.jpg?width=200&height=78&name=CH%20Diligence%20(thicker%20line).jpg "CH Diligence (thicker line)")
Tech Crunch: The U.S. and China chip battle continues to escalate. In China, the country’s cybersecurity watchdog has initiated a probe into U.S. memory chip maker Micron Technology, according to a statement from the Cyberspace Administration of China (CAC) released.
Financial Post: On March 2, US President Joe Biden’s administration proposed some of the most aggressive measures to fight cyberattacks to date. They would require businesses to beef up their defenses and hold software makers more accountable for security breaches.
Bleeping Computer: Some of the victims affected by the 3CX supply chain attack have also had their systems backdoored with Gopuram malware, with the threat actors specifically targeting cryptocurrency companies with this additional malicious payload.
Cision: Trend Micro Incorporated, a global cybersecurity leader, today published new research detailing how criminal groups start behaving like corporations as they grow bigger, but that this comes with its own attendant costs and challenges.
Liberty Mutual: Cyber is a complex and constantly evolving challenge for any company but couple cyber risk with private equity activity and the risks can be compounded exponentially.
The Target: Toyota Italy, one of the world’s largest vehicle manufacturers.
The Take: Exposure of Personally Identifiable Information belonging to Toyota’s clients including: phone numbers and email addresses.
The Vector: Unsecured and exposed marketing tools, namely APIs for Salesforce and Mapbox, were able to be accessed publicly on Toyota Italy’s website. This allowed attackers to access employee credentials to the third-party platforms and exfiltrate client data.
This breach is a stark reminder of how important authentication controls are in an overall robust cybersecurity posture. In particular, the information exposed here is perfect for crafting highly believable phishing campaigns as it would allow push notifications. Access monitoring and testing for every public-facing webpage is a key strategy to mitigate these kinds of breaches to protect a firm’s customer base.
Fox Business: While tech firms are firing, the cybersecurity segment is hiring. Technology firms have shed more than 300,000 jobs in the past two years with more on the way. Electronic Arts announced a restructuring plan that includes a 6% workforce reduction to prioritize "growth opportunities."
DarkReading: Financial activity in the cybersecurity industry declined sharply in the first quarter of 2023 compared to the same period in 2022, and analysts tracking the sector expect little improvement until at least the second half of the year.
McKinsey & Company: Private equity (PE) investments in software—500-plus deals of more than $100 billion in value last year—have outperformed other investments made by the asset class for upward of a decade.
GlobeNewswire: In 2021, according to Eurostat, the expanding penetration of internet users, 95% of young people (aged 16-29 years) in the European region, and the adoption of cloud-based services and Advanced Persistent Threats (APTs) presented an extensive chance for cyber vendors in the European cyber security market size.
Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →
Montréal
1080 Côte du Beaver Hall, Suite 904
Montréal, QC
Canada, H2Z 1S8
+1-450-465-8880
Abu Dhabi
Floor No. 15 Al Sarab Tower,
Adgm Square,
Al Maryah Island, Abu Dhabi, UAE
Tel: +971 (2) 694 8510
Copyright © 2021 Entreprise Castle Hall Alternatives, Inc. All Rights Reserved.
Terms of Service and Privacy Policy