Bitcoin ETF

when

Just two weeks prior to a cybersecurity breach, the U.S. Securities and Exchange Commission (SEC) was alerted to critical lapses in its cybersecurity defenses. The alert was issued via a report released by the Office of Inspector General (OIG) detailing the SEC’s inadequacies in maintaining strong security measures for digital assets. 
The report, published by Cotton &amp; Company Assurance and Advisor, highlighted that there is a necessity to improve several security protocols, including vulnerability management and risk assessment in urgency.
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <img src="https://s.w.org/images/core/emoji/15.0.3/72x72/1f6a8.png" alt="🚨" class="wp-smiley" style="height: 1em; max-height: 1em;">NEW: Remember the <a href="https://twitter.com/SECGov?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@SECGov</a> X hack from January 9th? The last update from the agency on January 22 stated that it was working with the Office of the Inspector General and several outside agencies including the FBI about the incident.
 But apparently in 2023, the SEC OIG got an…
 — Eleanor Terrett (@EleanorTerrett) <a href="https://twitter.com/EleanorTerrett/status/1787485861946515633?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">May 6, 2024</a>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
Based on the document, the SEC was advised to improve its information security controls to include risk management, security training, and continuous diagnostics. Disregarding these suggestions, a breach took place on January 9 when an unauthorized entity accessed the <a href="https://coingape.com/sec-x-hack-what-really-caused-the-big-blunder/" rel="noopener noreferrer nofollow">SEC’s X account</a>, deceiving the public with a false statement concerning a Bitcoin ETF approval.
<h2 id="details-of-the-january-sec-hack">Details of the January SEC Hack</h2>
Besides breaching SEC’s communications, the cyberattack had a significant monetary impact as reports claimed that the wrong announcement resulted in $90 million in market liquidations. 
This incident entailed a <a href="https://coingape.com/rug-pull-alert-crypto-hacks-that-wrecked-the-web3/" rel="noopener noreferrer nofollow">SIM-swapping attack</a>, which is a ploy used by attackers to take control of a victim’s phone number to evade security measures, which include two-factor authentication and which the SEC had not put in place for the account in question.
After the occurrence, the SEC clarified that the breach was restricted to social media and did not reach into internal systems or data. The entry point for the hackers was through the telecom carrier rather than a direct compromise of the digital infrastructure of the SEC, the agency stated.
<h2 id="congressional-reaction-and-calls-for-accountability">Congressional Reaction and Calls for Accountability</h2>
The breach prompted an immediate reaction from the legislators, with Congresswoman Anne Wagner showing her worries regarding the impact of the hack. Describing the incident as a prime example of market manipulation, Wagner stated that he intended to ask more questions to <a href="https://coingape.com/xrp-lawyer-slams-michael-saylor-comparing-him-gary-gensler/" rel="noopener noreferrer nofollow">Gary Gensler</a>, the chairman of the SEC, when it comes to governance and the response after the cyber-attack.
The legislative inquiry has been centered on the sufficiency of the SEC’s reaction to the first OIG report and the possibility of what inaction on the part of the regulator following the report might have done towards the vulnerability that led to the January hack.
<h2 id="strong-sec-s-ongoing-response-strong">SEC’s Ongoing Response&nbsp;</h2>
Following the attack, the SEC is being watched to show improvements in its cybersecurity posture. As the SEC claims, they continue to work towards improving the strength of their information security program.
Nonetheless, specifics of how these improvements will be implemented are lacking, which hints at transparency issues and the effectiveness of the SEC’s response to both the OIG report and the January cyber incident.
The OIG’s timeline stipulated that the SEC was to submit its plan of action within 45 days after receipt of the December report, a timeline that came just before the hack. This has prompted more investigations into the adequacy and timeliness of the SEC’s administrative proceedings and observance of <a href="https://coingape.com/circle-passes-soc-2-type-2-cybersecurity-audit/" rel="noopener noreferrer nofollow">cyber security</a> recommendations.
Read Also: <a href="https://www.google.com/url?client=internal-element-cse&amp;cx=e6c2264173c544ed8&amp;q=https://coingape.com/just-in-sec-delays-decision-on-invesco-galaxy-ethereum-etf-to-july/&amp;sa=U&amp;ved=2ahUKEwjtsa2rjvqFAxVuefEDHYvsBHcQFnoECAgQAg&amp;usg=AOvVaw2NEUHt0iYfb6t9YNoZHc5a" rel="noopener noreferrer nofollow">SEC Delays Decision on Invesco Galaxy Ethereum ETF to July</a>
The post <a href="https://coingape.com/sec-hack-is-the-regulator-withholding-crucial-disclosure/" rel="noopener noreferrer nofollow">SEC Hack: Is The Regulator Withholding Crucial Disclosure?</a> appeared first on <a href="https://coingape.com" rel="noopener noreferrer nofollow">CoinGape</a>.

SEC Hack: Is The Regulator Withholding Crucial Disclosure?

Table of Contents

Coingape News Media

Other articles published on May 6, 2024

XRP Ripple’s Battle with SEC: Settlement Updates, Appeals, and Judge Torres’ Final Verdict Timeline

Earn Using BetFury Crypto Loans With the Lowest Interest Rate

Elon Musk Boosts Platform Security with Image Matching to Combat Deepfakes

Bitcoin (BTC) Halving: A Deep Dive into Its Impact on Crypto Mining Profits

SEC takes aim at Robinhood, faces lawsuit threat

JUST IN! SEC Sent Wells Notice to Robinhood, Bitcoin Declined!

Join our free newsletter for daily crypto updates!