shutterstock_490960141-1

Industry News: ESG5

    Man Pleads Guilty to Stealing $37 Million in Crypto From 571 Victims

    2024-10-06

    Bleeping Computer: A 21-year-old man from Indiana named Evan Frederick Light pleaded guilty to stealing $37,704,560 worth of cryptocurrency from 571 victims in a 2022 cyberattack.

    Read more...

    Know Your Breach: ScienceLogic

    The Target: ScienceLogic SL1 (formerly EM7) is an IT operations platform for monitoring, analyzing, and automating an organization's infrastructure, including cloud, networks, and applications.

    The Take: The hackers exploited the zero-day to gain access to web servers and steal limited customer monitoring data, including customer account names and numbers, customer usernames, Rackspace internally generated device IDs, device name and information, IP addresses, and AES256 encrypted Rackspace internal device agent credentials.

    The Vector: Threat actors exploited a zero-day vulnerability in a third-party tool used by the ScienceLogic SL1 platform.

    This breach is critical reminder that zero-day exploits do happen, and furthermore that patching software in a timely, effective manner is a key component of ensuring customer data is protected. Ensuring third-party vendors are deploying patches and fixes in accordance with a firm’s cybersecurity policy is an important step in an overall robust security posture.

    Read more...

    Darktrace Announces Formal Completion of its Acquisition by Thoma Bravo

    2024-10-01

    Dark Reading: Darktrace, a global leader in cybersecurity AI, has announced the completion of its acquisition by Thoma Bravo, a leading software investment firm, for $5.3bn. The recommended cash acquisition was announced on 26 April 2024 and the Scheme of Arrangement has now become effective. 

    Read more...

    Ransomware Attacks Surge Despite International Enforcement Effort

    2024-10-01

    Cybersecurity Dive: The number of ransomware attacks hitting U.S. and international organizations continues to climb, despite an extensive and growing effort to reduce the volume and impact of these attacks, U.S. cyber authorities said.

    Read more...

    Cybersecurity M&A Balloons as Breach Danger Builds

    2024-10-01

    Chief Investment Officer: Mergers and acquisitions are up this year for firms providing cybersecurity tools and services, amid heightened attacks by criminals and increased use of artificial intelligence to counter the bad guys.

    Read more...

    Cyber Attacks Causing Reputational Damages: CIRA

    2024-10-01

    BNN Bloomberg: As the number of cyber-attacks has risen in recent years, a new survey finds that the incidents are leading to reputational damages amongst impacted organizations. The Canadian Internet Registration Authority (CIRA) released the results of its latest annual Cyber Security Survey.

    Read more...

    Palo Alto Networks and Deloitte Expand Partnership for AI Cybersecurity

    2024-10-01

    Yahoo Finance: Palo Alto Networks and Deloitte announced an expansion of their strategic alliance into the EMEA and JAPAC regions, making Palo Alto Networks AI-powered cybersecurity solutions and joint offerings available to Deloitte clients globally.

    Read more...

    Know Your Breach: AutoCanada

    The Target: Car dealership company AutoCanada, which has 66 dealerships.

    The Take: The data that has been exposed includes full names, addresses, dates of birth, payroll information, including salaries and bonuses, social insurance numbers, bank account numbers used for direct deposits, scans of government-issued identification documents, and any personal documents stored on a work computer or drives tied to a work computer.

    The Vector: The threat actors published terabytes of data allegedly stolen from AutoCanada, including databases, NAS storage images, executives' information, financial documents, and HR data.

    This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    Torq, Which Automates Cybersecurity Workflows, Raises $70 Million in New Capital

    2024-09-24

    TechCrunch: As the volume of cyberattacks grows, there’s increasing interest from the corporate sector in tech to help automate responses to breaches. Per a 2023 survey from analytics firm Devo, 80% of security leaders expected expanded investments in security automation technology this year; most cited the tech’s potential to support cyber-threat mitigation.

    Read more...

    Wiz In Talks to Sell Shares at Valuation as High as $20 Billion

    2024-09-24

    BNN Bloomberg: Cybersecurity startup Wiz Inc. is in discussions to sell existing shares at a valuation as high as $20 billion, according to people with knowledge of the matter.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates