shutterstock_490960141-1

Industry News: ESG5

    ‘The Worst Thing You Can Do’ After a Data Breach, According to a Cybersecurity Expert

    2024-07-30

    CNBC: When you get an email or see a headline telling you there has been a data breach at a company you do business with, the natural instinct may be to roll your eyes and go about your day.

    Read more...

    ECB Cyber Security Test Reveals 'Room For Improvement'

    2024-07-29

    Finextra: The European Central Bank says there is "room for improvement" after conducting its first thematic stress test on cyber resilience to determine how well individual banks would respond to and recover from, a cyber attack. 

    Read more...

    Know Your Breach: MediSecure

    The Target: MediSecure, an Australian electronic prescription provider.

    The Take: The impacted data included personal information including full names, titles, dates of birth, gender, email addresses, phone numbers, and individual healthcare identifiers (IHI).

    The Vector: An early forensic investigation by the company into the relevant impact of the incident indicated that 6.5TB of data stored on a database server was likely exfiltrated by a malicious third-party actor, although, encrypted servers couldn’t be examined for further details.

    This breach is critical reminder that zero-day exploits do happen, and furthermore that patching software in a timely, effective manner is a key component of ensuring customer data is protected. Ensuring third-party vendors are deploying patches and fixes in accordance with a firm’s cybersecurity policy is an important step in an overall robust security posture.

    Read more...

    CrowdStrike Blames Defect in Content Update for Epic IT Crash

    2024-07-24

    BNN Bloomberg: CrowdStrike Holdings Inc., the cybersecurity company at the center of massive global IT outages, said that a bug in a safety mechanism allowed flawed data to go out to customers in a botched update, causing last week’s meltdown.

    Read more...

    Female-Led Cybersecurity Startup Protexxa secures $10 Million in Funding

    2024-07-24

    Tech Funding News: Protexxa, one of the fastest-growing cybersecurity companies in Canada has closed a $10 million Series A funding round. 

    Read more...

    Optiv Report Shows Nearly 60% of Respondents Surveyed Increased Security Budgets as Most Organizations Report Cyber Breaches and Incidents

    2024-07-24

    Yahoo Finance: Optiv, the cyber advisory and solutions leader, has published its 2024 Threat and Risk Management Report, which examines how organizations' cybersecurity investments and governance priorities are keeping up with the evolving threat landscape.

    Read more...

    Cybersecurity Firm Wiz Rejects $23 Billion Bid From Google Parent Alphabet

    2024-07-23

    The Guardian: The cybersecurity firm Wiz has turned down a $23bn (£18bn) takeover bid from Google’s parent, Alphabet, spurning what would have been the tech company’s biggest ever acquisition and seeking a stock market flotation instead.

    Read more...

    Judge Deals Major Blow to SEC’s Cybersecurity Enforcement Stance

    2024-07-23

    CFO Dive: A recent ruling in the Securities Exchange Commission’s lawsuit against Austin, Texas-based software provider SolarWinds has dealt a significant blow to the agency’s aggressive cybersecurity enforcement posture, legal analysts said.

    Read more...

    Hackers Leak Documents From Pentagon IT Services Provider Leidos, Bloomberg News Reports

    2024-07-23

    Yahoo Finance/Reuters: Hackers have leaked internal documents stolen from Leidos Holdings Inc, one of the largest IT services providers to the U.S. government, Bloomberg News reported, citing a person familiar with the matter.

    Read more...

    Shocked, Devastated, Stuck: Cybersecurity Pros Open Up About Their Layoffs

    2024-07-23

    Dark Reading: Tony Bradley, a seasoned communications professional in the cybersecurity industry, was blindsided when he was recently laid off from his role as a marketing director.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates