Menu
Sign In
    shutterstock_490960141-1

    Industry News: ESG5

      Bluebottle Hackers Used Signed Windows Driver in Attacks on Banks

      2023-01-05

      Bleeping Computer: A signed Windows driver has been used in attacks on banks in French-speaking countries, likely from a threat actor that stole more than $11 million from various banks.

      Read more...

      CaixaBank Forms International Consortium for Cybersecurity Research

      2023-01-05

      IBS Intelligence: Working with 11 international entities, CaixaBank has formed a European research consortium to explore ways to improve cybersecurity by leveraging artificial intelligence (AI) and big data. The project, AI4CYBER, is part of the Horizon Europe programme and is funded by the European Union.

      Read more...

      RFA Enhances Hedge and PE Fund Cyber Security Offering

      2023-01-04

      Hedge Week: RFA, a specialist IT provider to the alternative investment sector, has enhanced its cyber security offering for hedge and private equity funds with the addition of external surface attack management and dark web breach and exposure monitoring solutions.

      Read more...

      Twitter Whistleblower ‘Mudge’ Joins Cybersecurity Firm Rapid7

      2023-01-04

      BNN Bloomberg: Peiter Zatko, the prominent computer security expert who blew the whistle last year on alleged security problems at Twitter Inc., is joining the cybersecurity firm Rapid7 Inc., the company said.

      Read more...

      Rackspace Confirms Play Ransomware Was Behind Recent Cyberattack

      2023-01-04

      Bleeping Computer: Texas-based cloud computing provider Rackspace has confirmed that the Play ransomware operation was behind a recent cyberattack that took down the company's hosted Microsoft Exchange environments.

      Read more...

      Preventing Data Breaches: The Role of Threat Intelligence Platforms and Cybersecurity Strategies

      2023-01-03

      Forbes: Threat intelligence platforms are becoming increasingly important for both government agencies and businesses in today's digital landscape. The growing threat of ransomware attacks and other malicious activities from threat actors has highlighted the need for organizations to have a comprehensive and effective way to monitor, analyze and respond to potential threats.

      Read more...

      A Few Cybersecurity Stocks Soared in 2022, But Most Stumbled

      2023-01-03

      Bank Info Security: After two sensational years in the public markets during the height of the COVID-19 pandemic, 2022 was a rude awakening for the cybersecurity industry.

      Read more...

      Cornerstone Payment Systems

      The Target: Cornerstone Payment Systems

      The Take: Exposure of 9 million transaction records which exposed Personally Identifiable Information including: email addresses, names, physical addresses, phone numbers, types of credit cards and donation details including destination and dollar amount. 

      The Vector: A misconfigured data server was left open and unsecured, meaning anyone with an internet connection could have viewed and downloaded the data.

      This breach is critical reminder that authentication controls are an important piece in an overall robust cybersecurity posture. This data is perfect for constructing highly effecting spear-phishing campaigns. Multi-factor authentication and password length and complexity rules on server access are effective strategies to mitigate these kinds of breaches to protect a firm’s data.

      Read more...

      GodFather Android Malware Targets 400 Banks, Crypto Exchanges

      2022-12-21

      Bleeping Computer: An Android banking malware named 'Godfather' has been targeting users in 16 countries, attempting to steal account credentials for over 400 online banking sites and cryptocurrency exchanges.

      Read more...

      Top White House Cybersecurity Official Plans to Step Down

      2022-12-21

      BNN Bloomberg: The US’s first national cyber director, Chris Inglis, is planning to step down in the coming months, according to a person familiar with the matter.

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates