Category Archives: ransomware attacks

What CISOs Should Know About CIRCIA Incident Reporting

Posted on by

In March of 2022, a new federal law was adopted: the Cyber Incident Reporting Critical Infrastructure Act (CIRCIA). This new legislation focuses on reporting requirements related to cybersecurity incidents and ransomware payments. The key takeaway: covered entities in critical infrastructure will now be required to report incidents and payments within specified time frames to the […]

The post What CISOs Should Know About CIRCIA Incident Reporting appeared first on Security Intelligence.

Continue reading What CISOs Should Know About CIRCIA Incident Reporting→

Inside the Second White House Ransomware Summit

Posted on by

Ransomware is a growing, international threat. It’s also an insidious one.  The state of the art in ransomware is simple but effective. Well-organized criminal gangs hiding in safe-haven countries breach an organization, find, steal and encrypt important files. Then they present victims with the double incentive that, should they refuse to pay, their encrypted files […]

The post Inside the Second White House Ransomware Summit appeared first on Security Intelligence.

Continue reading Inside the Second White House Ransomware Summit→

Worms of Wisdom: How WannaCry Shapes Cybersecurity Today

Posted on by

WannaCry wasn’t a particularly complex or innovative ransomware attack. What made it unique, however, was its rapid spread. Using the EternalBlue exploit, malware could quickly move from device to device, leveraging a flaw in the Microsoft Windows Server Message Block (SMB) protocol.  As a result, when the WannaCry “ransomworm” hit networks in 2017, it expanded […]

The post Worms of Wisdom: How WannaCry Shapes Cybersecurity Today appeared first on Security Intelligence.

Continue reading Worms of Wisdom: How WannaCry Shapes Cybersecurity Today→

3 Ways EDR Can Stop Ransomware Attacks

Posted on by

Ransomware attacks are on the rise. While these activities are low-risk and high-reward for criminal groups, their consequences can devastate their target organizations. According to the 2022 Cost of a Data Breach report, the average cost of a ransomware attack is $4.54 million, without including the cost of the ransom itself. Ransomware breaches also took […]

The post 3 Ways EDR Can Stop Ransomware Attacks appeared first on Security Intelligence.

Continue reading 3 Ways EDR Can Stop Ransomware Attacks→

How the US Government is Fighting Back Against Ransomware

Posted on by

As ransomware-related payments surged toward $600 million in the first half of 2021, the U.S. government knew it needed to do more to fight back against cyber criminals. For many years, the Treasury’s Office of Foreign Assets Control (OFAC) had a Specially Designated Nationals and Blocked Persons List (SDN List for people or organizations acting […]

The post How the US Government is Fighting Back Against Ransomware appeared first on Security Intelligence.

Continue reading How the US Government is Fighting Back Against Ransomware→

Why Do Ransomware Gangs Keep Coming Back From the Dead?

Posted on by

Ransomware gangs are major players in the cybersecurity space, especially in recent years. ZDNet reported that ransomware gangs increased their payments by over 311% from 2019 to 2020, with totals for all groups exceeding $350 million in 2020. Ransoms continued rising in 2021. Unit 42, a threat research team at Palo Alto Networks, found that […]

The post Why Do Ransomware Gangs Keep Coming Back From the Dead? appeared first on Security Intelligence.

Continue reading Why Do Ransomware Gangs Keep Coming Back From the Dead?→

U.S. Cybersecurity Policy Has Changed Since the Colonial Pipeline Attack

Posted on by

More than a year ago, a ransomware attack made the news across the nation. The Colonial Pipeline Company announced on May 7, 2021, that the DarkSide Ransomware-as-a-Service group, based in eastern Europe, had hit it. The FBI has since confirmed DarkSide, which has since shut down, as the threat actors. What’s changed about U.S. cyber […]

The post U.S. Cybersecurity Policy Has Changed Since the Colonial Pipeline Attack appeared first on Security Intelligence.

Continue reading U.S. Cybersecurity Policy Has Changed Since the Colonial Pipeline Attack→

Hospital Ransomware Attack: Here’s What a Cybersecurity Success Story Sounds Like 

Posted on by

Major ransomware attacks are scary, but against hospitals, they are even worse. One notable attack in August 2021 forced Ohio’s Memorial Health System emergency room to shut down (patients were diverted to other hospitals). In all hospital attacks, the health, safety, privacy and lives of patients face risk. But this incident also shows that whether targets […]

The post Hospital Ransomware Attack: Here’s What a Cybersecurity Success Story Sounds Like  appeared first on Security Intelligence.

Continue reading Hospital Ransomware Attack: Here’s What a Cybersecurity Success Story Sounds Like →

5 Essential Steps for Every Ransomware Response Plan

Posted on by

This post was written with contributions from Andrew Gorecki, Camille Singleton and Charles DeBeck. May and June bring warm weather, backyard barbecues and, in recent years, an uptick in ransomware attacks. Why? “It’s possible workers are distracted because the sun is out and kids are out of school,” said Charles DeBeck, a former senior strategic […]

The post 5 Essential Steps for Every Ransomware Response Plan appeared first on Security Intelligence.

Continue reading 5 Essential Steps for Every Ransomware Response Plan→

The C-Suite Is Optimistic About Ransomware. Are They Right?

Posted on by

The majority of C-suite executives are confident in their organization’s protection against ransomware attacks. At least, that’s what a recent research report from ISC2 shows. In fact, just 15% express a lack of confidence. Does this confidence take into account the nearly 53% rise in double extortion ransomware attacks between January and February? Are the […]

The post The C-Suite Is Optimistic About Ransomware. Are They Right? appeared first on Security Intelligence.

Continue reading The C-Suite Is Optimistic About Ransomware. Are They Right?→