Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Generative Disinfo is Real — You’re Just Not the Target, Warns Deepfake Tracking Nonprofit

    2024-11-12

    TechCrunch: Many feared that the 2024 election would be affected, and perhaps decided, by AI-generated disinformation. While there was some to be found, it was far less than anticipated. But don’t let that fool you: The disinfo threat is real — you’re just not the target.

    Read more...

    Jones Walker Unveils 2024 Cybersecurity Survey Exposing Critical Gaps in Community and Mid-Size Banks

    2024-11-12

    PR Newswire: Jones Walker LLP today announced the release of its 2024 Community and Mid-Size Banks Cybersecurity Survey, the fourth in the law firm's series of industry-focused, biannual cybersecurity studies. 

    Read more...

    FBI, CISA, and NSA Reveal Most Exploited Vulnerabilities of 2023

    2024-11-12

    ​Bleeping Computer: The FBI, the NSA, and Five Eyes cybersecurity authorities have released a list of the top 15 routinely exploited vulnerabilities throughout last year, most of them first abused as zero-days.

    Read more...

    Federal Government Launching Research Institute for AI Safety

    2024-11-12

    Yahoo News: The federal government is opening a research centre that will study the dangers posed by artificial intelligence technology. Industry Minister François-Philippe Champagne announced the launch of the Canadian Artificial Intelligence Safety Institute in Montreal.

    Read more...

    Know Your Breach: Schneider Electric

    The Target: Schneider Electric is a French multinational company that manufactures energy and automation products ranging from household electrical components found in big box stores to enterprise-level industrial control and building automation products.

    The Take: The threat actors claim that the stolen data includes 75,000 unique email addresses and full names for Schneider Electric employees and customers.

    The Vector: The threat actor said they breached Schneider Electric's Jira server using exposed credentials. Once they gained access, they claimed to use a MiniOrange REST API to scrape 400k rows of user data.

    This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    CrowdStrike Expands Cybersecurity Reach In Europe And Launches AI Red Team Services

    2024-11-07

    Yahoo Finance: Crowdstrike Holdings Inc. disclosed an expanded distribution partnership with Ignition Technology to bring its Falcon cybersecurity platform to Ignition’s partner network in Ireland.

    Read more...

    Cybersecurity Company Qualys Explores Potential Sale

    2024-11-06

    BNN Bloomberg: Qualys Inc. is exploring options including a potential sale after receiving takeover interest, people familiar with the matter said, as consolidation is expected to accelerate in the cybersecurity sector. The stock rose as much as 33%.

    Read more...

    Germany Drafts Law to Protect Researchers Who Find Security Flaws

    2024-11-06

    Bleeping Computer: The Federal Ministry of Justice in Germany has drafted a law to provide legal protection to security researchers who discover and responsibly report security vulnerabilities to vendors.

    Read more...

    Man Arrested in Canada Allegedly Linked to Snowflake Data Thefts

    2024-11-05

    CSO Online: Canadian federal and provincial authorities haven’t released the court documents relating to the arrest, so CSO isn’t naming the accused.

    Read more...

    AI Increases Fraud Risk, Fintechs Say

    2024-11-05

    Cybersecurity Dive: Fraud is on the rise. Americans lost $10.2 billion to fraud in 2023, a 14% increase in reported losses compared to 2022, according to the Federal Trade Commission. And fraudsters are aided in no small part by advanced technology, according to the international police organization Interpol.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates