User Security and Privacy Report Finds Vulnerabilities in Web Trackers and the Rise in Cross-border Data Transfers and Access to User Login Credentials

User Security and Privacy Report Finds Vulnerabilities in Web Trackers and the Rise in Cross-border Data Transfers and Access to User Login Credentials
28.06.2019 01:56 pm

User Security and Privacy Report Finds Vulnerabilities in Web Trackers and the Rise in Cross-border Data Transfers and Access to User Login Credentials

Security

User-side security monitoring system Feroot today released its 2019 User Security and Privacy Report examining the hidden behaviors of external third- and fourth-party tools on the user-side for websites and web apps. Of the 13 different industries and government agency websites worldwide reviewed, the report found that:

  • 92% of major news websites across North America, the UK and Germany use ad trackers that are participating in automatic cross-border data transfer and is the only industry consistently sending user behavior data to Russia;
  • An average of 21 web trackers are active on any given website at any time creating a new and increasing surface area for an attack through chatbots, analytics, ad tech tools and others. (News industry hosts an average of 40 trackers per site while the tech industry hosts an average of 25 trackers per site.)
  • 90% of e-commerce login pages are susceptible to attack and can potentially provide external tools with unrestricted visibility of user passwords.

What this means:

The challenges faced by most security professionals is the constant growth of the tech stack: third- and fourth-party vendors, web trackers, and homegrown technology tools are always in flux as new tools and trackers are added daily for marketing and sales purposes. This poses ongoing data security and privacy threats because side-loaded code can be modified by third-parties at any time opening the possibility for a Man-in-the-middle (MITM) attack vector.

“The rise in regulatory scrutiny and increase of data breaches worldwide demonstrates the need for companies to be more vigilant about the type of data they collect and of the integrity of all parties that have access to user data, ultimately ensuring data is protected from potential theft,” said Ivan Tsarynny, Feroot CEO. “We are alarmed at how often data transfers and data collection by third-party tools go undetected. Attack surface area now includes all marketing and customer service third-party services. Security and privacy teams need to track where and by whom data is being stored, processed, and transferred, to prevent recurring and devastating breaches.”

Feroot scanned more than 1.1 million unique web pages across 365 organizational websites in 13 different industries focusing on the US, Canada, UK, France, Spain, and Germany, including government agencies, to take a closer look at:

  • Automated personal data collection and cross-border data transfers on public facing websites and web apps;
  • Data collection practices of web tracking tools across industries;
  • The impact of third- and hidden fourth-party tools and behavior tracker activities on GDPR, CCPA, PCI-DSS, HIPAA, and other obligations.

Simulated visits were conducted between April 19 and May 31, 2019, using the Feroot user- (client) side security monitoring system, and were repeated multiple times, limited to approximately 90 pages per website per day. For the full report visit here.

Related News

DLT Implementations Require Refreshed Approach to Security, According to New DTCC Paper

With the adoption of distributed ledger technology (DLT) expected to grow in financial services, The Depository Trust & Clearing Corporation (DTCC), the premier market... Read more »

Fraud Attempts and Threat Levels are Rising, Bottomline Survey Finds

Bottomline Technologies (NASDAQ:EPAY), a leading provider of financial technology that helps make business payments simple, smart and secure, today announced the release of the... Read more »

HTB Chooses Ping Identity for Multi-factor Authentication

Hampshire Trust Bank (HTB) today announces that it has partnered with Ping Identity to provide intelligent access for customers and brokers.

This forms part of HTB’s... Read more »

Growing Number Of High Streets Banks Adopt Unique Cheque Fraud Prevention Tool

The TALL Group of Companies, the UK’s leading provider of secure electronic and paper payments solutions is working with a growing number of high street banks that have all... Read more »

Global Enterprises and Merchants Unprepared as Fraudsters Focus on Rewards Programs

 ... Read more »

Magazine
ALL
Free Newsletter Sign-up
+44 (0) 208 819 32 53 +44 (0) 173 261 71 47
Download Our Mobile App
Financial It Youtube channel