Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    How Open Source Is Disrupting Enterprise Security: Startup Filigran Shows The Way With Collaborative Threat Defense

    2024-02-28

    VentureBeat: Open-source models and platforms are proving valuable in solving one of the most urgent paradoxes all cybersecurity startups face: balancing the need to deliver reliable apps at scale and low cost while being open enough to integrate across existing IT infrastructure. 

    Read more...

    What Companies & CISOs Should Know About Rising Legal Threats

    2024-02-27

    Dark Reading: A new era of litigation is threatening the cybersecurity community. In addition to corporate and government enforcement, companies are being served with class-action lawsuits for data breaches. 

    Read more...

    Energy Department Invests $45 Million in 16 Projects to Improve Cybersecurity

    2024-02-27

    SecurityWeek: Managed by the Office of Cybersecurity, Energy Security, and Emergency Response (CESER), the projects are aimed at developing new tools to reduce cyber risks and improve the resilience of energy systems, including the power grid, utilities, pipelines, and renewable energy sources.

    Read more...

    NIST Releases Expanded 2.0 Version Of The Cybersecurity Framework

    2024-02-27

    CSO Online: After two years of work, the US National Institute of Standards and Technology (NIST) has issued the 2.0 version of its widely referenced Cybersecurity Framework (CSF), expanding upon the draft 2.0 version it issued in September.

    Read more...

    What's Stopping Cybersecurity From Being AI-Driven?

    2024-02-26

    Forbes: The buzz surrounding artificial intelligence (AI) has reached a fever pitch, with virtually every industry exploring the potential benefits or drawbacks, of using generative AI (GAI) and large language models (LLMs) like ChatGPT or Google Bard to improve their efficiency.

    Read more...

    China to Increase Protections Against Hacking for Key Industries

    2024-02-26

    US News: China's ministry of industry and information technology (MIIT) unveiled a plan that aims to improve data security in China's industrial sector and effectively contain "major risks" by the end of 2026.

    Read more...

    Know Your Breach: CNO Financial Group

    The Target: Washington National Insurance and Bankers Life, both subsidiaries of the CNO Financial Group

    The Take: Personal information including names, social security numbers, dates of birth, and policy numbers.

    The Vector: SIM-swapping attacks involve fraudsters tricking customer support staff at a cellphone operator into giving them control of someone else's phone number. This allows the fraudster to receive the victim's phone calls and SMS messages, including two-factor authentication tokens.

    This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    Benefits And Cautions Of Aligning With Cybersecurity Frameworks

    2024-02-13

    Forbes: Enterprise security teams continually assess shifting security concerns and implement mitigating controls to reduce the organization's risk. However, with the pressing need to respond to threats, many organizations have implemented specific controls to mitigate single risks, creating the potential for dangerous gaps in coverage.

    Read more...

    Tech Companies Plan to Sign Accord to Combat AI-Generated Election Trickery

    2024-02-13

    SecurityWeek: At least six major technology companies are planning to sign an agreement this week that would guide how they try to put a stop to the use of artificial intelligence tools to disrupt democratic elections. The upcoming event at the Munich Security Conference in Germany comes as more than 50 countries are due to hold national elections in 2024.

    Read more...

    Prudential Says Hackers Gained Access to Its Computer Systems

    2024-02-13

    BNN Bloomberg: Prudential Financial Inc. said hackers it believes to be part of a cyber-crime group gained access to some of its information-technology systems and a small percentage of user accounts associated with employees and contractors.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates