shutterstock_490960141-1

Industry News: ESG5

    Know Your Breach: Airbus

    The Target: The European aerospace giant Airbus

    The Take: The hacker claimed to have details on thousands of Airbus vendors, including names, addresses, phone numbers and emails.

    The Vector: Hackers breached an “IT account associated with an Airbus customer” and the company then investigated the incident. This account was used to download business documents dedicated to this customer from an Airbus web portal, the company said.

    This breach is critical reminder that zero-day exploits do happen, and furthermore that patching software in a timely, effective manner is a key component of ensuring customer data is protected. Ensuring third-party vendors are deploying patches and fixes in accordance with a firm’s cybersecurity policy is an important step in an overall robust security posture.

    Read more...

    Israel’s Startup Funding Drops As Its Famed Cyber Sector Takes A Hit

    2023-09-14

    Crunchbase: Israel has long taken pride in its blossoming tech startup scene, which has birthed large companies such as Check Point SoftwareCyberArk and Imperva, and trails only the U.S. in terms of cybersecurity funding.

    Read more...

    Majority Of UK Would Support Government Breaking International Cybersecurity Law

    2023-09-13

    CSO: More half of the UK population would be supportive of the UK government and its allies breaking international cybersecurity law, under the right circumstances. 

    Read more...

    Hackers Steal $53 Million Worth Of Cryptocurrency From CoinEx

    2023-09-13

    Bleeping Computer: Global cryptocurrency exchange CoinEX announced that someone hacked its hot wallets and stole large amounts of digital assets that were used to support the platform's operations.

    Read more...

    Cyber Risk Is Business Risk, And The SEC Knows It

    2023-09-13

    The Hill: A long overdue policy change to improve corporate governance on cybersecurity is taking effect. These companies are drivers of innovation and critical to the strength of the U.S. economy.

    Read more...

    MGM Resorts Discloses Cyber Incident In Filing With SEC

    2023-09-13

    Cybersecurity Dive: MGM Resorts officially disclosed a “cybersecurity issue” with the Securities and Exchange Commission in an 8-K filing, after taking its systems offline earlier.

    Read more...

    Cybersecurity In Finance: Protecting Client Data And Mitigating Risks

    2023-09-11

    Forbes: Gone are the days of calling in your stock trades from your local coffee shop and U.S. Postal Service-delivered bank statements. The finance industry of today is accessible at the touch of a button. 

    Read more...

    Global Companies to Hike Security Spending as Threats Rise: Survey

    2023-09-11

    Business Standard: Almost half of security chiefs at the world’s biggest companies expect to increase their budgets significantly in the next year as they see economic and social unrest driving more cases of theft, fraud and the leaking of sensitive information.

    Read more...

    Know Your Breach: Stake.com

    The Target: Curaçao-headquartered Stake.com offers casino and sports betting for players using cryptocurrency.

    The Take: Over $40m in cryptocurrency.

    The Vector: In crypto, hot wallets are less secure than cold wallets because public and private keys can be reached from the internet, enabling remote access and unauthorized activity. This appears to be what happened to Stake.com, although the firm has revealed few other details.

    This breach is a stark reminder of how important authentication controls are in an overall robust cybersecurity posture, and more critically, ensuring these controls are in place on all third-party vendors which have access to a firm’s data.

    Read more...

    Breach of Microsoft Engineer’s Account Likely Led to Hack of US Officials

    2023-09-06

    BNN Bloomberg: China-linked hackers breached the corporate account of a Microsoft Corp. engineer and are suspected of using that access to steal a valuable key that enabled the hack of senior US officials’ email accounts, the company said in a blog post.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates