Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Know Your Breach: GlobalLogic

    The Target: GlobalLogic, a provider of digital engineering services part of the Hitachi group.

    The Take: The data stolen in the breach includes personal information collected by GlobalLogic's human resources and, depending on the affected individual, it includes name, address, phone number, and emergency contact (name and phone number). The attackers also exfiltrated the email addresses, dates of birth, nationalities, countries of birth, passport information, national identifiers or tax identifiers (e.g., Social Security Numbers), salary information, and bank account details of impacted employees.

    The Vector: In a breach notification letter filed with the office of Maine's Attorney General, the company states that the attackers exploited an Oracle EBS zero-day vulnerability to steal personal information belonging to 10,471 employees.

    This breach is critical reminder that zero-day exploits do happen, and furthermore that patching software in a timely, effective manner is a key component of ensuring customer data is protected. Ensuring third-party vendors are deploying patches and fixes in accordance with a firm’s cybersecurity policy is an important step in an overall robust security posture.

    Read more...

    The Parallels Between Zero Trust Security And High-Performance Culture

    2025-11-12

    Forbes: Zero trust (ZT) models transformed cybersecurity by upending how organizations think about and guard against threats. But can this strategy for safeguarding data, people and systems translate into successful techniques for building high-performance cultures?

    Read more...

    Cybersecurity Firm Deepwatch Lays Off Dozens, Citing Move To ‘Accelerate’ AI Investment

    2025-11-12

    TechCrunch: Deepwatch, a cybersecurity firm that makes an AI-powered detection and response platform, laid off dozens of employees, citing AI as one of the reasons.

    Read more...

    Google Asks US Court to Shut Down Lighthouse Phishing-as-a-Service Operation

    2025-11-12

    CSO Online: Google is asking to a US court for help in dismantling the infrastructure behind the Lighthouse phishing-as-a-service operation, the latest effort by a technology company to use the legal system to put a dent in cybercrime.

    Read more...

    British Government Unveils Long-Awaited Landmark Cybersecurity Bill

    2025-11-12

    The Record: After more than four years of development and multiple delays, the British government introduced its landmark Cyber Security and Resilience Bill to Parliament, threatening large fines for companies that fail to protect themselves from cyberattacks.

    Read more...

    Israeli Cybersecurity Firm Tenzai Secures $75 Million Seed Round

    2025-11-12

    Tech in Asia: Tenzai, an Israeli cybersecurity startup founded in May 2025 by former Guardicore executives, has raised US$75 million in a seed round led by Battery Ventures, Greylock Partners, and Lux Capital.

    Read more...

    Senate Moves to Restore Lapsed Cybersecurity Laws After Shutdown

    2025-11-11

    CSO Online: Two cybersecurity laws that lapsed during the government shutdown moved closer to restoration after the Senate voted 60-40 to advance legislation extending them through January 2026.

    Read more...

    Bank of America to Invest $4 Billion in Digital Transformation

    2025-11-10

    Banking Exchange: Bank of America has pledged to accelerate its investment in AI, automation, and digital banking as part of its strategy to fuel growth across all business lines.

    Read more...

    Know Your Breach: Capita

    The Target: Capita is a major UK-based outsourcing and professional services company that provides consulting, digital, and software services to local councils, the NHS, the Ministry of Defense, and organizations in the banking, utilities, and telecommunications sectors.

    The Take: Hackers had accessed 4% of Capita’s internal IT infrastructure, and exfiltrated private files hosted on the breached systems.

    The Vector: The company announced that it had been targeted by hackers who attempted access to its internal Microsoft 365 environment, forcing some systems offline as part of its response.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    Cybersecurity Leader Armis Closes $435 Million Round at $6.1 Billion Valuation

    2025-11-05

    Business Wire: Armis, the cyber exposure management and security company, announced a pre-IPO funding round of $435 million, bringing the company’s valuation to $6.1 billion. 

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates