Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Know Your Breach: NTT Com

    The Target: The Japanese information and communication technology provider NTT Communications Corporation (NTT Com).

    The Take: The threat actor, the company says, exfiltrated information on 17,891 customer companies, including contract numbers, customer names, contact names, phone numbers, email addresses, physical addresses, and information on service usage.

    The Vector: The incident, the telecoms firm says, occurred on February 5, when an unnamed threat actor accessed its internal systems, including those hosting information on services provided to customer companies.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    Australia Regulator Sues FIIG Securities for Cybersecurity Failures

    2025-03-13

    MSN: The Australian securities watchdog said it is taking fixed-income broker FIIG to court, alleging it failed to implement adequate cybersecurity measures over a four-year period, enabling a hacker to infiltrate its IT network.

    Read more...

    UK Cybersecurity Sector Could be Worth £13 Billion, Research Shows

    2025-03-12

    Tech Radar: The cyber sector in the UK has seen significant investment in the last few months, and has grown 12% in the last year, new analysis has claimed. The industry generated £13.2 billion in revenue over the past year, with a total gross value added of £7.8 billion, up 21% from the year before.

    Read more...

    Cyberwashing Exposes Businesses and Consumers to Cyber Risks, Study Warns

    2025-03-12

    Tech Monitor: A report published by Australia-based Monash University has exposed the growing prevalence of ‘cyberwashing,’ a practice where organisations exaggerate their cybersecurity capabilities to create a misleading perception of robust data protection. 

    Read more...

    Sola Raises $30 Million for ‘Self-Serve’ Cybersecurity Solution

    2025-03-11

    PYMNTS.com: Sola Security has raised $30 million for its no-code, artificial intelligence (AI)-powered cybersecurity platform. The seed funding, announced as the company emerged from stealth, will allow Sola to develop its solution, which it says lets businesses build security apps without needing “deep technical expertise” or having to spend too much.

    Read more...

    New York Sues Insurance Giant Over Data Breaches

    2024-03-11

    SecurityWeek: National General, which offers home, vehicle, and other insurance coverage, suffered two data breaches in 2020 and 2021, resulting in the driver’s license numbers of more than 165,000 New Yorkers being compromised.

    Read more...

    Cybersecurity Becoming a Larger Priority For Institutions and Investors

    2025-03-10

    Private Banker International: Cybersecurity has always been a pressing concern in financial services, but it is becoming a priority for investors. In terms of concerns, cybersecurity is always near the top for private banks, wealth managers and their clients. Protecting money, especially at the level of wealth, is crucial.

    Read more...

    Swiss Critical Sector Faces New 24-Hour Cyberattack Reporting Rule

    2025-03-10

    Bleeping Computer: Switzerland's National Cybersecurity Centre (NCSC) has announced a new reporting obligation for critical infrastructure organizations in the country, requiring them to report cyberattacks to the agency within 24 hours of their discovery.

    Read more...

    Know Your Breach: DISA Global Solutions

    The Target: DISA Global Solutions, Inc., a third-party employment screening services provider.

    The Take: The personal information accessed could have included people’s names, Social Security numbers, driver’s license numbers, other government ID numbers, financial account information and other data elements.

    The Vector: The company, which provides drug and alcohol testing and background checks, said it discovered on April 22, 2024, that it was the victim of cyber-attack that gave “an unauthorized third party” access to individuals’ personal information from Feb. 9, 2024, to April 22, 2024, the company said in a notice on its website.

     This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    Evolution Equity Partners Adds Cyber Investor Veteran John Cordo

    2025-03-06

    PR Newswire: Evolution Equity Partners, a leading venture capital investor, is thrilled to announce that John Cordo has joined the firm. John joins a team of thirty investment professionals and eight general partners focused on investing in best-of-breed cybersecurity and AI companies. 

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates