Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Hackers Nabbed $1.3 Billion in Ransom Over 2 Years, a New Report Says

    2022-02-10

    BNN Bloomberg: Criminals netted $1.3 billion in ransom payments from hacking victims in the past two years, reflecting a massive surge in cybercrime that has prompted a global effort to stop it, according to a new report from Chainalysis Inc. 

    Read more...

    Ransomware Targeted 14 of 16 U.S. Critical Infrastructure Sectors in 2021

    2022-02-10

    Security Week: Over the past several years, ransomware has become the most prevalent threat to organizations in private and public sectors alike, including financial services, food and agriculture, government, healthcare, and other critical infrastructure industries.

    Read more...

    SEC Proposes Cybersecurity Risk Management Rules and Amendments for Registered Investment Advisers and Funds

    2022-02-09

    SEC: The Securities and Exchange Commission today voted to propose rules related to cybersecurity risk management for registered investment advisers, and registered investment companies and business development companies (funds), as well as amendments to certain rules that govern investment adviser and fund disclosures.

    Read more...

    European, U.S. Regulators Tell Banks to Prepare for Russian Cyberattack Threat

    2022-02-08

    U.S. News: The European Central Bank is preparing banks for a possible Russian-sponsored cyber attack as tensions with Ukraine mount, two people with knowledge of the matter said, as the region braces for the financial fallout of any conflict.

    Read more...

    US Seizes $3.6 Billion Stolen in 2016 Bitfinex Cryptoexchange Hack

    2022-02-08

    Bleeping Computer: The US Department of Justice announced that law enforcement seized billions worth of cryptocurrency linked to the 2016 Bitfinex cryptocurrency exchange hack.

    Read more...

    UK Foreign Ministry Suffered Serious Cyber Attack Earlier This Year - Documents

    2022-02-08

    U.S. News: Britain's foreign ministry was the target of a serious cyber security incident earlier this year, according to tender documents posted on the government's website.

    Read more...

    UN Experts: North Korea Stealing Millions in Cyber Attacks

    2022-02-06

    U.S. News: North Korea is continuing to steal hundreds of millions of dollars from financial institutions and cryptocurrency firms and exchanges, illicit money that is an important source of funding for its nuclear and missile programs, U.N. experts said in a report quoting cyber specialists.

    Read more...

    Know Your Breach: Civicom

    The Target: A New York based tech company that provides audio, web conferencing, and market research services.

    The Take: Exposure of up to 100,000 records of Personally Identifiable Information including: thousands of hours of audio and video meetings, written transcripts between the firm and their clients, employee’s full names and photos.

    The Vector: An unsecured Amazon S3 storage server was left open with no credential management, meaning anyone with an internet connection could access the device and retrieve the data. 

    This breach highlights the critical nature of employing robust practices of credential management, user authentication and validation around all points of access. An unprotected point of entry on a key piece of equipment like a server can lead to a breach with a cascading effect on data security. The detailed personal information contained in the audio and video files expose users to highly targeted phishing attacks and fraud.

    Read more...

    Homeland Security Establishes the Cyber Safety Review Board to Learn the Mistakes from Past Cyber Incidents

    2022-02-03

    Tech Crunch: The U.S. Department of Homeland Security has assembled a review board that will be tasked with investigating major national cybersecurity incidents in an effort to “meaningfully improve” the nation’s cyber resilience.

    Read more...

    White House Cybersecurity Official in Europe Warning of Russian Hacks

    2022-02-02

    U.S. News: Russia could use cyberattacks as part of its efforts to destabilise and further invade Ukraine, a White House cyber official visiting her European counterparts said.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates