shutterstock_490960141-1

Industry News: ESG5

    Cybersecurity In Finance: Protecting Client Data And Mitigating Risks

    2023-09-11

    Forbes: Gone are the days of calling in your stock trades from your local coffee shop and U.S. Postal Service-delivered bank statements. The finance industry of today is accessible at the touch of a button. 

    Read more...

    Global Companies to Hike Security Spending as Threats Rise: Survey

    2023-09-11

    Business Standard: Almost half of security chiefs at the world’s biggest companies expect to increase their budgets significantly in the next year as they see economic and social unrest driving more cases of theft, fraud and the leaking of sensitive information.

    Read more...

    Know Your Breach: Stake.com

    The Target: Curaçao-headquartered Stake.com offers casino and sports betting for players using cryptocurrency.

    The Take: Over $40m in cryptocurrency.

    The Vector: In crypto, hot wallets are less secure than cold wallets because public and private keys can be reached from the internet, enabling remote access and unauthorized activity. This appears to be what happened to Stake.com, although the firm has revealed few other details.

    This breach is a stark reminder of how important authentication controls are in an overall robust cybersecurity posture, and more critically, ensuring these controls are in place on all third-party vendors which have access to a firm’s data.

    Read more...

    Breach of Microsoft Engineer’s Account Likely Led to Hack of US Officials

    2023-09-06

    BNN Bloomberg: China-linked hackers breached the corporate account of a Microsoft Corp. engineer and are suspected of using that access to steal a valuable key that enabled the hack of senior US officials’ email accounts, the company said in a blog post.

    Read more...

    Investors Betting Big on Upwind for CNAPP Tech

    2023-09-06

    SecurityWeek: Upwind, which describes itself as a runtime-powered Cloud-Native Application Protection Platform (CNAPP), has raised a total of $80 million in just 10 months as investors continue to pour cash into startups in the cloud and data security categories.

    Read more...

    Electoral Commission Failed Cybersecurity Test in Same Year as Hack

    2023-09-05

    The Guardian: The Electoral Commission has admitted it failed a cybersecurity test in the same year that hackers successfully attacked the organization.

    Read more...

    Verizon Unit to Pay $4 Million US Penalty to Resolve Cybersecurity Claims

    2023-09-05

    Yahoo Finance: Verizon Business Network Services, a unit of the telecom giant , agreed to pay $4.1 million to resolve U.S. allegations that it failed to follow required cybersecurity standards, the U.S. Justice Department said.

    Read more...

    Dataprise Expands Footprint in New York City & Financial Services with the Acquisition of Cohere's Business

    2023-09-05

    PR Newswire: Dataprise, a premier provider of managed IT, cybersecurity and cloud solutions, announced that it has completed an acquisition of clients and employees of Cohere, a security-first managed services provider headquartered in New York City.

    Read more...

    German Financial Agency Site Disrupted By DDoS Attack

    2023-09-04

    Bleeping Computer: The German Federal Financial Supervisory Authority (BaFin) announced that an ongoing distributed denial-of-service (DDoS) attack has been impacting its website.

    Read more...

    Australian Government Mandates Agencies Appoint CISOs

    2023-09-03

    CSO: The Australian federal government has approved amendments to the Protective Security Policy Framework (PSPF) to mandate non-corporate Commonwealth entities to appoint a CISO to be responsible for cyber security leadership in the entity.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates