Menu
Sign In
    shutterstock_490960141-1

    Industry News: ESG5

      Know Your Breach: Really Simple Systems

      The Target: Cloud customer relationship management (CRM) software provider Really Simple Systems.

      The Take: Personally identifiable information (PII), including medical records, identification documents, real estate contracts, credit reports, legal documents, tax documents, and non-disclosure agreements.

      The Vector: Cybersecurity Researcher, Jeremiah Fowler, discovered and promptly notified Really Simple Systems about a non-password-protected database that contained over 3 million records. The documents appeared to be associated with internal invoices, communications, and customer’s stored CRM files.

      While some immediate corrective actions were implemented, specific folders remained open for an extended duration before their access was limited. This incident highlights the pressing requirement for strong password encryption measures to protect customer data and thwart unauthorized access to sensitive information.

      Read more...

      CEOs Lack Confidence in Their Organizations’ Ability to Protect Against Cyberattacks

      2023-10-05

      Business Wire: Three-quarters (74%) of CEOs are concerned about their organizations’ ability to avert or minimize damage to the business from a cyberattack—despite the fact that 96% of CEOs said that cybersecurity is critical to organizational growth and stability, according to a new report from Accenture (NYSE: ACN).

      Read more...

      BlackBerry Plans IPO for Its Internet of Things Business

      2023-10-04

      BNN Bloomberg: BlackBerry Ltd., wrapping up a strategic review of its options, plans to hold an initial public offering for the company’s Internet of Things division, separating the business from its main cybersecurity operations. 

      Read more...

      Cybersecurity Breaches at UK Pensions Soar More Than 4,000% in 1 Year

      2023-10-03

      Chief Investment Officer: Cybersecurity breaches reported by British financial services companies more than tripled in the 12-month period ending June 30, with the pension sector reporting the biggest increase at 4,000%, according to research from international law firm Reynolds Porter Chamberlain.

      Read more...

      New SEC Cyber Rules to Push Publics and Their Third Parties to Strengthen Programs

      2023-10-03

      PR Newswire: Following the Securities and Exchange Commission's (SEC) adoption of new rules for cybersecurity risk management, strategy, governance, and incident disclosure by public companies, 64.8% of public company executives say their organizations will strengthen their cybersecurity programs, according to a new Deloitte poll.

      Read more...

      Strategic Cyber Ventures Backs Evo Security with a $1M Investment for Identity and Access Management Cybersecurity Solutions Tailored for MSPs

      2023-10-03

      PR Newswire: Strategic Cyber Ventures, a leading cybersecurity-focused venture capital firm, is excited to announce a $1 million dollar investment into Evo Security's latest funding round. Evo Security builds enterprise-grade identity and access management products tailored for IT Managed Service Providers (MSPs).

      Read more...

      TPG Completes Acquisition of Forcepoint Global Governments and Critical Infrastructure Cybersecurity Business from Francisco Partners

      2023-10-03

      Business Wire: Global security leader Forcepoint today announced the completed acquisition of the company’s Global Governments and Critical Infrastructure (G2CI) cybersecurity business by TPG, a global alternative asset management firm.

      Read more...

      How Private Equity Firms Can Protect ‘Treasure Trove’ From Digital Threats

      2023-10-03

      Chief Investment Officer: Cybersecurity risks are omnipresent. September’s hack of MGM Resorts International and Caesars Entertainment showed just how vulnerable companies can be, no matter how large or small.

      Read more...

      Know Your Breach: Rollbar

      The Target: Software bug-tracking company Rollbar

      The Take: Sensitive customer information, including usernames and email addresses, account names, and project information, such as environment names and service link configuration.

      The Vector: The security breach was discovered by Rollbar on September 6 when reviewing data warehouse logs showing that a service account was used to log into the cloud-based bug monitoring platform. Once inside Rollbar's systems, the threat actors searched the company's data for cloud credentials and Bitcoin wallets.

      This breach is a stark reminder of how important authentication controls are in an overall robust cybersecurity posture, and more critically, ensuring these controls are in place on all third-party vendors which have access to a firm’s data.

      Read more...

      Cisco Makes Largest Ever Acquisition, Buying Cybersecurity Company Splunk For $28 Billion In Cash

      2023-09-21

      CNBC: Cisco is acquiring cybersecurity software company Splunk for $157 per share in a cash deal worth about $28 billion, the company said in its largest acquisition ever.

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates