Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    'We're Sorry': 15M LifeLabs Customers May Have Had Data Breached in Cyberattack

    2019-12-18

    CTV: Hackers may have obtained the personal data of 15 million LifeLabs customers after a systems breach, and this includes addresses, passwords, birthdays, health card numbers and even lab results.

    Read more...

    ASIC says Cybersecurity Risk Management is Improving in Aussie Financial Market

    2019-12-18

    ZDNet: Awareness and management of cybersecurity risk is improving in Australia's financial market, said the Australian Securities and Investments Commission (ASIC), but there is still room for improvement across the entire sector.

    Read more...

    Private Equity Firms to Acquire LastPass Parent for $4.3 Billion

    2019-12-18

    Cyberscoop: LogMeIn, the Boston-based software company that owns password manager LastPass, said it will sell itself to two private equity companies as part of a cash deal valuing LogMeIn at roughly $4.3 billion.

    Read more...

    Vladimir Putin 'Still Uses Obsolete Windows XP' Despite Hacking Risk

    2019-12-17

    The Guardian: Russian agents have been accused of worldwide hacking operations, but someone at the Kremlin has apparently forgotten to inform Vladimir Putin of the importance of cyber-security.

    Read more...

    Know Your Breach: Venture Capital

    The target: A Chinese Venture Capital firm.

    The take: $1 million.

    The attack vector: The “man-in-the-middle” attack occurred when the Venture Capital firm transferred funds to an Israeli start-up company. The breach began with the threat actor creating two lookalike domains, both mirroring the VC firm and the Startup firm, but with an extra “s” at the end of the address. They then sent two emails, both posing as the VC firm’s CEO and as the start-up’s CEO, tricking both parties into sending sensitive banking information which the attacker then modified to hijack the money.

    This coordinated attack highlights the critical need for human vigilance and the implementation of robust controls. Scrupulous validation of transactions where assets – funds or sensitive information - are being transferred is central to effective protection.

    Read more...

    This Password-Stealing Hacking Campaign is Targeting Governments Around the World

    2019-12-12

    ZDNet: A mysterious new phishing campaign is targeting government departments and related business services around the world in cyber attacks which aim to steal the login credentials from the victims.

    Read more...

    Iranian Bank Cyber Attack Leaves 15 Million Customers' Details Online

    2019-12-12

    The Jerusalem Post: Just a few weeks since Iranian protesters torched hundreds of bank branches throughout the country, the Islamic republic’s financial authorities are dealing with another threat: A cyber attack caused the bank details of millions of Iranians to be published online, The New York Times reported.

    Read more...

    North Korean Hackers are Working with Eastern European Cybercriminals

    2019-12-11

    Reuters: North Korean state-backed hackers appear to be cooperating with Eastern European cybercriminals, a report here said, a finding that suggests digital gangsters and state-backed spies are finding common ground online.

    Read more...

    Desjardins Says Employee who Stole Personal Data Also Accessed Credit Card Info

    2019-12-10

    CTV: The Desjardins Group says the employee who stole the personal data of 4.2 million members of the financial co-operative also gained access to information for 1.8 million credit card holders.

    Read more...

    The Cybersecurity of Banking and Finance

    2019-12-10

    Business 2 Community: Up until the early eighties, transactions at financial institutions were handwritten, calculated long-hand, and done without the aid of a computer or calculator. Fast forward many years and not only can we make deposits and automate our bills to be paid online, but many employees of financial institutions are starting to work remotely as well.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates