shutterstock_490960141-1

Industry News: ESG5

    SEC Sues SolarWinds Over Massive Cyberattack, Alleging Fraud And Weak Controls

    2023-10-31

    CNBC: Information Technology firm SolarWinds, which was targeted by a Russian-backed hacking group in one of the worst cyber-espionage incidents in U.S. history in 2019, committed fraud and failed to maintain adequate internal controls for years prior to the hack, the Securities and Exchange Commission alleged in a lawsuit.

    Read more...

    What The White House Executive Order On AI Means For Cybersecurity Leaders

    2023-10-31

    CSO: Artificial intelligence continues to snare the technological limelight and, rightly so as we move well into the final quarter of 2023, there is wide international interest in harnessing the power of AI.

    Read more...

    US-Led Cybersecurity Coalition Vows To Not Pay Hackers’ Ransom Demands

    2023-10-31

    TechCrunch: The U.S. government and dozens of foreign allies have pledged never to pay ransom demands in a bid to discourage financially motivated hackers and ransomware gangs profiteering from cyberattacks.

    Read more...

    FTC Orders Non-Bank Financial Firms to Report Breaches in 30 Days

    2023-10-30

    Bleeping Computer: The U.S. Federal Trade Commission (FTC) has amended the Safeguards Rules, mandating that all non-banking financial institutions report data breach incidents within 30 days.

    Read more...

    Know Your Breach: Casio

    The Target: Japanese electronics manufacturer Casio.

    The Take: The exposed data includes customer names, email addresses, countries of residence, service usage details, and purchase information such as payment methods, license codes, and order specifics.

    The Vector: Casio detected the incident on Wednesday, October 11, 2023, following the failure of a ClassPad database within the company's development environment. Evidence suggests that the attacker accessed customers' personal information a day later, on October 12, 2023.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    How Much Cybersecurity Expertise Does A Board Need?

    2023-10-25

    CSO: Whether a specific requirement or not, companies must either educate their board of directors in cybersecurity and risk management or look to recruit directors with specific cybersecurity experience to improve organizations response and decision-making.

    Read more...

    Tikehau Capital Launches The New Vintage of Brienne, its Flagship Private Equity Cybersecurity Strategy

    2023-10-25

    Business Wire: The focus of this next vintage will be on seizing European opportunities and supporting companies with significant global B2B scalability potential. It aims to invest ticket sizes ranging from €10 million to €50 million, including reinvestments, thus offering the potential for substantial backing to companies poised to redefine the cybersecurity landscape.

    Read more...

    September Was a Record Month For Ransomware Attacks in 2023

    2023-10-24

    Bleeping Computer: Ransomware activity in September reached unprecedented levels following a relative lull in August that was still way above regular standards for summer months.

    Read more...

    Censys Lands New Cash to Grow its Threat-Detecting Cybersecurity Service

    2023-10-24

    TechCrunch: Investments in cybersecurity companies are beginning to turn a corner, seemingly. After a brutal summer, VC funding to security startups saw a slight (12%) uptick from Q3, according to Crunchbase — reaching nearly $1.9 billion compared to $1.7 billion in the second quarter.

    Read more...

    Microsoft to Help Australia’s Cyber Spies Amid $5 Billion Investment in Cloud Computing

    2023-10-23

    The Guardian: Microsoft says it will invest an additional $5 billion in Australia over the next two years to expand hyperscale cloud computing capacity while collaborating with the Australian Signals Directorate (ASD) to boost domestic protection from cyber threats.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates