.png?width=200&height=78&name=CH%20Diligence%20(thicker%20line).png "CH Diligence (thicker line).png")
BNN Bloomberg: Suspected Russian hackers used a previously unknown piece of malware called “Raindrop” in the SolarWinds cyberattack, potentially infecting more computer systems than had been thought, according to digital security firm Symantec.
Engadget: Europe’s new privacy protection regime has led to a surge in fines for bad actors, according to research published today. Law firm DLA Piper says that, since January 28th, 2020, the EU has issued around €158.5 million (around $192 million) in financial penalties. That’s a 39-percent increase on the previous 20-month period Piper examined in its report, published this time last year. And as well as the increased fines, the number of breach notifications has shot up by 19 percent across the same 12-month period.
ZDNet: Hackers who stole information about COVID-19 vaccines in a cyberattack against the European Union's medical agency and then published it online also manipulated what they found in order to spread disinformation designed to undermine trust in vaccines.
Business Times: The Monetary Authority of Singapore (MAS) on Monday issued revised technology risk management guidelines amid "clear indication" of a worsening cyberthreat environment.
The target: United Nations Environmental Programme (UNEP)
The take: 100,000 records containing: employee personally identifiable information, project funding records, employment evaluation records, and most critically 7 sets of administrative credentials to other databases.
The attack vector: The leak originated from an unsecured Git directory and credential files (Git is one of the world’s most popular software version control systems). Within these exposed files were unencrypted, plain text administrative passwords for not only the repository which was accessed, but for other datasets and systems as well.
This breach demonstrates the importance of appropriate credential storage – privileged credentials should never be stored in plaintext scripts or configuration files replicated in git repositories. Data must always be held with security controls commensurate to the sensitivity of that data.
Tech Radar: The number of phishing sites created last year reached a record-high as cybercriminals looked to capitalize on the pandemic as well as the unprecedented number of employees working from home.
Chicago Tribune: Stefan Thomas, a German-born programmer living in San Francisco, has two guesses left to figure out a password that is worth, as of this week, about $220 million.
Finance Feeds: FXCM has been hacked three times in five years, this time it’s Israel office being the target. The first time was in 2015, when customer money was withdrawn by fraudsters, sending the shares to an all time low. This time, FXCM Israel says no customer accounts were compromised. We explain why cyber security is vital in our industry.
Yahoo Finance: The Defense Department has halted deployment on its classified networks of a $2 billion cybersecurity project intended to detect intrusions and prevent attacks because of poor test results, according to the Pentagon’s testing office.
CNBC: Sellers on the so-called dark web have been putting out an increasing number of advertisements for Covid-19 vaccines, asking for bitcoin as payment and not delivering the goods, according to cybersecurity firm Check Point.
Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →
Montreal
1080 Côte du Beaver Hall, Suite 904
Montreal, QC
Canada, H2Z 1S8
+1-450-465-8880
Halifax
168 Hobsons Lake Drive Suite 301
Beechville, NS
Canada, B3S 0G4
Tel: +1 902 429 8880
Manila
10th Floor, Two Ecom Center
Mall of Asia Complex
Harbor Dr, Pasay, 1300 Metro Manila
Philippines
Sydney
Level 15 Grosvenor Place
225 George Street, Sydney NSW 2000
Australia
Tel: +61 (2) 8823 3370
Abu Dhabi
Floor No. 15 Al Sarab Tower,
Adgm Square,
Al Maryah Island, Abu Dhabi, UAE
Tel: +971 (2) 694 8510
Copyright © 2021 Entreprise Castle Hall Alternatives, Inc. All Rights Reserved.
Terms of Service and Privacy Policy