- Education & Events
- Advocacy
- Products & Services
- Membership
- Resources
- SDBANKER Magazine
- SDBA eNews
- SDBA eNews Archives
- Legislative Update/Bill Watch
- South Dakota Bank Directory
- Women in Banking
- Scenes of South Dakota Calendar*
- Holiday Signs
- Regulatory Report
- South Dakota Banking Code
- Record Retention Manual
- Advertising & Sponsorship Guide
- COVID-19 Resources
- Mental Health and Crisis Prevention
- About
|
News
SDBA Events
Online EducationCompliance AllianceABA: ABA, associations: Keep credit card routing mandates out of defense billAugust 20, 2025
The American Bankers Association yesterday joined seven financial sector associations in voicing strong opposition to adding credit card routing mandates to an unrelated defense spending bill. In a joint letter to House and Senate leaders, the associations urged lawmakers to reject efforts to add the Credit Card Competition Act and a related “commissary interchange” study amendment to the National Defense Authorization Act for fiscal year 2026. CCCA sponsors Sens. Dick Durbin (D-Ill.) and Roger Marshall (R-Kan.) have attempted to add the text of their bill to the NDAA in the past, as the defense spending bill is considered must-pass legislation. “We are deeply concerned that these controversial provisions, which are unrelated to national defense, would harm consumers, disadvantage small financial institutions and even undermine the financial well-being of military families,” the associations said. “Simply put, the Durbin-Marshall interchange proposals do not belong in the NDAA, and we respectfully urge that they be excluded from any final defense authorization bill.” Congress is currently in recess but will reconvene in early September. Back to TopABA: Bank registration open for #BanksNeverAskThat, #PracticeSafeChecks campaigns
Back to topABA: ABA urges agencies to rescind 2023 CRA rule, make process improvementsAugust 18, 2025
The American Bankers Association today expressed support for rescinding the 2023 Community Reinvestment Act final rule and reinstating the 1995 rule, saying that while the older rule isn’t perfect, “it is more closely aligned with congressional intent and is more workable than the 2023 rule.” The Federal Reserve, FDIC and the Office of the Comptroller of the Currency in July issued a joint proposal to rescind the 2023 CRA rule. In a letter to the agencies, ABA said that while it agreed the CRA rule needed to be updated to reflect changes in consumer behavior and technology, the 2023 regulatory change were not consistent with the CRA statute. ABA, the U.S. Chamber of Commerce and five national and state associations sued banking agencies last year for exceeding their statutory authority in implementing the rule. “In addition, the rule’s complexity was a pronounced departure from the original goal of CRA modernization, which was to clarify — not complicate or overhaul — the CRA regulatory framework,” ABA said. ABA instead offered several recommendations to improve the CRA examination and supervision process. They include making public internal agency “guidance” for bank examiners, more transparency in the bank examination process, and creating a list or database of CRA-qualifying activities to take out the guesswork for banks. “We reiterate our support of the proposed rescission and recodification of the 1995 rule and urge the agencies to implement the process improvements described above as part of the transition back to the 1995 framework,” ABA said. Back to TopCISA News: Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025-53786) in Hybrid Exchange DeploymentsAugust 2025
Update (08/12/2025): CISA has updated this alert to provide clarification on identifying Exchange Servers on an organization’s networks and provided further guidance on running the Microsoft Exchange Health Checker. Update (08/07/2025): CISA issued Emergency Directive (ED) 25-02: Mitigate Microsoft Exchange Vulnerability in response to CVE-2025-53786. CISA is aware of the newly disclosed high-severity vulnerability, CVE-2025-53786, that allows a cyber threat actor with administrative access to an on-premise Microsoft Exchange server to escalate privileges by exploiting vulnerable hybrid-joined configurations. This vulnerability, if not addressed, could impact the identity integrity of an organization’s Exchange Online service. While Microsoft has stated there is no observed exploitation as of the time of this alert’s publication, CISA strongly urges organizations to implement Microsoft’s Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability guidance outlined below, or risk leaving the organization vulnerable to a hybrid cloud and on-premises total domain compromise.
CISA highly recommends entities disconnect public-facing versions of Exchange Server or SharePoint Server that have reached their end-of-life (EOL) or end-of-service from the internet. For example, SharePoint Server 2013 and earlier versions are EOL and should be discontinued if still in use. Organizations should review Microsoft’s blog Dedicated Hybrid App: temporary enforcements, new HCW and possible hybrid functionality disruptions for additional guidance as it becomes available. Disclaimer: The information in this report is being provided “as is” for informational purposes only. CISA does not endorse any commercial entity, product, company, or service, including any entities, products, or services linked within this document. Any reference to specific commercial entities, products, processes, or services by service mark, trademark, manufacturer, or otherwise, does not constitute or imply endorsement, recommendation, or favoring by CISA. This product is provided subject to this Notification and this Privacy & Use policy. Back to Top |
ABA’s scam prevention campaign, #BanksNeverAskThat, and our check fraud campaign, #PracticeSafeChecks are returning this fall — with new materials including social media posts and videos, check safety tips and resources for small business customers, digital graphics and more.
