shutterstock_490960141-1

Industry News: ESG5

    Less Noise, Better Signals: Why XDR and AI Are The Future of Cybersecurity

    2023-08-21

    VentureBeat: Capitalizing on malware-free tradecraft to launch undetectable breaches, attackers rely on legitimate system tools and living-off-the-land (LOTL) techniques to breach endpoints undetected.

    Read more...

    Cybersecurity Firm SentinelOne Explores Sale

    2023-08-21

    Yahoo Finance: SentinelOne Inc, a cybersecurity company with a market value of about $5 billion, has been exploring options that could include a sale, according to people familiar with the matter.

    Read more...

    Know Your Breach: Discord.io

    The Target: Discord.io is not an official Discord site but a third-party service allowing server owners to create custom invites to their channels. Most of the community was built around the service's Discord server, with over 14,000 members.

    The Take: The most sensitive information in the breach is a member's username, email address, billing address (small number of people), salted and hashed password (small number of people), and Discord ID.

    The Vector: A person known as 'Akhirah' began offering the Discord.io database for sale on the new Breached hacking forums. As proof of the theft, the threat actor shared four user records from the database.

    This breach is a stark reminder of how important authentication controls are in an overall robust cybersecurity posture. In particular, the information exposed here is perfect for crafting highly believable phishing campaigns as it would allow push notifications. Access monitoring and testing for every public-facing webpage is a key strategy to mitigate these kinds of breaches to protect a firm’s customer base.

    Read more...

    Cyber Defenders Lead the AI Arms Race for Now

    2023-08-17

    Dark Reading: Cyber defenders so far are winning the war over artificial intelligence: AI tools have yet to be meaningfully integrated into cyberattacks, while defenders have been using them to greater effect.

    Read more...

    Cybersecurity As A Strategic Investment: How ROI Optimization Can Lead To A More Secure Future

    2023-08-16

    Forbes: In the ever-changing landscape of cybersecurity, chief information security officers (CISOs) play a crucial role in safeguarding organizations against evolving threats. 

    Read more...

    Canadian Financial Sector Faces Rising Cybersecurity Challenges: Report

    2023-08-16

    Advisor's Edge: The Canadian financial services industry is seeing a surge in cybercrime and fraud, according to new data from LexisNexis Risk Solutions.

    Read more...

    SecureWorks Laying Off 15% of Employees

    2023-08-15

    SecurityWeek: The plans were announced in an SEC filing, with employees being notified starting August 14. In addition, the company revealed that it’s implementing “certain real estate‑related cost optimization actions”.

    Read more...

    AI’s Impact on Fintech: Do the Benefits Outweigh the Risks?

    2023-08-15

    Traders Magazine: Artificial Intelligence has considerably impacted the financial services industry in recent years, especially since the advent of OpenAI in late 2022.

    Read more...

    Why Finance Leaders In Midsize Businesses Are Stepping Up Cybersecurity Efforts

    2023-08-14

    Forbes: Finance organizations within midsize businesses have more on their minds than the traditional risks in credit, operational budgets, investments, and regulatory compliance.

    Read more...

    Adapting to the Cloud Era of Cybersecurity: How CISO’s Priorities Are Evolving

    2023-08-14

    Network Computing: Cybersecurity has been rapidly moving to the cloud, driving organizations to cloud-based solutions from third-party vendors instead of self-owned and maintained network security devices and software. 

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates