Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Small Cybersecurity Teams Face Greater Risk from Attacks than Larger Enterprises

    2022-07-13

    Dark Reading: Cynet, the world’s first provider of an autonomous, end-to-end, fully automated extended detection and response (XDR) platform, today announced the results of its second annual “CISO Survey of Small Cyber Security Teams." 

    Read more...

    Hackers Posing as Merkel Target ECB's Lagarde - German Source

    2022-07-12

    U.S. News: Unidentified hackers attempted to trick European Central Bank President Christine Lagarde into letting them open a messaging app account in her name by posing as former German chancellor Angela Merkel, a German source said.

    Read more...

    UK Warns Lawyers Not to Advise Ransomware Payments

    2022-07-12

    Security Week: In a letter addressed to UK lawyers dated July 7, 2022, the UK’s National Cyber Security Center (NCSC) and the Information Commissioner’s Office (ICO), have reiterated – with teeth – the official stance on not paying a ransom.

    Read more...

    Brazen Crooks Are Now Posing as Cybersecurity Companies to Trick You into Installing Malware

    2022-07-11

    ZDNet: Brazen cyber criminals are now posing as cybersecurity companies in phishing messages that claim the recipient has been hit by a cyberattack and that they should urgently respond in order to protect their network.

    Read more...

    Know Your Breach: Kaiser Permanente

    The Target: Kaiser Permanente, a U.S based health plan and health-care provider.

    The Take: Personally Identifiable health Information on 69,000 individuals, including: first and last name, medical record number, dates of service, laboratory test results. 

    The Vector: A threat actor gained access to compromised employee email account and acting with all the same permissions as the breached credentials, downloaded and stole the information.

    This breach is a stark reminder of the importance of robust employee credential authentication and password hygiene. Performing regular monitoring on account behaviour is critical to ensure access is kept within the firm. Additionally, locking down appropriate permissions, admin access, and ensuring users only need the tools they need to do their jobs, and no more, will reduce the risk of these attacks.

    Read more...

    Cybersecurity M&A Roundup: 45 Deals Announced in June 2022

    2022-07-07

    Security Week: A SecurityWeek study showed that more than 430 cybersecurity mergers and acquisitions were announced in 2021. SecurityWeek will soon also publish an M&A analysis for the first half of 2022.

    Read more...

    China’s Cabinet Urges Greater Cybersecurity After Mass Data Leak

    2022-07-07

    BNN Bloomberg: China’s cabinet stressed the need to bolster information security, following a huge leak of personal data that could be the largest cyber-attack in the country’s history. 

    Read more...

    Hotel Giant Marriott Confirms Yet Another Data Breach

    2022-07-06

    Tech Crunch: Hotel group Marriott International has confirmed another data breach, with hackers claiming to have stolen 20 gigabytes of sensitive data, including guests’ credit card information.

    Read more...

    Greenwich-based Information Technology Company is Acquired

    2022-07-06

    The Middletown Press: Officials with a Foxborough, Mass.-based cybersecurity firm announced their company has acquired Edge Technology Group of Greenwich, which is an information technology company serving financial firms.

    Read more...

    The Cyber-Asset Management Playbook for Supply Chain Modernization

    2022-07-06

    Dark Reading: The recent upheaval in the supply chain is unprecedented, thanks to ongoing disruptions tied to the pandemic, financial and trade sanctions stemming from Russia's war in Ukraine, cyberattacks targeting the supply chain, and other factors.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates