Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Hacker Steals Data for More Than 100 Million Capital One Users, Then Brags About it and Gets Arrested

    2019-07-30

    BGR: Just as Equifax is settling an FTC case on the massive data breach from a couple of summers ago, Capital One had to come forward and admit that it suffered a massive breach of its own, affecting more than 100 million customers in America and Canada. The person responsible is already in custody, however, with the FBI saying she practically admitted everything online.

    Read more...

    HSCM-backed Insurtech Corvus Develops Silent Cyber Offering for Cargo

    2019-07-26

    Reinsurance News: Corvus Insurance, an AI-driven insurtech MGA backed by ILS and reinsurance investment manager Hudson Structured Capital Management (HSCM), has expanded its product line with an offering that focuses on silent cyber risks posed by cargo insurance policies.

    Read more...

    This Year, Phishing Causes Losses of $17,700 per minute And Ransomware Attacks Will Cost $22,184 Per Minute

    2019-07-25

    KnowBe4: Global losses to cybercrime total $1.5 trillion per year, which amounts to $2.9 million per minute, a new report by RiskIQ shows. Some of the largest companies are losing $25 each minute due to security breaches. Phishing campaigns accounts for losses of $17,700 per minute and ransomware attacks are expected to cost the world $22,184 per minute this year. 

    Read more...

    Cybersecurity Researchers Introduce New Model for Fighting Cybercrime in MIT Sloan Management Review Article

    2019-07-15

    Cision: As criminal innovation outpaces defensive efforts, cyberattacks are becoming more ubiquitous and sophisticated, and businesses, governments, and individuals are more vulnerable than ever. In a perspective-shifting new article, "Casting the Dark Web in a New Light" (MIT Sloan Management Review), cybersecurity researchers and scientists Keman HuangMichael Siegel, Keri Pearlson, and Stuart Madnick offer a new lens through which to consider cybercrime.

    Read more...

    Know Your Breach: Magecart Group

    The target: Over 17,000 websites using Amazon’s S3 public cloud storage.

    The take: Credit Card payment information and personal data.

    The attack vector: MageCart Group perpetrated the hacking campaign which methodically scanned and identified 17,000 unique, misconfigured Cloud Storage buckets. After locating an unsecured cloud storage server, they focused on JavaScript files which they then downloaded, added their card skimming script, and then reuploaded the now infected files.

    Read more...

    Australia's NAB says 13,000 Customers' Personal Data Breached

    2019-07-26

    Reuters: National Australia Bank Ltd (NAB.AX) said 13,000 customers are being contacted after a data breach where personal data was uploaded without permission to two data service companies.

    Read more...

    Equifax Will Pay up to $700 Million to Settle Investigations Over its Data Breach

    2019-07-26

    CNN: If you're among the 147 million Americans whose credit data was compromised in the 2017 Equifax data breach, read on. You may be eligible for compensation.

    Read more...

    FTC Fines Facebook $5B for Privacy Violations

    2019-07-24

    CBC: The fine is the largest the Federal Trade Commission has levied on a tech company, though it won't make much of a dent for a company that had nearly $56 billion US in revenue last year.

    Read more...

    NSA Creates New Cybersecurity Arm to Combat Foreign Threats

    2019-07-23

    CNN: The National Security Agency announced Tuesday it is creating a new Cybersecurity Directorate, which will "unify NSA's foreign intelligence and cyberdefense missions and is charged with preventing and eradicating threats to National Security Systems and the Defense Industrial Base."

    Read more...

    Public Service to Roll out 13 Measures to Protect Citizens' Personal Data Following Data Breaches

    2019-07-15

    The Straits Times: The entire public service will have to conform to a common framework to safeguard citizens' personal data, beginning with 13 new measures developed after a spate of breaches in the past year.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates