Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Know Your Breach: Boyd Gaming

    The Target: Boyd Gaming is a public US casino entertainment company with 28 gaming properties in ten states.

    The Take: The threat actors were able to steal data from the company's systems, which includes information about employees and individuals.

    The Vector: In a new 8-K form filed with the US Securities and Exchange Commission (SEC), the company said it experienced a cybersecurity “incident” in which unauthorized third parties accessed its IT system.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    Oneleet Raises $33 Million to Shake up the World of Security Compliance

    2025-10-02

    TechCrunch: Bryan Onel’s father was a locksmith. As for Onel, he described himself as the digital equivalent. Ethical hacking was Onel’s hobby growing up. He studied AI at university and then turned that hacking hobby into a profession. 

    Read more...

    Landmark US Cyber-Information-Sharing Program Expires, Bringing Uncertainty

    2025-10-01

    Cybersecurity Dive: A federal program that encourages companies to share cyber threat information expired, raising fears of significantly diminished cybersecurity collaboration between the government and the private sector.

    Read more...

    CrowdStrike Appoints Amjad Hussain as Chief Resilience Officer

    2025-09-30

    Investing.com: CrowdStrike, the $122.58 billion cybersecurity powerhouse that has delivered a remarkable 74% return to investors over the past year, announced the appointment of Amjad Hussain as chief resilience officer, a new position focused on advancing operational excellence and reliability across the cybersecurity company’s platform and business operations.

    Read more...

    SafeHill Emerges from Stealth With $2.6 Million Pre-Seed Funding

    2025-09-29

    SecurityWeek: The firm was founded by Mike Pena (CEO), Nicholas Gonzalez (chief revenue officer), Hector Monsegur (chief research officer), Ibrahim Karajic (VP of infrastructure), and Andy Sok (VP of product). 

    Read more...

    SonicWall Customers Warned Abou Brute Force Attacks Against Cloud Backup Service

    2025-09-23

    Cybersecurity Dive: Hackers are conducting brute force attacks against the MySonicWall.com portal in order to access the company’s cloud backup service for firewalls, SonicWall and federal authorities warned in advisories.

    Read more...

    Know Your Breach: Fairmont Federal Credit Union

    The Target: A not-for-profit financial organization, Fairmont Federal Credit Union offers services such as business and home mortgage loans, financial first aid, and personal checking. It operates nine regional branches in West Virginia.

    The Take: The hackers stole files containing names, dates of birth, Social Security numbers, driver’s license numbers, government ID numbers, financial information, medical and health insurance information, and other personal data. More alarming is that the stolen information contains full credit card/debit card details, including card numbers, security codes/PIN numbers, and expiration dates. IRS PIN numbers, tax ID numbers, routing numbers, and full access credentials were also compromised in the data breach.

    The Vector: The organization discovered the cybersecurity incident on January 23, 2024 and launched a prompt and thorough forensic investigation, concluding on August 17, 2025, that files stolen from its network contained personal information.

    This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

    Read more...

    VC Firm Insight Partners Says Thousands of Staff and Limited Partners had Personal Data Stolen in a Ransomware Attack

    2025-09-17

    TechCrunch: Venture capital firm Insight Partners has notified thousands of people, including the firm’s limited partners, that their personal information was stolen by hackers in an earlier data breach.

    Read more...

    Cybersecurity Firm Netskope Lifts IPO Price Range, Eyes $7.3 Billion Valuation

    2025-09-16

    Yahoo News: Cybersecurity firm Netskope is now aiming for a valuation of up to $7.26 billion in its U.S. initial public offering after raising the proposed price range, it said, underscoring investor appetite for high-growth tech stocks.

    Read more...

    CISA Audit Sparks Debate About Cybersecurity Pay Incentives

    2025-09-15

    Cybersecurity Dive: An audit that castigated the Cybersecurity and Infrastructure Security Agency’s cybersecurity pay incentives is worrying CISA staffers who say the report lacks context and could give the Trump administration an excuse to end a vital retention program.

    Read more...

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates