Menu
Sign In
    shutterstock_490960141-1

    Industry News: ESG5

      Capital One to Pay $80 Million Fine After Data Breach

      2020-08-06

      Yahoo News: Capital One Financial Corp <COF.N> will pay an $80 million penalty to a U.S. bank regulator after the bank suffered a massive data breach one year ago.

      Read more...

      Cybercriminals Are Developing and Boosting Their Attacks

      2020-08-06

      Help Net Security: An INTERPOL assessment of the impact of COVID-19 on cybercrime has shown a significant target shift from individuals and small businesses to major corporations, governments and critical infrastructure.

      Read more...

      ‘Year of the Phish’? Socially-Engineered Attacks Populate Crypto in 2020

      2020-08-06

      Finance Magnates: When it comes to cryptocurrency-related crime, every year seems to have its own particular ‘flavor’. 2018 was the year of massive exchange hacks (remember Coincheck?); 2019 was seasoned with an air of massive ponzi schemes (PlusToken, OneCoin) with a few scandals thrown in the mix (QuadrigaCX, anyone?)

      Read more...

      Investigators to Get New Dark Web Powers

      20202-08-05

      Yahoo News: Federal police and organised crime investigators will be empowered to kick down the digital door of criminals hiding in the dark web under a $1.7 billion government cyber security strategy.

      Read more...

      AT&T Survey: 70% of Large Businesses Think Remote Working Makes Them More Vulnerable to Cyberattacks

      2020-08-04

      Fierce Telecom: AT&T's survey found that 70% of the large business felt remote working made them more vulnerable to cyberattacks. AT&T's study of 800 cybersecurity professionals across the U.K., France and Germany found that more than half (55%) now believe remote working is making their companies more vulnerable to cyberattacks.

      Read more...

      Record Cybersecurity Attacks Strike ‘Particularly Vulnerable’ Hedge Funds

      2020-08-04

      Financial News: Cybersecurity companies are warning that they’ve seen an exponential rise in attempted “phishing”, banking-email compromises, and illegal cryptocurrency mining. And it’s hedge funds that may be most vulnerable.

      Read more...

      Hackers Stole €1.2m Worth of Cryptocurrency from 2gether

      2020-08-03

      Security Affairs: Hackers stole roughly €1.183 million worth of cryptocurrency from investment accounts of 2gether, 26.79% of overall funds stored by the accounts. The attack took place on July 31 at 6.00 pm CEST, when hackers compromised the company servers.

      Read more...

      Know Your Breach: Dave.com

      The target: Dave.com, a digital banking app

      The take: 7.5 million records of customer information including: real names, phone numbers, birth days and home addresses.

      The attack vector: The breach at Dave.com was due to another breach at one of Dave.com’s third party service providers, Waydev (an analytics platform used by engineers), which in turn exposed Dave.com’s user data. The attackers used a blind SQL injection (an insertion of malicious code) to gain access to Waydev’s database and stole authorization tokens which let them penetrate Waydev’s systems and pivot to steal access to data from other firms, such as Dave.com.

      This highlights the cascading negative effects cybersecurity incidents can have on companies which rely on third-party vendors for operation. Holding third-party vendors to an organization’s security requirements is a very challenging prospect. Vigilant monitoring and applying advanced analytics to watch for malicious activities are some of the proactive strategies used to pinpoint suspicious activity before it turns into a breach.

      Read more...

      The Impact of the COVID-19 Pandemic on Cybersecurity

      2020-07-30

      Businesswire: The COVID-19 pandemic has presented a once-in-a-lifetime opportunity for hackers and online scammers, and cybersecurity professionals saw a 63 percent increase in cyber-attacks related to the pandemic, according to a survey released by the Information Systems Security Association (ISSA) and independent industry analyst firm Enterprise Strategy Group (ESG). As the global impact of COVID-19 manifested itself in the middle of March, ESG and ISSA conducted an in-depth survey in April 2020 as a point in time assessment of challenges posed by the pandemic.

      Read more...

      Crypto Wallet Maker Ledger Loses 1M Email Addresses in Data Theft

      2020-07-29

      Coindesk: In a note to clients, CEO Pascal Gauthier said the French hardware wallet provider fell victim to a large-scale data breach from an unauthorized third party. The hacker, whose identity remains unknown, gained access to Ledger's e-commerce and marketing database.

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates