Menu
Sign In
    shutterstock_490960141-1

    Industry News: ESG5

      Trump Seeks Unprecedented $1.23 Billion Cut to Federal Cyber Budget

      2025-07-09

      CSO Online: Donald Trump's sprawling tax bill, which he signed on July 4, contained a few noteworthy cyber funding items, including $250 million for US Cyber Command to spend on “artificial intelligence lines of effort.”

      Read more...

      Hg Invests in Cybersecurity Compliance Provider A-LIGN

      2025-07-08

      Investing.com: HgCapital Trust plc announced it will invest approximately £48 million in A-LIGN, a provider of cyber compliance services, as part of a larger acquisition by Hg.

      Read more...

      72% of Portfolio Companies Hit by a Cyber Attack in the Past Three Years

      2025-07-07

      Private Equity Wire: Cyber security consulting firm S-RM’s latest study, based on a survey of 100 PE professionals across the UK, Europe, and the US, reveals that 72% of respondents have experienced a serious cyber incident across their portfolios in the past three years – highlighting cyber attacks as systemic risks that span entire investment ecosystems.

      Read more...

      SEC Seeks SolarWinds Settlement in Reversal for Agency Under New Leadership

      2025-07-07

      Cybersecurity Dive: The Securities and Exchange Commission has reached a settlement with SolarWinds and the company’s chief information security officer, Timothy Brown, to resolve charges stemming from the Russian-backed cyberattack on the company’s systems.

      Read more...

      Employee Gets $920 for Credentials Used in $140 Million Bank Heist

      2025-07-07

      Bleeping Computer: Hackers stole nearly $140 million from six banks in Brazil by using an employee's credentials from C&M, a company that offers financial connectivity solutions.

      Read more...

      Ransomware Attack Triggers Widespread Outage at Ingram Micro

      2025-07-07

      Dark Reading: Ingram Micro, one of the world's largest IT distributors, has confirmed it suffered a ransomware attack that sparked a worldwide outage of its services.

      Read more...

      Know Your Breach: Kelly Benefits

      The Target: Kelly Benefits is a provider of benefits consulting, enrollment technology, payroll administration, HRIS, compliance support, and carrier management.

      The Take: The data breach notice sent to impacted individuals informs recipients of the specific data types impacted by the breach, which vary per person. However, the general notice published on the site says that the compromised info may contain full names, Social Security number, tax ID number, date of birth, medical information, health insurance information, and financial account information.

      The Vector: The Maryland-based health and life insurance agency has issued an update on a security incident it suffered last year between December 12-17, when unauthorized actors breached its IT systems and stole files. On April 9, 2025, the company stated that the incident impacted 32,234 individuals. The figure was revised multiple times until the final tally shared with authorities in the U.S. counted 553,660 individuals.

      This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

      Read more...

      FBI Cyber Guidance To Lawmakers Falls Short, US Senator Says

      2025-07-02

      Cybersecurity Dive: As commercial spyware proliferates and hackers linked to U.S. adversaries step up their attempts to breach high-profile American targets, one U.S. senator says the FBI isn’t doing enough to help lawmakers protect themselves.

      Read more...

      India’s Max Financial Says Hacker Accessed Customer Data From Its Insurance Unit

      2025-07-02

      TechCrunch: Max Financial Services said its insurance subsidiary Axis Max Life Insurance received communication from an anonymous sender about unauthorized access to its customer data.

      Read more...

      Most Enterprises Can’t Secure AI, Accenture Says

      2025-07-01

      CIO Dive: CIOs are under pressure to move AI projects along faster and demonstrate the corresponding value, but a need for speed doesn’t always translate to sustainable momentum. 

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates