Menu
Sign In
    shutterstock_490960141-1

    Industry News: ESG5

      Know Your Breach: Inotiv

      The Target: Inotiv is an Indiana-based contract research organization specializing in drug development, discovery, and safety assessment, as well as live-animal research modeling.

      The Take: The compromised information, it told the Texas AGO, includes names, addresses, Social Security numbers, driver’s license numbers, ID numbers, credit or debit card numbers, medical and health insurance information, and dates of birth.

      The Vector: When it disclosed the incident, Inotiv said that the attack had disrupted business operations after some of its networks and systems (including databases and internal applications) were taken down.

      This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

      Read more...

      Quantum Meets AI: The Next Cybersecurity Battleground

      2025-12-10

      CSO Online: In recent years, artificial intelligence (AI) has been spreading its tentacles across the global technological landscape, as evidenced by the increase in autonomous and automated technologies and their deployment across industries and sectors.

      Read more...

      OpenAI Warns New Models Pose 'High' Cybersecurity Risk

      2025-12-10

      Yahoo News/Reuters: OpenAI warned that its upcoming artificial intelligence models could ​pose a "high" cybersecurity risk, as their capabilities ‌advance rapidly. The AI models might either develop working zero-day remote ‌exploits against well-defended systems or assist with complex enterprise or industrial intrusion operations aimed at real-world effects, the ChatGPT maker said in a blog ⁠post.

      Read more...

      Firms’ AI Goals Prioritize Growth Over Job Cuts: EY

      2025-12-09

      CFO Dive: HP announced late last month that it expects to reduce its global headcount by between 4,000 and 6,000 employees by the end of fiscal year 2028 as part of an effort to drive “customer satisfaction, product innovation, and productivity through artificial intelligence adoption and enablement.”

      Read more...

      FINRA Flags GenAI, Cyber Fraud, and Sales Practices in 2026 Regulatory Agenda

      2025-12-09

      Investment News: FINRA has placed generative AI and cyber-enabled fraud high on its 2026 regulatory agenda, warning broker-dealers and RIAs that emerging technology and long‑standing compliance gaps are converging into higher risk for investors.

      Read more...

      Rising Third-Party Risks and Persistent Ransomware Threats Drive Increased Cybersecurity Investments in 2026: Marsh Report

      2025-12-09

      Business Wire: In a global cyber environment marked by major security lapses, cyberattacks, and technology outages, new research released by Marsh, the world’s leading insurance broker and risk advisor and a business of Marsh McLennan, reveals that organizations around the world are more confident in how they approach cyber risk management and are planning to invest even more in cybersecurity defenses in 2026.

      Read more...

      More Than $2 Billion in Payments From 4,000 Ransomware Incidents Reported to Treasury in Recent Years

      2025-12-08

      The Record: The Treasury Department’s Financial Crimes Enforcement Network (FinCEN) released a study last week covering 4,194 ransomware incidents that were reported through the Bank Secrecy Act over the three-year period. 

      Read more...

      Resemble AI Raises $13 Million for AI Threat Detection

      2025-12-08

      SecurityWeek: Founded in 2019, California-based Resemble AI has built an AI detection platform that helps organizations identify AI-generated deepfakes and prevent fraud and other types of attacks.

      Read more...

      Know Your Breach: Asahi

      The Target: Japanese beer giant Asahi.

      The Take: According to the company, 1,525,000 people who contacted its customer services had their names, addresses, phone numbers, and email addresses stolen. The hackers also exfiltrated the names, addresses, and phone numbers of 114,000 people Asahi had sent congratulatory or condolence messages to.

      The Vector: The company explained that the threat actors hacked network equipment and used it to compromise its data center network. “Ransomware was deployed simultaneously, encrypting data on multiple active servers and some PC devices connected to the network,” the company said.

      This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

      Read more...

      Blackstone CTO Says Data Leaks Keep Him Up At Night

      2025-12-03

      Yahoo News/Reuters: Blackstone's Chief Technology Officer ​is increasingly concerned about ‌data leaks and which platforms can help ‌manage safety, he told the Reuters NEXT conference in New York.

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates