Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Cynomi Cinches $37 Million for its AI-Based 'Virtual CISO' for SMB Cybersecurity

    2025-04-23

    Yahoo Finance: Small and medium businesses are the latest targets for cybersecurity attacks, with one in three small businesses experiencing a data breach last year.

    Read more...

    Banks Rethink Cybersecurity Amid Rise of Credential-Based Compromise

    2025-04-22

    PYMNTS: The image of a hacker furiously typing strings of code to brute-force their way into a corporate server is becoming outdated. Today, the most dangerous cyber intrusions can come not from forced entries, but from front doors to organizational perimeters being quietly opened with valid credentials.

    Read more...

    Tariff Turmoil May Have Killed The Tech M&A Market’s Comeback

    2025-04-21

    TechCrunch: The tech market doesn’t need to be soaring up and to the right to foster healthy M&A activity. Deals can get done even in down markets. But can M&A thrive in an uncertain market? That’s a harder question.

    Read more...

    Can Cybersecurity Weather the Current Economic Chaos?

    2025-04-21

    Dark Reading: As the Trump administration continues to pursue a chaotic tariff policy — announcing steep tariffs on the United States' major trading partners, only to pause most of the import taxes for 90 days — economists are increasingly predicting a recession in the next 12 months.

    Read more...

    Know Your Breach: Hertz

    The Target: ​Car rental giant Hertz

    The Take: The stolen data varies by region, but largely includes Hertz customer names, dates of birth, contact information, driver’s licenses, payment card information, and workers’ compensation claims. Hertz said a smaller number of customers had their Social Security numbers taken in the breach, along with other government-issued identification numbers.

    The Vector: The company attributed the breach to a vendor, software maker Cleo, which last year was at the center of a mass-hacking campaign by a prolific Russia-linked ransomware gang. Hertz is one of dozens of companies that used Cleo’s software at the time of their data thefts. The Clop ransomware gang claimed last year to have exploited a zero-day vulnerability in Cleo’s widely used enterprise file transfer products, which allow companies to share large sets of sensitive data over the internet. By breaching these systems, the hackers stole reams of data from Cleo’s corporate customers.

    This breach is critical reminder that zero-day exploits do happen, and furthermore that patching software in a timely, effective manner is a key component of ensuring customer data is protected. Ensuring third-party vendors are deploying patches and fixes in accordance with a firm’s cybersecurity policy is an important step in an overall robust security posture.

    Read more...

    CISOs No Closer To Containing Shadow AI’s Skyrocketing Data Risks

    2025-04-17

    CSO Online: Generative AI’s many benefits come with the drawback of data security risks, primarily through shadow AI use and the leakage of sensitive information.

    Read more...

    Bill Extends Cyber Threat Info-Sharing Between Public, Private Sector

    2025-04-16

    Cybersecurity Dive: Two federal lawmakers today introduced a bipartisan bill that preserves key regulation that facilitates the sharing of cyber-threat data between private companies and the federal government.

    Read more...

    CISA Extends Funding to Ensure 'No Lapse in Critical CVE Services'

    2025-04-16

    Bleeping Computer: CISA says the U.S. government has extended MITRE's funding to ensure no continuity issues with the critical Common Vulnerabilities and Exposures (CVE) program.

    Read more...

    Ex-CISA Chief Chris Krebs Leaving SentinelOne Following Trump Pressure

    2025-04-16

    Investing.com: Christopher Krebs, whom President Donald Trump fired as head of the Cybersecurity and Infrastructure Security Agency in 2020, said he is leaving cybersecurity company SentinelOne following pressure from the White House.

    Read more...

    Cybersecurity Funding Ticks Up Despite Slow Deal Flow

    2025-04-15

    Crunchbase: After successive quarters of decline, venture funding to cybersecurity startups nudged up in the first quarter — and could see even more investment after having the largest acquisition of a private, venture-backed company ever.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates