Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Know Your Breach: Workiva

    The Target: Workiva, a leading cloud-based SaaS (Software as a Service) provider.

    The Take: The threat actors exfiltrated a limited set of business contact information, including names, email addresses, phone numbers, and support ticket content.

    The Vector: Workiva notified its customers that attackers who gained access to a third-party customer relationship management (CRM) system stole some of their data.

    This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    The Click That Costs Millions: Why Human Error Is Cybersecurity's Top Threat

    2025-09-11

    Forbes: For years, cybersecurity focused on perimeter defenses. Today, with hybrid work and the cloud being ubiquitous, the greatest threat isn't code; rather, it's the person holding the device.

    Read more...

    Firms, Reps Affected By CIRO Breach

    2025-09-09

    Investment Executive: The Canadian Investment Regulatory Organization (CIRO) confirmed that personal information about industry firms and registered reps was compromised in a cyber breach reported last month.

    Read more...

    Rising Tariff Worries, AI Use Puts Spotlight On FP&A, Protiviti Survey Finds

    2025-09-09

    CFO Dive: The importance of the FP&A function has captured greater attention as executive leaders globally continue to navigate a still-murky economic environment alongside the evolution of technologies such as AI.

    Read more...

    SentinelOne Announces Plans to Acquire Observo AI

    2025-09-08

    Dark Reading: Threat detection vendor SentinelOne announced plans to acquire Observo AI, which will boost the company's existing AI SIEM and security data offerings and focus on autonomous security operations.

    Read more...

    Ex-WhatsApp Cybersecurity Executive Says Meta Endangered Billions of Users in New Suit

    2025-09-08

    The Guardian: A former top cybersecurity executive at WhatsApp filed a lawsuit alleging that parent company Meta disregarded internal flaws in the app’s digital defenses and exposed billions of its users. 

    Read more...

    VC Giant Insight Partners Notifies Staff and Limited Partners After Data Breach

    2025-09-08

    TechCrunch: Venture capital firm Insight Partners says it has completed notifying a number of individuals, including the firm’s limited partners, whose personal information was stolen by hackers in a January data breach

    Read more...

    Cybersecurity Firm Netskope Eyes up to $6.5 Billion Valuation in US IPO

    2025-09-08

    MSN/Reuters: Netskope is seeking a valuation of up to $6.5 billion in its initial public offering in the United States, the cloud-based cybersecurity firm said, signaling investors' appetite for new listings.

    Read more...

    Know Your Breach: TransUnion

    The Target: TransUnion, one of America’s big three credit bureaus.

    The Take: Names, Social Security numbers and dates of birth were among the stolen information, according to the Texas filing.

    The Vector: TransUnion said "the incident involved unauthorized access to limited personal information for a very small percentage of U.S. consumers," adding, "we are working with law enforcement and have engaged third party cyber security experts for an independent forensics review."

    This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    Q6 Cyber Receives Strategic Growth Investment from Charlesbank Technology Opportunities Fund

    2025-09-04

    Business Wire: Q6 Cyber (“Q6” or the “Company”), a leading threat intelligence platform focused on preventing fraud and financial crime, announced that it has received a strategic growth investment from Charlesbank Capital Partners (“Charlesbank”), a middle-market private investment firm.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates