Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Securing Digital Finance: What SEC Proposed Cybersecurity Amendments Mean

    2023-04-25

    Spiceworks: Last month, the Securities and Exchange Commission proposed sweeping cybersecurity regulations aimed at the finance sector to minimize cybersecurity risk, define incident response and public disclosure protocols, and more.

    Read more...

    12 Critical Steps To Safeguard Your Company From Cyberattacks

    2023-04-24

    Forbes: As the founder of a nonprofit that focuses on cyber resilience, I often stress how important the dialogue is around assessing and analyzing a company's digital footprint, dark web exposure, leaked data and compromised credentials in real time. 

    Read more...

    State-Sponsored Cyberattacks are Likely to Increase in 2023 as Revenues are Predicted to Reach $344 Billion by 2030

    2023-04-24

    Yahoo Finance: According to Cybersecurity Ventures, global cybercrime will reach $10.5 trillion annually by 2025. Tackling this issue requires investment, and the report forecasts that cybersecurity revenues will reach $344 billion worldwide by 2030.

    Read more...

    Know Your Breach: Samsung

    The Target: Samsung, a South Korea based technology company.

    The Take: Exposure of internal company documents including: meeting notes and sensitive source code.

    The Vector: Samsung employees uploaded sensitive information to ChatGPT, an A.I chat service. ChatGPT takes information provided by users to better answer further questions in the future, and as such, the data uploaded will be provided to third-parties at any time without any controls or user authorization.  

    This breach is a unique insight into how rapidly the A.I development is proceeding. It is critical that employees be aware of what such services are, and the risks involved. External services like ChatGPT takes information inputted with absolutely no accountability or oversight. Any data sent in this way can be considered open to the public.

    Read more...

    March 2023 Broke Ransomware Attack Records With 459 Incidents

    2023-04-19

    Bleeping Computer: March 2023 was the most prolific month recorded by cybersecurity analysts in recent years, measuring 459 attacks, an increase of 91% from the previous month and 62% compared to March 2022.

    Read more...

    FSB Targets Common Language For Cyber Incident Reporting

    2023-04-19

    FundsTech: Global watchdog for the financial services sector, the Financial Stability Board (FSB), has called for greater convergence in the reporting of cyber incidents.

    Read more...

    UK Cyber Security Chief to Warn of China’s Rise as a Technology Superpower

    2023-04-18

    The Guardian: China poses an “epoch-defining” challenge to the west, the head of the National Cyber Security Centre (NCSC) is reportedly to warn. Lindy Cameron, who is the director of the GCHQ arm, will use a speech in Belfast this week to warn the UK and allies of the “dramatic rise of China as a technology superpower”.

    Read more...

    EU Proposes $1.2 Billion Plan to Counter Growing Cybersecurity Threats

    2023-04-18

    US News: The European Commission on Tuesday announced a 1.1-billion-euro ($1.2 billion) plan to counter growing cybersecurity threats, underscoring mounting concerns about a series of high-profile hacking incidents.

    Read more...

    UN Cybercrime Treaty Could Lead To Increased Surveillance Of ‘Crypto’ Industry Worldwide

    2023-04-18

    Coingeek: The current draft of the United Nations Cybercrime Treaty will require digital asset companies to implement comprehensive surveillance systems, turn over financial information to governments, and restrict access to unregulated decentralized finance (DeFi).

    Read more...

    SEC Reopens Comment Period for Investment Adviser and Investment Company Cybersecurity Proposals

    2023-04-17

    The National Law Review: On March 15, 2023, the SEC reopened the comment period on proposed rules and amendments related to cybersecurity risk management and cybersecurity-related disclosure for registered investment advisers, registered investment companies and business development companies that were proposed on February 9, 2022.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates