Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Know Your Breach: Santander

    The Target: Santander, the euro zone's second-biggest bank by market value.

    The Take: The bank said in a statement that the data was from customers in Spain, Chile and Uruguay, as well as all current and some former employees. No data on transactions, nor any credentials that would allow to perform transactions were stored in the database, it said.

    The Vector: The bank said it recently became aware of unauthorized access to one of its databases hosted by a third-party provider.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    SEC Charges Intercontinental Exchange and Nine Affiliates Including the New York Stock Exchange with Failing to Inform the Commission of a Cyber Intrusion

    2024-05-22

    U.S. Securities & Exchange Commission: The Securities and Exchange Commission announced that The Intercontinental Exchange, Inc. (ICE) agreed to pay a $10 million penalty to settle charges that it caused the failure of nine wholly-owned subsidiaries, including the New York Stock Exchange, to timely inform the SEC of a cyber intrusion as required by Regulation Systems Compliance and Integrity.

    Read more...

    Cybersecurity Plan for Federal Government Takes Aim at 'Inefficiencies, Blind Spots'

    2024-05-22

    Yahoo News: The federal government has unfurled a new cybersecurity strategy aimed at protecting its vast array of computer systems and information banks against a growing variety of threats.

    Read more...

    Wall Street Data Security Regulations Updated by US SEC

    2024-05-21

    Spiceworks: The US SEC has announced an update to its rules regarding how Wall Street organizations respond to the theft of customer data. The changes apply to data security rules adopted in 2000. 

    Read more...

    IT Security Leaders Are Failing to Close a Boardroom Credibility Gap

    2024-05-21

    PR Newswire: Trend Micro Incorporated, a global cybersecurity leader, today revealed that four-fifths (79%) of global cybersecurity leaders have felt boardroom pressure to downplay the severity of cyber risks facing their organisation.

    Read more...

    Palo Alto's Quarterly Billings Forecast Fails To Impress Investors, Shares Fall

    2024-05-21

    MSN: Palo Alto Networks' fourth-quarter billings forecast disappointed investors, a sign of tight corporate spending on cybersecurity solutions, sending its shares down more than 8% in aftermarket trading.

    Read more...

    ZeroRisk Cybersecurity Expands Global Presence With US Launch

    2024-05-20

    Dark Reading: ZeroRisk Cybersecurity is thrilled to announce the launch of its U.S. operations including the opening of its first U.S. office, marking a significant milestone in the company's global expansion strategy.

    Read more...

    CyberArk to Buy Thoma Bravo-Backed Venafi for $1.5 Billion

    2024-05-20

    Yahoo Finance: CyberArk Software Ltd. agreed to buy Venafi, a cybersecurity company backed by private equity firm Thoma Bravo, for $1.54 billion.

    Read more...

    Know Your Breach: Firstmac Limited

    The Target: Firstmac is a significant player in Australia's financial services industry, focusing primarily on mortgage lending, investment management, and securitization services.

    The Take: From the investigation that followed, assisted by external cybersecurity experts, Firstmac determined that the following information was compromised: First name, Residential address, Email address, Phone number, Date of birth, External bank account information, Driver’s license number.

    The Vector: Firstmac experienced a cyber incident where an unauthorised third party accessed a part of their IT system.

    This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

    Read more...

    Thoma Bravo's LogRhythm Merges With Exabeam In More Cybersecurity Consolidation

    2024-05-16

    Yahoo Finance: Private equity giant Thoma Bravo has announced that its security information and event management (SIEM) company LogRhythm will be merging with Exabeam, a rival cybersecurity company backed by the likes of Cisco and Lightspeed Venture Partners.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates