shutterstock_490960141-1

Industry News: ESG5

    Banks, Financial Industry Hit by Rising Ransomware Attacks

    2023-03-21

    BNN Bloomberg: Ransomware gangs didn’t come out with any big new innovations last year, but “what 2022 lacked in innovation it made up for in volume,” according to a report by a financial services group.

    Read more...

    Geopolitical Tensions Enabled Increased Hacktivist Cyber Threats in 2022

    2023-03-21

    Global Newswire: FS-ISAC, the member-driven, not-for-profit organization that advances cybersecurity and resilience in the global financial system, announced the findings of its annual Global Intelligence Office report, Navigating Cyber 2023.

    Read more...

    New Cisco Study Finds Only 9% of Canadian Companies Surveyed are Ready to Defend Against Cybersecurity Threats

    2023-03-21

    Financial Post: A mere 9% of organizations in Canada have the ‘Mature’ level of readiness needed to be resilient against today’s modern cybersecurity risks, according to Cisco’s NASDAQ: CSCO first-ever Cybersecurity Readiness Index released.

    Read more...

    Cybersecurity Skills Shortage, Recession Fears Drive 'Upskilling' Training Trend

    2023-03-21

    Dark Reading: Companies continue to value cybersecurity skills, but many have moved their focus from hiring cybersecurity professionals to training up in-house staff on needed cybersecurity skills.

    Read more...

    Insurer Spots Cybersecurity Weakness With Model Simulating Catastrophic Attacks

    2023-03-20

    BNN Bloomberg: Coalition Inc., a cyber-insurance provider that tries to curb digital risk, has designed technology that simulates large-scale attacks to help insurers identify potential weaknesses in their portfolios and prevent widespread losses.

    Read more...

    Know Your Breach: Latitude Financial

    The Target: Latitude Financial, an Australian-based consumer finance service company.

    The Take: Documents and records belonging to 328,000 customers including Personally Identifiable Information such as Driver’s License details which have name, addresses, and dates-of-birth.

    The Vector: An employee’s credentials were compromised, allowing the attacker pivot access to two different third-party vendors which contained the customer data.

    This breach is a stark reminder of how important authentication controls are in an overall robust cybersecurity posture. Regular social engineering, phishing awareness training, and in this case, tightly enforced password and identity management are effective strategies to mitigate these kinds of breaches to protect a firm’s customer base.

    Read more...

    Cybersecurity Market Confronts Potential Consequences of Banking Crisis

    2023-03-16

    Cybersecurity Dive: The banking crisis and nagging suspicion that hardship will spread, even to companies not directly linked to the failed banks, could have an ancillary effect on the cybersecurity market.

    Read more...

    SEC Proposes New Requirements to Address Cybersecurity Risks to the U.S. Securities Markets

    2023-03-15

    SEC: The Securities and Exchange Commission proposed requirements for broker-dealers, clearing agencies, major security-based swap participants, the Municipal Securities Rulemaking Board, national securities associations, national securities exchanges, security-based swap data repositories, security-based swap dealers, and transfer agents (collectively, “Market Entities”) to address their cybersecurity risks.

    Read more...

    Safety Net: Cybersecurity Staff Shortage Looms if Canada Fails to Develop Homegrown Talent

    2023-03-15

    Financial Post: The former chief executive of Bulletproof, a cybersecurity firm with headquarters in Fredericton, New Brunswick, points to the rash of cyberattacks against organizations around the world that have been hacked and whose IT systems have been held for ransom by online bandits, including the attack on the City of Saint John, just an hour down the road.

    Read more...

    Cybercriminals Exploit SVB Collapse to Steal Money and Data

    2023-03-14

    Bleeping Computer: The collapse of the Silicon Valley Bank (SVB) on March 10, 2023, has sent ripples of turbulence throughout the global financial system, but for hackers, scammers, and phishing campaigns, it's becoming an excellent opportunity.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates