protection into your strategy to help prevent this fraud.

Zillow and Redfin both created ChatGPT plugins that will allow users to search for homes with a conversation. InstaMortgage came out with a voice-activated avatar version of ChatGPT named Rachel. Several other mortgage companies released internally trained AI chatbots. 

While Fannie Mae is partnering with Amazon Web Services to strengthen its defenses against cyber attacks, other entities are urging greater vigilance through enforcement. For example, the New York State Department of Financial Services is issuing fines to lenders who fail to provide adequate cybersecurity for their customers' private information.  

The SOC 2 Type II audit was conducted by a third-party auditor who verified Closinglock’s security policies, procedures, and controls in accordance with American Institute of Certified Public Accountants (AICPA) standards for SOC for Service Organizations (SSAE 18).

CertifID reported that its PayoffProtect mortgage payoff verification product tracked a 5x increase in mortgage payoff fraud attempts from Q1 to Q2 2023. The wire fraud protection company predicted losses are slated to accelerate as July’s numbers show similarly elevated levels of payoff fraud attempts, an early indication of potential for major losses in Q3 2023.

The alternatives to authenticator applications, if you don't have or don't want to use a mobile phone, are FIDO2 hardware devices. 

On June 30, the Sacramento County Superior Court issued a decision to delay enforcement of the California Privacy Rights Act (CPRA) regulations until March 29, 2024. Read on for the key takeaways from the ruling.

Genady Vishnevetsky, chief information security officer for Stewart Title Guaranty Co. and chair of ALTA's Information Security Work Group, details how to install two of the most common multi-factor authentication (MFA) applications, Google Authenticator and Authy.

Multi-factor authentication (MFA) is a must in today's world of continuously compromised passwords. Read on as Genady Vishnevetsky, chief information security officer for Stewart Title Guaranty Co., details two of the most common MFA applications.

Justin Lischak Earley, chief innovation underwriter at First American Title, studies the concept of tokenizing real estate assets, and has published thought-provoking perspectives on what is real and what is not in terms of non-fungible tokens in real estate. Read on as Lischak Earley recaps some of his key points from his presentation “Bear With Me: The Bearer-Asset Dangers of Tokenizing Real Estate.”

Endpoint Detection and Response (EDR) is a next generation cybersecurity solution that provides more advanced and comprehensive protection for your devices compared with traditional, static antivirus applications that only address simple signature-based malware threats.

Stephen Gregory, claims counsel for WFG National Title Insurance Co., reviews a recent decision by the U.S. Eleventh Circuit Court of Appeals that affirmed a title company did not have coverage for a fraudulent wire transfer under the cybercrime endorsement of its cybersecurity policy. Read on for the facts of the case.

CertifID identified $1.4 billion in suspected wire fraud attempts during 2022, according to a report released by the wire fraud protection firm. The report shows an 145% year-over-year increase in instances of reported wire fraud. 

The United States Court of Appeals for the Fifth Circuit on Feb. 1 upheld a lower court ruling finding that a title company was wrongly denied coverage under its crime protection policy for a wire fraud involving a loan payoff. While this case is not slated for publication and can’t be serve as a precedent, it can prove instructive for title companies looking to make claims under a crime policy for a payoff fraud. 

The U.S. mortgage delinquency rate continued to hold at near-record lows in November, with 2.9% of all mortgages in some stage of delinquency (30 days or more past due, including those in foreclosure), according to CoreLogic’s Loan Performance Insights Report. That’s a 0.7 percentage point decrease compared to 3.6% in November 2021.

Real estate transactions have been a prime target of cybercrime over the past decade, and there is little sign of change in this focus, even as the housing market slows. Instead, fraudsters continue to evolve their scam and money laundering tactics to avoid detection. CertfID reports that the latest trend involves vacant lots or unencumbered properties. Read on for educational resources from ALTA to help consumers protect their money.

Title and settlement companies report that the volume of cyberattacks have either increased or remained the same last year when compared to 2020. Because of this, title professionals should know essential risk-mitigation processes to protect against wire fraud and other cyber threats.

Personality tests, quick surveys, and other types of online quizzes ask seemingly harmless questions, but the more information you share, the more you risk it being misused. Scammers could do a lot of damage with just a few answers that give away your personal information. We’ve heard about scammers phishing for answers to security question data through quizzes. They use your quiz answers to try and reset your accounts, letting them steal your bank and other account information. Some scammers hack social media accounts and send malware links to friends of the hacked account holder under the guise of sharing a quiz.

A possible cyberattack against a property records management vendor has left several county offices with the inability to allow for searches of their land records or electronically record documents.