Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    US Department of Defense Invites Hackers to Help Harden its Security Systems

    2022-07-06

    Tech Radar: The Chief Digital and Artificial Intelligence Office (CDAO), the Directorate for Digital Services and the Department of Defense Cyber Crime Center (DC3) jointly launched “Hack US”, a bounty-hunting program aimed at identifying high-severity flaws in government systems.

    Read more...

    Ignoring Cybersecurity Can Sour M&A Deals

    2022-07-05

    Forbes: When a private equity firm had acquired a midsized manufacturer late last year, little did they know that someone else had set on the same target as well. Just two months after it was purchased, a cybercriminal organization launched a crippling ransomware attack that locked up the manufacturer’s systems.

    Read more...

    Know Your Breach: Halfords

    The Target: Halfords, a U.K-based automobile maintenance service.

    The Take: Exposure of Personally Identifiable Information of current and past customers including: telephone number, car details, and physical address location.

    The Vector: The firm’s automated confirmation email which contained a URL link for order tracking with ID in the address. By incrementing the ID number, different orders belonging to other customers were able to be freely accessed and seen.

    The breach is critical reminder of the importance of credential management and authentication around points of access which expose customer data. The information stored in customer record scenarios is especially sensitive as the exposed details can greatly aid malicious actors in crafting highly targeted and effective spear-phishing campaigns. All points of access to sensitive data should be appropriately locked down, minimizing unnecessary and dangerous exposure of customer information.

    Read more...

    OpenSea Reports Email Data Breach

    2022-06-30

    CoinDesk: Watch out for phishing emails, says OpenSea, after staff at the world’s largest NFT marketplace discovered that an employee of Customer.io, a platform for managing email newsletters and campaigns, leaked the list of OpenSea customers’ emails to an outside party.

    Read more...

    N. Korean Hackers Suspected of stealing $100 Million Crypto From US Firm

    2022-06-30

    Korea Herald: North Korea’s state-sponsored Lazarus Group is believed to be behind the recent $100 million cryptocurrency theft from a US blockchain company, the latest in a spate of high-profile cyber heists from the Kim Jong-un regime, London-based blockchain analytics firm Elliptic said.

    Read more...

    Cybersecurity Startups, Once the VC Darling, Hammered by Layoffs

    2022-06-29

    Tech Crunch: On the face of it, the cybersecurity sector is doing just fine. Demand for cybersecurity products remains high as cyberattacks continue to blight both public and private-sector businesses, and investor enthusiasm for all things cyber-related remains strong.

    Read more...

    Norway Hit with Cyberattack, Temporarily Suspending Service

    2022-06-29

    The Hill: Norway’s public and private sector websites were temporarily down on Wednesday following a cyberattack that targeted the country’s national data network, forcing it to suspend online services for several hours.

    Read more...

    What Drives Private Equity Firms to Acquire Cybersecurity Companies

    2022-06-28

    Gulf Business: Digital transformation has moved to the top of corporate agendas in nearly every vertical in the region. Over the last couple of years, organisations have digitised at great speed to adapt to hybrid work and achieve greater efficiency and competitiveness.

    Read more...

    Ransomware is the Biggest Global Cyber Threat. And the Attacks are Still Evolving

    2022-06-28

    ZDNet: Ransomware is the biggest cybersecurity threat facing the world today, with the potential to significantly affect whole societies and economies – and the attacks are unrelenting, the head of the National Cyber Security Centre (NCSC) has warned. 

    Read more...

    Alternative Investment Institutions Increasing Investment in Digital Transformation with Embedded Security; Partnering with MSPs Critical to Success

    2022-06-27

    Business Wire: ECI, the leader in public cloud and cybersecurity managed services for the global financial services industry, recently commissioned IDC to write the white paper "Cybersecurity and Digital Transformation of Global Alternative Asset Institutions: A Critical Pairing” to understand the intersection of cybersecurity and digital transformation (DX) for global alternative investment institutions. 

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates