Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    EU’s Privacy Watchdogs Urged to Use Full Force of New Powers

    2020-06-23

    BNN Bloomberg: European Union data protection watchdogs, armed with the right to levy massive fines for two years, still haven’t made full use of their powers, according to an EU report.

    Read more...

    Cybersecurity ETFs Gain But Diverge

    2020-06-23

    Nasdaq: Cybersecurity has been a hot theme this year, suddenly taking new importance in an economy that’s had workers everywhere working from home, logging into systems outside of offices, many for the first time.

    Read more...

    Good Cyber Security Starts in The Boardroom but Only Half of Business Leaders are Ready for Cyber Security Threats

    2020-06-23

    Cision: The UK's vulnerability to cyber security attacks has again come under the spotlight, with only half of business leaders ready and prepared to counter digital threats they're currently facing – or are likely to confront in the future. This is despite the fact that over half (52%) link strong cyber security capabilities to increased profitability.

    Read more...

    One in Six Firms Pay Ransomware Ransoms to Hackers

    2020-06-23

    TECHERATI: One in six firms met the demands of hackers last year by paying out ransoms, according to the “chilling” findings of a report on cyber crime. The annual Hiscox Cyber Readiness Report revealed that 6 percent of the 5,569 firms polled – and one in six of those attacked – had surrendered by paying a ransom following a cyber attack.

    Read more...

    Know Your Breach: Postbank

    The target: Postbank, the banking division of South Africa’s Post Office.

    The take: $3.2 million USD

    The attack vector: Rogue employees printed the bank’s ‘master key’, a 36 digit code which allows its users to decrypt the bank’s operations and modify security protocols, on a piece of paper from an old data center. Using this credential they were able to access customer accounts and execute more than 25,000 fraudulent transactions, stealing $3.2 million. In addition to the cash, the master key also gave the attackers access to ATM pins, home banking access codes, customer data and credit card information which could then be used for sophisticated phishing attacks.

    This breach highlights the importance of privileged credential management and the cascading negative effects that can happen when a high level protocol is compromised.

    Read more...

    In a Race Against Time, Japan Builds Up its Cyber Forensics

    2020-06-18

    Nikkei Asian Review: It’s every CEO’s worst nightmare: Invisible invaders rummaging through internal documents, collecting private emails, salaries and even trade secrets.

    Read more...

    Google Removes 106 Chrome Extensions for Collecting Sensitive User Data

    2020-06-18

    ZDNet: The 106 extensions are part of a batch of 111 Chrome extensions that have been identified as malicious in a report published today by cyber-security firm Awake Security.

    Read more...

    Covid-19 Crisis Flags Up Operational Challenges and Cybersecurity Risks, Panelists Say

    2020-06-17

    HedgeWeek: Panel sessions on evolving operational challenges and cybersecurity heard how the current remote working environment is shining a light on operational risk challenges, with the ongoing coronavirus pandemic described as “the largest continuity test ever” for emerging hedge fund managers.

    Read more...

    What Happens When Private Equity Firms Fall for Tech Companies

    2020-06-17

    Institutional Investor: Private equity firms are increasingly targeting publicly traded technology companies for buyouts, including Thomas Bravo’s deal in early March to buy cybersecurity firm Sophos. As a result, some tech firms may be staying public for a far shorter period of time, according to a new report from data provider PitchBook. 

    Read more...

    Business Email Compromise: What Can Be Learned from the Norfund Attack

    2020-06-17

    The Register: Falling for an impostor’s email is easier than you might think. The recent attack which saw Norway’s state-owned investment fund, Norfund, lose an eye-watering USD 10 million (approx. 100 million NOK) was down to a simple but devastatingly effective tactic used by cybercriminals: a spoofed email address.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates