Menu
Sign In
shutterstock_490960141-1

Industry News: Cybersecurity

      Know Your Breach: Trezor

      The Target: Popular hardware cryptocurrency wallet vendor Trezor

      The Take: A subset of 66,000 users who have interacted with Trezor Support since December 2021 may have had their names or usernames, and email addresses exposed to an unauthorized party.

      The Vector: Trezor has already confirmed 41 cases where exposed data has been exploited, with the attackers approaching users to trick them into giving away their recovery seeds - a string of words that contain all the information required for gaining access to a wallet.

      As phishing actors continue to explore every potential abuse opportunity on legitimate service providers, novel security gaps constantly threaten to expose users to severe risks. It is essential not to rely solely on email protection solutions, and also scrutinize every email that lands on your inbox, look for inconsistencies, and double-check all claims made in those messages.

      Read more...

      Cybersecurity And The AI Arms Race In A Landscape Of Emerging Threats

      2024-01-25

      Forbes: Of all the headlines in 2023, perhaps none captured our collective imagination last year like the high-profile AI breakthroughs typified by ChatGPT. 

      Read more...

      M|C Partners Makes Strategic Investment in Consortium Networks to Fuel Cybersecurity Growth

      2024-01-24

      PR Newswire: M|C Partners, a digital infrastructure and tech services private equity firm, has made a strategic growth investment in Consortium Networks, a national cybersecurity organization. 

      Read more...

      AI Will Make Scam Emails Look Genuine, UK Cybersecurity Agency Warns

      2024-01-24

      The Guardian: Artificial intelligence will make it difficult to spot whether emails are genuine or sent by scammers and malicious actors, including messages that ask computer users to reset their passwords, the UK’s cybersecurity agency has warned.

      Read more...

      AI Program Poised to Advance Cybersecurity in Abu Dhabi

      2024-01-23

      Dark Reading: Experts have welcomed the creation of a new artificial intelligence (AI) council in Abu Dhabi as a key move toward strengthening national cybersecurity.

      Read more...

      Cybersecurity Automation Firm Torq Lands $42 Million In Expanded Series B

      2024-01-23

      TechCrunch: Torq, a self-described “hyperautomation” cybersecurity startup, today announced that it raised $42 million in an extension to its Series B funding round from investors, including Bessemer Venture Partners, GGV Capital, Insight Partners, Greenfield Partners and Evolution Equity Partners.

      Read more...

      SEC Confirms X Account Was Hacked In SIM Swapping Attack

      2024-01-22

      Bleeping Computer: The U.S. Securities and Exchange Commission confirmed that its X account was hacked through a SIM-swapping attack on the cell phone number associated with the account.

      Read more...

      Microsoft To Overhaul Internal Security Practices After Midnight Blizzard Attack

      2024-01-22

      Cybersecurity Dive: Security researchers and other analysts say the attack raises serious questions about the security of Microsoft products and whether the company is employing the same practices internally that it demands of customers. 

      Read more...

      Know Your Breach: Liquipedia

      The Target: Liquipedia is an encyclopedia on various video games, covering everything from history to tactics. The platform was founded and is run by Team Liquid, a Netherlands-based professional e-sports organization owned by aXiomatic Gaming, an e-sports and gaming enabler.

      The Take: A part of the exposed information was contained in a user collection weighing 77MB, containing data on nearly 119,000 users. The exposed Liquipedia user details include: User IDs, User emails, email verification status, two-factor authentication status and account creation dates.

      The Vector: Researchers surmised that secrets and private RSA keys were used to authenticate admin access to Liquipedia’s Reddit, Discord, Twitch, and X accounts.

      This breach is a stark reminder of how authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

      Read more...

      Expect M&A Uptick In Cybersecurity Market, Says Arctic Wolf Boss

      2024-01-18

      City A.M: The boss of one of the world’s biggest cybersecurity companies has said he expects a surge in M&A activity in the sector in 2024. Nick Schneider, the chief executive of Arctic Wolf, which is valued at $4.3bn, told City A.M. that many potential buyers are “opportunistically” scouring the market.

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates