Menu
Sign In
    shutterstock_490960141-1

    Industry News: ESG5

      Know Your Breach: Askul

      The Target: Japanese e-commerce and logistics company Askul, which specializes in B2B sales of office and professional supplies.

      The Take: Roughly 590,000 customer records related to business services and 132,000 records related to consumer services have been compromised. In addition, the hackers stole thousands of records related to business partners, employees, and Askul executives.

      The Vector: The company’s investigation showed that the cybercriminals gained access to its network using compromised credentials. After obtaining initial access to Askul systems, the attackers conducted reconnaissance, harvested credentials, moved laterally, and disabled security systems.

      This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

      Read more...

      Italy’s Embedded Cybersecurity Firm Exein Adds €100 Million in Funding as Global Expansion continues

      2025-12-18

      EU Startups: Exein, a Rome-based innovator in embedded cybersecurity for connected devices, today announced €100 million in new funding in order to accelerate product development and international expansion – bringing its total raised in 2025 to €170 million.

      Read more...

      Blackstone Reportedly Leads $400 Million for Cybersecurity Firm Cyera

      2025-12-17

      Tech in Asia: Blackstone is leading a US$400 million investment in Cyera, valuing the Israeli data-security startup at US$9 billion, according to a Wall Street Journal report citing unnamed sources.

      Read more...

      The Devil of Proposed SEC AI Disclosure Rule is in the Details

      2025-12-17

      CSO Online: A US Securities and Exchange Commission committee has recommended a new rule that would mandate companies to analyze and report all AI efforts — including decisions to not use AI for some purposes. 

      Read more...

      Adaptive Security Raises $81 Million Series B to Stop AI-Powered Cyber Threats

      2025-12-16

      PR Newswire: Adaptive Security announced it has raised an $81 million Series B funding round led by Bain Capital Ventures, with participation from NVentures (NVIDIA's venture capital arm), OpenAI Startup Fund, Andreessen Horowitz (a16z), Abstract Ventures, Capital One Ventures, and Citi Ventures. 

      Read more...

      Cybersecurity Concerns are Paramount Among Executives in Almost All Roles, Regions and Industries

      2025-12-15

      Yahoo Finance: In addition to topping the overall list of risk factors, cybersecurity was also the top concern across organizations of all sizes, the top concern of executives in most roles and the top concern for organizations in almost every geographic region.

      Read more...

      700Credit Data Breach Impacts 5.8 Million Individuals

      2025-12-15

      SecurityWeek: 700Credit is the largest provider of credit checks, identity verification, fraud detection, and compliance services for automotive, marine, power sports, and RV dealers in North America. It serves roughly 18,000 dealerships.

      Read more...

      ServiceNow in Talks to Acquire Cybersecurity Startup Armis in Potential $7 Billion Deal, Bloomberg Reports

      2025-12-14

      CNBC: The deal, which could reach $7 billion in value, would be ServiceNow’s largest acquisition, the outlet said, citing people familiar with the situation who asked not to be identified because the talks are private. 

      Read more...

      Know Your Breach: Inotiv

      The Target: Inotiv is an Indiana-based contract research organization specializing in drug development, discovery, and safety assessment, as well as live-animal research modeling.

      The Take: The compromised information, it told the Texas AGO, includes names, addresses, Social Security numbers, driver’s license numbers, ID numbers, credit or debit card numbers, medical and health insurance information, and dates of birth.

      The Vector: When it disclosed the incident, Inotiv said that the attack had disrupted business operations after some of its networks and systems (including databases and internal applications) were taken down.

      This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

      Read more...

      Quantum Meets AI: The Next Cybersecurity Battleground

      2025-12-10

      CSO Online: In recent years, artificial intelligence (AI) has been spreading its tentacles across the global technological landscape, as evidenced by the increase in autonomous and automated technologies and their deployment across industries and sectors.

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates