Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    AI Risk Is The New Cybersecurity: How To Start Asking Tough Questions

    2025-04-29

    Forbes: AI has evolved from a futuristic novelty into a workhorse with outsized returns on investment for modern businesses. Companies are already using it to power chatbots, analyze massive datasets and streamline critical operations.

    Read more...

    Cybersecurity Firms Raise Over $1.7 Billion Ahead of RSA Conference 2025

    2025-04-29

    SecurityWeek: According to SecurityWeek’s analysis, more than 30 cybersecurity firms collectively raised more than $1.7 billion in funding in the month of April, underscoring the sector’s robust growth and investor confidence in cyber defense technologies.

    Read more...

    DoJ Data Security Program Highlights Data-Sharing Challenges

    2025-04-28

    Dark Reading: In a sign of how pervasive data sharing has become, businesses may face challenges complying with a new government rule restricting data use outside the US.

    Read more...

    Cybersecurity Vendors Are Themselves Under Attack By Hackers, SentinelOne Says

    2025-04-28

    Cyberscoop: Cybersecurity companies don’t just defend their customers against cyberattacks — they also have to defend themselves, and a SentinelOne report examines some of the biggest threats they’re facing.

    Read more...

    Veza Banks $108 Million Series D at $808 Million Valuation

    2025-04-28

    SecurityWeek: The new financing includes equity stakes for existing backers Accel and GV (Google’s venture fund), True Ventures, Norwest, Ballistic Ventures, J.P. Morgan, and Blackstone Innovations Investments.

    Read more...

    Coinbase Fixes 2FA Log Error Making People Think They Were Hacked

    2025-04-27

    Bleeping Computer: Coinbase has fixed a confusing bug in its account activity logs that caused users to think their credentials were compromised.

    Read more...

    Know Your Breach: SK Telecom

    The Target: SK Telecom is the largest mobile network operator in South Korea, holding approximately 48.4% of the mobile phone service market in the country, corresponding to 34 million subscribers.

    The Take: USIM data is information stored on a Universal Subscriber Identity Module (USIM), which typically includes International Mobile Subscriber Identity (IMSI), Mobile Station ISDN Number (MSISDN), authentication keys, network usage data, and SMS or contacts if stored on the SIM. This data could be used for targeted surveillance, tracking, and SIM-swap attacks.

    The Vector: A malware infection allowed threat actors to access sensitive USIM-related information for customers.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    Cybersecurity Startup Chainguard Almost Triples Valuation To $3.5 Billion After Fundraise

    2025-04-24

    MSN/Reuters: Computer and cloud security startup Chainguard said its latest funding round valued it at $3.5 billion, almost tripling in less than a year, underscoring sustained investor appetite for robust digital infrastructure.

    Read more...

    FBI: Cybercrime Losses Surpassed $16.6 Billion in 2024

    2025-04-24

    SecurityWeek: The reported losses increased 33% compared to 2023, but the number of complaints received by the IC3 was slightly lower in 2024, at nearly 860,000 (compared to over 880,000 the year before). 

    Read more...

    AI Impact on Data Breach Outcomes Remains ‘Limited’: Verizon

    2025-04-23

    Cybersecurity Dive: Cybersecurity risks are a top concern for business leaders globally, especially as ongoing AI additions expand the attack surface and make techniques like phishing more accessible for novice bad actors. 

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates