Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    'We're Losing Control of Our Data' As Breaches Reach an All-time High

    2022-01-25

    ZDNet: According to the 2021 Annual Data Breach Report published by the Identity Theft Resource Center (ITRC) on Monday, the overall number of data compromises (1,862) is up more than 68% compared to 2020  (1,108). Out of the 1,862 compromises, 1,600 of those were cyberattacks.

    Read more...

    Canada's Foreign Affairs Ministry Hacked, Some Services Down

    2022-01-25

    Bleeping Computer: The Canadian government department for foreign and consular relations, Global Affairs Canada was hit by a cyberattack last week. While critical services remain accessible, some online services remain unavailable, as government systems continue to recover from the attack.

    Read more...

    U.S. SEC Chair Gensler Maps Out Potential Overhaul to Agency's Cyber Rules

    2022-01-24

    O Canada: The U.S. securities regulator is considering extending cyber risk management rules to third-party service providers, and beefing up public company disclosures when they experience a breach, the head of the Securities and Exchange Commission (SEC) said.

    Read more...

    Know Your Breach: Transcredit

    The Target: Transcredit, a Florida based credit reporting company.

    The Take: Exposure of 822, 789 records of Personally Identifiable Information including: first and last names, emails, bank information, notes of payment history, internal User ID’s and passwords, full data schema detailing where and how data stored.

    The Vector: An unsecured, non-password protected database was found open and accessible by anyone with an internet connection.

    It is critical to employ robust practices of credential management, user authentication and validation around all points of access. An unprotected point of entry on a key piece of equipment like a server can lead to a breach with a cascading effect on data security. Furthermore, the access credentials which were exposed could lead to pivot attacks by breaching other IT systems belonging to the firm.

    Read more...

    Among the Most Mature for Cybersecurity, the Financial System Still Has A Long Way to Go

    2022-01-20

    Finextra: Based on data from eight years of working to assess cyber risk at hundreds of companies across many sectors in dozens of countries, it is clear that the financial sector is one of the best prepared for an attack, reflecting years of improvements and investment. But, although it only lagged behind the industrial, cyber and manufacturing sectors, the financial sector still has a lot of work to do, we found in our soon-to-published research.

    Read more...

    Crypto.com Shares Details on Security Breach: 483 Accounts Compromised

    2022-01-20

    Coin Telegraph: The Crypto.com security breach saga gets clarity with an official statement from the Singapore-based crypto exchange following a halt on withdrawals after detecting “suspicious activities” in user accounts.

    Read more...

    Indonesia's Central Bank Confirms Ransomware Attack, Conti Leaks Data

    2022-01-20

    Bleeping Computer: Bank Indonesia (BI), the central bank of the Republic of Indonesia, has confirmed today that a ransomware attack hit its networks last month. A Bank Indonesia spokesperson also told BleepingComputer the attack took place last month and that the bank's operations are not disrupted after the incident.

    Read more...

    Australia, UK to Jointly Target State-based Actors and Ransomware Groups

    2022-01-20

    IT News: Australia and the United Kingdom have signed a pact to crack down on state-based actors, ransomware groups and other "malign actors" that use cyber attacks to "undermine freedom and democracy".

    Read more...

    McAfee Enterprise and FireEye Are Now Called Trellix

    2022-01-18

    ZDNet: During 2021, Symphony Technology Group (STG) picked up McAfee Enterprise for $4 billion in March, and followed it up in June with a $1.2 billion purchase of FireEye. With the merger of the two cybersecurity firms completed in October, the companies have been given a new name.

    Read more...

    Ongoing Demand for Cybersecurity Will Boost Megatrend in 2022

    2022-01-18

    Funds Europe: The cybersecurity megatrend is set to continue in 2022 as demand for cybersecurity solutions remain “relatively constant” after some “major hacks” in 2021, according to Christopher Gannatti, global head of research at WisdomTree.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates