The Target: Workiva, a leading cloud-based SaaS (Software as a Service) provider.
The Take: The threat actors exfiltrated a limited set of business contact information, including names, email addresses, phone numbers, and support ticket content.
The Vector: Workiva notified its customers that attackers who gained access to a third-party customer relationship management (CRM) system stole some of their data.
This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.
Forbes: For years, cybersecurity focused on perimeter defenses. Today, with hybrid work and the cloud being ubiquitous, the greatest threat isn't code; rather, it's the person holding the device.
Investment Executive: The Canadian Investment Regulatory Organization (CIRO) confirmed that personal information about industry firms and registered reps was compromised in a cyber breach reported last month.
CFO Dive: The importance of the FP&A function has captured greater attention as executive leaders globally continue to navigate a still-murky economic environment alongside the evolution of technologies such as AI.
Dark Reading: Threat detection vendor SentinelOne announced plans to acquire Observo AI, which will boost the company's existing AI SIEM and security data offerings and focus on autonomous security operations.
The Guardian: A former top cybersecurity executive at WhatsApp filed a lawsuit alleging that parent company Meta disregarded internal flaws in the app’s digital defenses and exposed billions of its users.
TechCrunch: Venture capital firm Insight Partners says it has completed notifying a number of individuals, including the firm’s limited partners, whose personal information was stolen by hackers in a January data breach.
MSN/Reuters: Netskope is seeking a valuation of up to $6.5 billion in its initial public offering in the United States, the cloud-based cybersecurity firm said, signaling investors' appetite for new listings.
The Target: TransUnion, one of America’s big three credit bureaus.
The Take: Names, Social Security numbers and dates of birth were among the stolen information, according to the Texas filing.
The Vector: TransUnion said "the incident involved unauthorized access to limited personal information for a very small percentage of U.S. consumers," adding, "we are working with law enforcement and have engaged third party cyber security experts for an independent forensics review."
This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.
Business Wire: Q6 Cyber (“Q6” or the “Company”), a leading threat intelligence platform focused on preventing fraud and financial crime, announced that it has received a strategic growth investment from Charlesbank Capital Partners (“Charlesbank”), a middle-market private investment firm.
Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →
Montreal
1080 Côte du Beaver Hall, Suite 904
Montreal, QC
Canada, H2Z 1S8
+1-450-465-8880
Halifax
168 Hobsons Lake Drive Suite 301
Beechville, NS
Canada, B3S 0G4
Tel: +1 902 429 8880
Manila
10th Floor, Two Ecom Center
Mall of Asia Complex
Harbor Dr, Pasay, 1300 Metro Manila
Philippines
Sydney
Level 15 Grosvenor Place
225 George Street, Sydney NSW 2000
Australia
Tel: +61 (2) 8823 3370
Abu Dhabi
Floor No. 15 Al Sarab Tower,
Adgm Square,
Al Maryah Island, Abu Dhabi, UAE
Tel: +971 (2) 694 8510
Copyright © 2021 Entreprise Castle Hall Alternatives, Inc. All Rights Reserved.
Terms of Service and Privacy Policy