Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Hackers Snagged $36 Million in Crypto in Breach of IRA Financial

    2022-02-15

    Wealth Management: A hack at IRA Financial Trust, which offers self-directed retirement accounts, resulted in the theft of $36 million in cryptocurrency, according to a person familiar with the investigation. 

    Read more...

    Cybersecurity M&A Volume Reaches $77.5 Billion in 2021

    2022-02-14

    ZDNet: In a report on 2021, the firm said 83 cybersecurity company capital raises surpassed $100 million. There were fourteen $1 billion mergers and acquisitions, including deals involving McAfee, Augh0, Mimecast, Thycotic, Proofpoint, and Avast. 

    Read more...

    Know Your Breach: Wormhole

    The Target: Wormhole, a cryptocurrency online trading platform.

    The Take: $322 million ETH currency.

    The Vector: A website vulnerability allowed the attacker to fool the exchange software to release far greater number of the ETH currency than was specified through a temporary token. By altering the conversion, the hacker was able to withdraw far more than the number the entered.

    This breach highlights the importance of locking input forms in a firm’s website, be it a name field, email field, or account field, anywhere the user is sending information to the database is a prime target for threat actors. Regular testing for software vulnerabilities is a key component of upholding robust cybersecurity posture.

    Read more...

    Hackers Nabbed $1.3 Billion in Ransom Over 2 Years, a New Report Says

    2022-02-10

    BNN Bloomberg: Criminals netted $1.3 billion in ransom payments from hacking victims in the past two years, reflecting a massive surge in cybercrime that has prompted a global effort to stop it, according to a new report from Chainalysis Inc. 

    Read more...

    Ransomware Targeted 14 of 16 U.S. Critical Infrastructure Sectors in 2021

    2022-02-10

    Security Week: Over the past several years, ransomware has become the most prevalent threat to organizations in private and public sectors alike, including financial services, food and agriculture, government, healthcare, and other critical infrastructure industries.

    Read more...

    SEC Proposes Cybersecurity Risk Management Rules and Amendments for Registered Investment Advisers and Funds

    2022-02-09

    SEC: The Securities and Exchange Commission today voted to propose rules related to cybersecurity risk management for registered investment advisers, and registered investment companies and business development companies (funds), as well as amendments to certain rules that govern investment adviser and fund disclosures.

    Read more...

    European, U.S. Regulators Tell Banks to Prepare for Russian Cyberattack Threat

    2022-02-08

    U.S. News: The European Central Bank is preparing banks for a possible Russian-sponsored cyber attack as tensions with Ukraine mount, two people with knowledge of the matter said, as the region braces for the financial fallout of any conflict.

    Read more...

    US Seizes $3.6 Billion Stolen in 2016 Bitfinex Cryptoexchange Hack

    2022-02-08

    Bleeping Computer: The US Department of Justice announced that law enforcement seized billions worth of cryptocurrency linked to the 2016 Bitfinex cryptocurrency exchange hack.

    Read more...

    UK Foreign Ministry Suffered Serious Cyber Attack Earlier This Year - Documents

    2022-02-08

    U.S. News: Britain's foreign ministry was the target of a serious cyber security incident earlier this year, according to tender documents posted on the government's website.

    Read more...

    UN Experts: North Korea Stealing Millions in Cyber Attacks

    2022-02-06

    U.S. News: North Korea is continuing to steal hundreds of millions of dollars from financial institutions and cryptocurrency firms and exchanges, illicit money that is an important source of funding for its nuclear and missile programs, U.N. experts said in a report quoting cyber specialists.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates