Menu
Sign In
    shutterstock_490960141-1

    Industry News: ESG5

      Know Your Breach: Workday

      The Target: Workday, the cloud-based software company providing human resources systems

      The Take: The threat actor was able to obtain what Workday described as “commonly available business contact information, like names, email addresses, and phone numbers,” which it speculated could be exploited “potentially to further their social engineering scams.”

      The Vector: In its statement, the company said it “recently identified that Workday had been targeted and threat actors were able to access some information from our third-party CRM platform,” although it did not identify which platform it uses.

      This breach highlights the extreme importance of timely software updates for known software vulnerabilities, not only in systems directly under a firm’s control, but in third-party systems the firm relies upon as well. The longer a firm, or its vendors, hold out on deploying the most up-to-date software for their systems, the greater the chance an attacker will exploit the issue.

      Read more...

      Thoma Bravo Eyes $5 Billion Deal for Armis in One of Year’s Biggest PE Tech Buys

      2025-08-20

      Private Equity Insights: Insight Partners, which acquired Armis in 2020, is expected to generate $2bn–$3bn from the deal, according to Globes. Other key investors include Georgian, G Squared, One Equity Partners, CapitalG, Brookfield, General Catalyst, and Alkeon Capital.

      Read more...

      Drug Development Company Inotiv Reports Ransomware Attack To SEC

      2025-08-19

      The Record: An Indiana-based drug research company said a recent ransomware attack has disrupted its business operations and forced a shutdown of critical systems. 

      Read more...

      Execs Use Responsible AI To Drive Growth, Prevent Risks

      2025-08-19

      Cybersecurity Dive: Enterprises rushed into AI deployment plans while the hype haze was thick. Now that the risks are clearer, business leaders are looking for ways to remediate. 

      Read more...

      Securities Watchdog CIRO Shut Down Some Systems After Cybersecurity Threat Found

      2025-08-19

      MSN/Canadian Press: The Canadian Investment Regulatory Organization says it shut down some of its systems as a precaution after identifying a cybersecurity threat on Aug. 11. It says a preliminary investigation indicates that some personal information of member firms and their registered employees was affected.

      Read more...

      Know Your Breach: Connex Credit Union

      The Target: Connex, one of Connecticut's largest credit unions.

      The Take: The non-profit has yet to find evidence that the attackers gained access to the affected members' funds or accounts, but has discovered that they stole a combination of personal and financial data, including names, account numbers, debit card information, Social Security numbers, and government IDs.

      The Vector: The investigation revealed that certain files may have been accessed or downloaded without authorization between June 2 and 3, 2025.

      This breach is a stark reminder of how strong authentication controls are in an overall robust cybersecurity posture, and that good password hygiene plays a pivotal role in protection.

      Read more...

      Francisco Partners Weighs Multi-Billion Dollar Sale of Cybersecurity Firm BeyondTrust

      2025-08-14

      Private Equity Wire: Francisco Partners is exploring the sale of BeyondTrust Software, the privileged access management (PAM) specialist it has backed since 2018, in a potential multi-billion dollar transaction, according to a report by Bloomberg citing unnamed people familiar with the matter.

      Read more...

      Hackers Leak Allianz Life Data Stolen in Salesforce Attacks

      2025-08-12

      Bleeping Computer: Hackers have released stolen data belonging to US insurance giant Allianz Life, exposing 2.8 million records with sensitive information on business partners and customers in ongoing Salesforce data theft attacks.

      Read more...

      BlackSuit Ransomware Takes an Infrastructure Hit From Law Enforcement

      2025-08-11

      Dark Reading: US law enforcement once again demonstrated its commitment to going on the offense against cybercrime with an operation against the BlackSuit ransomware gang that resulted in the takedown of four servers and nine domains, as well as the seizure of just over $1 million in cryptocurrency. 

      Read more...

      AI Agents Are Being Drafted Into the Cyber Defense Forces of Corporations

      2025-08-10

      CNBC: The rise of generative AI and large language models has drastically shifted the cybersecurity landscape, empowering attackers with easy-to-use tools that can create realistic video and voice deepfakes, personalized phishing campaigns, and malware and malicious code. 

      Read more...

      About Castle Hall Diligence

      Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

      Subscribe to Cyber Updates