Executive Risk & Board Advisory
PwC Won't Name the Vendor. Everest's Screenshot Does. It Says Staging.
PwC confirmed a vendor incident but won't name the vendor. Everest's screenshot points to a live Cornerstone staging tenant. What it means for PwC's clients.
Executive Risk & Board Advisory
One Zone Lost Power. Revolut Lost the Day. Google Closed Its Incident While Revolut Was Still Down.
One Google Cloud zone lost power and Revolut lost most of a day. Google closed its incident first. Both had written this risk down in advance.
Executive Risk & Board Advisory
One Stolen Key. 300+ Companies' Email. ConnectWise 'Cannot Determine' Whose.
If an MSP runs your Microsoft 365, its vendors can sign in to your tenant. One shared ConnectWise backup key proved it. Here is the vendor audit to run, and the logs to save before Oct 22.
Executive Risk & Board Advisory
Bank of America Brought In 1,000 Contractors to Fix What AI Found. Scotiabank Named Mythos in Its Filings in May. Bank of America Still Hasn't.
Bank of America added 1,000 contractors to fix flaws an AI found. Its filings never mention it. What the remediation gap means for smaller banks, boards and sponsors.
Executive Risk & Board Advisory
BAE Was Hacked and Every Bankruptcy Court Went Silent. The Banks Are the Ones Without Notice.
The BNC sends the notices that carry debtors' full Social Security numbers to creditors. BAE reported it Oct 9. Six days later the AO said cybersecurity. It has said nothing about data.
Executive Risk & Board Advisory
402,760 People. Nine Banks and Credit Unions. Mercadien Told Indiana in February and Fairwinds in August.
A bank auditor's breach reached at least nine banks and credit unions. Mercadien filed a count in February. Some clients were told 279 days after discovery.
Executive Risk & Board Advisory