Stay Informed. Stay Ahead.
Cyber risk doesn’t stand still – and neither do we. Our resources give you the insight, analysis and real-world examples you need to raise your guard and keep pace with investors, regulators and the market. From in-depth insights and practical case studies to events and timely webinars, our resource hub is built to arm you with knowledge that strengthens resilience and supports smarter decisions.
Insights
-
Drawbridge Advisory Notice: Critical PHP Vulnerability “PHP2Shell” Discovered
Severity: CriticalDate: October 21, 2026 Security researchers have identified a critical vulnerability in PHP, a widely used web application programming language. Immediate Action to Take Customers using PHP for websites, applications, and/or APIs must immediately update their PHP version to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35. These PHP versions were released October 21st, and any…
-
Who is checking the people checking your cybersecurity?
For many hedge funds, outsourcing IT is an operational necessity. Managed service providers play an important role in maintaining infrastructure, supporting users and keeping technology running effectively. But there is an important distinction between managing your technology and independently assessing how secure it is. If the same provider is responsible for both, hedge fund managers…
-
Exit readiness: why cyber maturity should be built before the sale process
Private equity firms spend years preparing businesses for stronger exits. Financial performance is improved. Operations are professionalized. Management teams are strengthened. Technology is upgraded. Governance matures. Cybersecurity increasingly belongs on that list. The problem is that cyber readiness can still receive disproportionate attention late in the exit process when a buyer’s diligence team begins asking…
Case Studies
-
Managing Cyber Resiliency While Switching MSPs: A Case Study
Switching MSPs had the potential to destabilize their cyber program and introduce unwanted risks – this Hedge Fund worked closely with Drawbridge to make sure that didn’t happen. Using a Managed Service Provider (MSP) to oversee IT infrastructure is common amongst Alternative Investment Managers. We at Drawbridge understand that working closely with an MSP is…
-
Enhancing Private Equity Security: A Case Study on Mitigating Cybersecurity Risk
With an increasing number of cyber threats and attacks targeting sensitive financial data, it is imperative for alternative investment firms to implement robust cybersecurity measures. Increasing investor and regulatory demands on firms’ cybersecurity programs add further complication and urgency to this effort. This is especially true of private equity, where funds must not only focus…
Events & Webinars
-
Real Deals PE Live 2026: Cybersecurity that matters
Drawbridge was pleased to sponsor and attend Real Deals PE Live 2026, alongside leaders from across the private equity ecosystem, to explore a question that’s becoming hard to ignore: what does “cybersecurity that matters” look like in practice, and what is it really worth? The day underlined a shift we’re seeing more often in deals…
-
Cyber Wake-Up Calls from the PE Front Lines
At this year’s LPGP Connect CFO/COO Private Equity conference in London, cybersecurity wasn’t just a topic—it was the topic. While Chatham House rules apply (so we’ve omitted names), the messages were loud and clear: “There are two types of firms—those who’ve been hacked and know it, and those who’ve been hacked and don’t.” “60% of…
-
ON DEMAND: Managing AI in Alts: Practical Insights for Legal, Compliance, and Operations Teams
AI is no longer just a trend—it’s a business necessity. In this on-demand session, our expert panel explores how alternative investment firms can navigate the complexities of implementing AI within regulated environments. Moderated by Drawbridge CISO Simon Eyre, the conversation features insights from Marshall Terry (COO/CCO, Haidar Capital Management) and Louis Cordone (Head of Advisory,…
