shutterstock_490960141-1

Industry News: ESG5

    Cybersecurity Vendor Funding, M&A Down from 2022

    2023-08-03

    Channel Futures: Cybersecurity vendor funding fell last month, continuing a decline during the second quarter compared to the year-ago quarter. That’s according to Pinpoint Search Group. It releases monthly reports on cybersecurity vendor funding and M&A.

    Read more...

    Data Breaches Grow Nearly Three Times, With US Accounts Most Compromised

    2023-08-03

    ZD Net: Some 110.8 million user accounts were breached in the second quarter of 2023, with the US accounting for almost 45% of the global figure. Worldwide, data breaches grew 2.6 times compared to the first quarter, with an average of 855 accounts leaked every minute in the second quarter.  

    Read more...

    Jericho Security Uses AI to Fight AI in New Frontier of Cybersecurity

    2023-08-03

    Venture Beat: Cybersecurity startup Jericho Security announced it has raised $3 million in pre-seed funding to build solutions using artificial intelligence (AI) to combat increasingly sophisticated phishing attacks generated by AI systems.

    Read more...

    EU’s Financial Institutions Face Cyber Resilience Crisis

    2023-08-01

    Help Net Security: 78% of Europe’s largest financial institutions experienced a third-party breach in the past year, according to SecurityScorecard. In the wake of attacks such as MOVEit and SolarWinds, cybersecurity regulations are increasing the need for comprehensive approaches to manage vendor risk and ensure compliance.

    Read more...

    Bankrupt Crypto Lender Voyager Digital Reports Possible Breach

    2023-08-01

    PYMNTS: Bankrupt crypto lender Voyager Digital Holdings has reported a possible breach, revealing the difficulties of protecting customers from online scammers.

    Read more...

    Know Your Breach: Maximus

    The Target: Government services provider Maximus and 513 organizations impacted by the MOVEit hack.

    The Take: According to Maximus, the attackers stole files containing personal information and protected health information, including Social Security numbers, “of at least 8 to 11 million individuals”.

    The Vector: Disclosed at the end of May, the attack involved the exploitation of a zero-day vulnerability in the MOVEit Transfer managed file transfer (MFT) software, allowing cybercriminals to tap into the data transferred through the service.

    zero-day vulnerability is a vulnerability in a system or device that has been disclosed but is not yet patched. This breach is a reminder of how regular vendor assessments are a key component in cybersecurity. The breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control but in third-party systems the firm relies upon as well.

    Read more...

    Startups Ramp Up Innovation as Cloud Cybersecurity Race Intensifies

    2023-07-28

    Silicon Angle: Venture capital cash inflows in technology often happen in high-innovation areas. Given the expanding threat surface and financial incentive for attackers, cybersecurity is attracting a lot of that cash.

    Read more...

    Absolute Software Announces Completion of Acquisition by Crosspoint Capital Partners

    2023-07-27

    Business Wire: Absolute Software™, the only provider of self-healing, intelligent security solutions, today announced the successful completion of its acquisition by an affiliate of Crosspoint Capital Partners, LP, a leading private equity investment firm focused on the cybersecurity, privacy and infrastructure software markets.

    Read more...

    SecurityScorecard Research Reveals 78% of Europe’s Largest Financial Institutions Experienced a Third-Party Breach in the Past Year

    2023-07-26

    Business Wire: SecurityScorecard today announced the release of a new report on the Digital Operational Resilience Act (DORA). The report analyzes 240 of the largest financial institutions in the European Union that must comply with the Digital Operational Resilience Act (DORA) by January 2025.

    Read more...

    The SEC Wants Corporate America to Tell Investors More About Cybersecurity Breaches

    2023-07-26

    CNBC: The Securities and Exchange Commission wants corporate America to tell investors more about cybersecurity breaches and what’s being done to fight them. Much more. 

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates