shutterstock_490960141-1

Industry News: ESG5

    How to Ensure Cybersecurity Strategies Align with the Company’s Risk Tolerance

    2024-09-03

    CSO Online: Aligning an organization’s appetite for risk with cybersecurity strategies is a critical challenge CISOs face, one that requires balancing technical controls and business needs.

    Read more...

    The High Cost of Cybersecurity Breaches on Corporate Reputation

    2024-09-03

    FinTech Global: A recent study highlighted by ISACA points to a staggering 78% of industry professionals ranking the reputational impact as the paramount concern following cyberattacks. 

    Read more...

    AI-Driven Cybersecurity and Human Collaboration Are Crucial for Adapting to Future Threats, Says Info-Tech Research Group

    2024-08-27

    PR Newswire: The rapid evolution of cyber threats, driven by increasingly sophisticated tactics and automation, has exposed the vulnerabilities of traditional security solutions.

    Read more...

    Know Your Breach: Toyota

    The Target: Toyota Motor Corporation is a Japanese multinational automotive manufacturer headquartered in Toyota City, Aichi, Japan.

    The Take: The threat actor says they breached a U.S. branch and were able to steal 240GB of files with information on Toyota employees and customers, as well as contracts and financial information.

    The Vector: BleepingComputer found that the files had been stolen or at least created on December 25, 2022. This date could indicate that the threat actor gained access to a backup server where the data was stored.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    Ransomware Victims Paid $460 Million in First Half of 2024

    2024-08-20

    SecurityWeek: Chainalysis found that while illegal on-chain activity has dropped by nearly 20% year-to-date, ransomware payments have increased by 2%, from $449.1 million in the first half of 2023 to $459.8 million in the first half of 2024.

    Read more...

    Microchip Technology Discloses Cyberattack Impacting Operations

    2024-08-20

    Bleeping Computer: American chipmaker Microchip Technology Incorporated has disclosed that a cyberattack impacted its systems over the weekend, disrupting operations across multiple manufacturing facilities.

    Read more...

    CISOs Face Uncharted Territory in Preparing For AI Security Risks

    2024-08-13

    CSO Online: Generative AI, which has the unique ability to create original content and actions, had its conceptual origins in 1906 when Russian mathematician Andrei Andreevich Markov created a stochastic model of probabilities known as the Markov chain. 

    Read more...

    The CrowdStrike Meltdown: A Wake-up Call for Cybersecurity

    2024-07-30

    Dark Reading: On July 19, the world experienced one of the largest IT outages in history, affecting millions of users globally, and systems and people will be reeling from its impact for weeks. 

    Read more...

    ‘The Worst Thing You Can Do’ After a Data Breach, According to a Cybersecurity Expert

    2024-07-30

    CNBC: When you get an email or see a headline telling you there has been a data breach at a company you do business with, the natural instinct may be to roll your eyes and go about your day.

    Read more...

    CrowdStrike Blames Defect in Content Update for Epic IT Crash

    2024-07-24

    BNN Bloomberg: CrowdStrike Holdings Inc., the cybersecurity company at the center of massive global IT outages, said that a bug in a safety mechanism allowed flawed data to go out to customers in a botched update, causing last week’s meltdown.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates