Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Know Your Breach: Workday

    The Target: Workday, the cloud-based software company providing human resources systems

    The Take: The threat actor was able to obtain what Workday described as “commonly available business contact information, like names, email addresses, and phone numbers,” which it speculated could be exploited “potentially to further their social engineering scams.”

    The Vector: In its statement, the company said it “recently identified that Workday had been targeted and threat actors were able to access some information from our third-party CRM platform,” although it did not identify which platform it uses.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    APRA Warns of Increased Cyber Attacks as Geopolitical Tensions Grow

    2025-08-21

    Cyber Daily: Following Prime Minister Anthony Albanese’s move to recognise the Palestinian state, and Israel’s response, hacktivists groups have already begun to make their mark on government agencies and education institutions.

    Read more...

    Thoma Bravo Eyes $5 Billion Deal for Armis in One of Year’s Biggest PE Tech Buys

    2025-08-20

    Private Equity Insights: Insight Partners, which acquired Armis in 2020, is expected to generate $2bn–$3bn from the deal, according to Globes. Other key investors include Georgian, G Squared, One Equity Partners, CapitalG, Brookfield, General Catalyst, and Alkeon Capital.

    Read more...

    Drug Development Company Inotiv Reports Ransomware Attack To SEC

    2025-08-19

    The Record: An Indiana-based drug research company said a recent ransomware attack has disrupted its business operations and forced a shutdown of critical systems. 

    Read more...

    Millions Allegedly Affected in Allianz Insurance Breach

    2025-08-19

    Dark Reading: The Allianz Life data breach, which the company confirmed in July, led to hackers allegedly stealing the personal data of around 1.1 million customers. The insurance giant has 1.4 million customers, and its parent company, Allianz, has more than 125 million.

    Read more...

    Execs Use Responsible AI To Drive Growth, Prevent Risks

    2025-08-19

    Cybersecurity Dive: Enterprises rushed into AI deployment plans while the hype haze was thick. Now that the risks are clearer, business leaders are looking for ways to remediate. 

    Read more...

    Securities Watchdog CIRO Shut Down Some Systems After Cybersecurity Threat Found

    2025-08-19

    MSN/Canadian Press: The Canadian Investment Regulatory Organization says it shut down some of its systems as a precaution after identifying a cybersecurity threat on Aug. 11. It says a preliminary investigation indicates that some personal information of member firms and their registered employees was affected.

    Read more...

    25% Of Security Leaders Replaced After Ransomware Attack

    2025-08-18

    CSO Online: CISOs have a one in four chance of their job surviving a successful ransomware attack, according to a recent Sophos report. The report’s findings are a wakeup call for CISOs regardless of whether they are found at fault or have any meaningful authority to block such attacks, industry experts say.

    Read more...

    Know Your Breach: Connex Credit Union

    The Target: Connex, one of Connecticut's largest credit unions.

    The Take: The non-profit has yet to find evidence that the attackers gained access to the affected members' funds or accounts, but has discovered that they stole a combination of personal and financial data, including names, account numbers, debit card information, Social Security numbers, and government IDs.

    The Vector: The investigation revealed that certain files may have been accessed or downloaded without authorization between June 2 and 3, 2025.

    This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    Francisco Partners Weighs Multi-Billion Dollar Sale of Cybersecurity Firm BeyondTrust

    2025-08-14

    Private Equity Wire: Francisco Partners is exploring the sale of BeyondTrust Software, the privileged access management (PAM) specialist it has backed since 2018, in a potential multi-billion dollar transaction, according to a report by Bloomberg citing unnamed people familiar with the matter.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates