shutterstock_490960141-1

Industry News: ESG5

    What Cybersecurity Chiefs Need From Their CEOs

    2024-03-04

    Dark Reading: It seems obvious: CEOs and their chief information security officers (CISOs) should be natural partners. With the persistent rise in cyber threats, most CEOs recognize the importance of having a strong security leader to protect the company's data, not to mention its reputation.

    Read more...

    How GenAI Empowers Businesses To Stay Ahead In The Cybersecurity Race

    2024-03-04

    Forbes: Be it a tech giant or a startup, the threats to any company's security are relentless, sophisticated and constantly evolving. Hackers are weaponizing new tools, data breaches dominate headlines daily and the potential consequences of an attack are more devastating than ever.

    Read more...

    Know Your Breach: LoanDepot

    The Target: Giant loan and mortgage company LoanDepot

    The Take: The stolen LoanDepot customer data includes names, dates of birth, email and postal addresses, financial account numbers, and phone numbers. The stolen data also includes Social Security numbers, which LoanDepot collected from customers.

    The Vector: LoanDepot was hit by a cyberattack around January 4 that it described at the time as involving the “encryption of data,” or a ransomware attack. It’s not known if LoanDepot paid a ransom.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    Julius Baer Suffered Tech Crash That Left Bank Offline

    2024-03-01

    SWI swissinfo.ch: Julius Baer Group AG suffered a crash of its core banking systems on Feb. 16 that left Switzerland’s second-largest listed wealth manager offline for some time, according to people familiar with the matter. 

    Read more...

    How Open Source Is Disrupting Enterprise Security: Startup Filigran Shows The Way With Collaborative Threat Defense

    2024-02-28

    VentureBeat: Open-source models and platforms are proving valuable in solving one of the most urgent paradoxes all cybersecurity startups face: balancing the need to deliver reliable apps at scale and low cost while being open enough to integrate across existing IT infrastructure. 

    Read more...

    What Companies & CISOs Should Know About Rising Legal Threats

    2024-02-27

    Dark Reading: A new era of litigation is threatening the cybersecurity community. In addition to corporate and government enforcement, companies are being served with class-action lawsuits for data breaches. 

    Read more...

    Energy Department Invests $45 Million in 16 Projects to Improve Cybersecurity

    2024-02-27

    SecurityWeek: Managed by the Office of Cybersecurity, Energy Security, and Emergency Response (CESER), the projects are aimed at developing new tools to reduce cyber risks and improve the resilience of energy systems, including the power grid, utilities, pipelines, and renewable energy sources.

    Read more...

    NIST Releases Expanded 2.0 Version Of The Cybersecurity Framework

    2024-02-27

    CSO Online: After two years of work, the US National Institute of Standards and Technology (NIST) has issued the 2.0 version of its widely referenced Cybersecurity Framework (CSF), expanding upon the draft 2.0 version it issued in September.

    Read more...

    What's Stopping Cybersecurity From Being AI-Driven?

    2024-02-26

    Forbes: The buzz surrounding artificial intelligence (AI) has reached a fever pitch, with virtually every industry exploring the potential benefits or drawbacks, of using generative AI (GAI) and large language models (LLMs) like ChatGPT or Google Bard to improve their efficiency.

    Read more...

    China to Increase Protections Against Hacking for Key Industries

    2024-02-26

    US News: China's ministry of industry and information technology (MIIT) unveiled a plan that aims to improve data security in China's industrial sector and effectively contain "major risks" by the end of 2026.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates