Info Security Magazine
2 years, 7 months ago
CISA Launches Project to Assess Effectiveness of Security Controls
Relaunched working group aims to tackle scourge of ransomware
Security news aggregator
Latest coverage for Ransomware
Ransomware encrypts or steals data to disrupt operations and extort victims, making backups, access controls, and incident response essential.
16
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Ransomware is malware used to deny access to systems or data, usually by encrypting files and demanding payment for decryption. Many operations also steal sensitive information and threaten to publish it, so an attack can create both an availability crisis and a privacy or disclosure risk. Initial access may involve phishing, stolen credentials, exposed remote services, or exploitation of unpatched vulnerabilities; attackers may then move through the network before deploying the payload.
Defenses should combine vulnerability management, phishing-resistant authentication where practical, endpoint and network monitoring, and backups that are isolated from routine administrator access and regularly tested for recovery. Organizations should also limit privileges and segment critical systems to reduce the blast radius. An incident requires rapid containment, preservation of forensic evidence, restoration from known-good backups, and assessment of notification, legal, and regulatory obligations. Threat intelligence can help identify relevant criminal infrastructure or tactics, but it does not replace sound access control, patching, detection, and recovery practices.
Showing 16 most recent headlines
Filtered view
The Register
2 years, 7 months ago
BlackCat claims it is behind Fidelity National Financial ransomware shakedown
One of US's largest underwriters forced to shut down a number of key systems Fortune 500 insurance biz Fidelity National Financial (FNF) has confirmed that it has fallen victim to a "cybersecurity incident."…
Bank Info Security
2 years, 7 months ago
Breach Roundup: Filipinos Under Fire From 'Mustang Panda'
Also, Kansas Courts Say Ongoing Outage Traces to Attack; Confidential Data StolenThis week's data breach roundup: Chinese-affiliated hackers target the Philippine government; Kansas Courts confirm data theft, officials warn of exploited flaws in Sophos, Oracle and Microsoft software; AutoZone discloses a Clop ransomware attack; Optus' CEO resigns after network outage.
The Register
2 years, 7 months ago
Attack on direct debit provider London & Zurich leaves customers with 6-figure backlogs
Customers complain of poor comms during huge outage that’s sparked payroll fears A ransomware attack and resulting outages at direct debit collection company London & Zurich has forced at least one customer to take out a short-term loan as six-figure backlogs continue to cause cash flow mayhem.…
Info Security Magazine
2 years, 7 months ago
British Library: Ransomware Attack Led to Data Breach
Reports suggest employee data is up for sale
The Register
2 years, 7 months ago
Stop social engineering at the IT help desk
How Secure Service Desk thwarts social engineering attacks and secures user verification Sponsored Post Ransomware can hit any organization at any time, and hackers are proving adept at social engineering techniques to gain access to sensitive data in any way they can.…
Bank Info Security
2 years, 7 months ago
Australia Unveils AU$587M Strategy to Defeat Cybercrime
Australia Envisions Cybersecurity Leadership in the Pacific With New StrategyThe Australian government says it will mandate ransomware reporting by businesses, boost law enforcement capacity and fund startups with innovative cybersecurity solutions under a strategy unveiled Monday. "We cannot continue as we have," said Cyber Security and Home Affairs Minister Clare O'Neil.
Dark Reading
2 years, 7 months ago
Scattered Spider Hops Nimbly From Cloud to On-Prem in Complex Attack
The actor behind the high-profile MGM incident jumps across segmentations in under an hour, in a ransomware attack spanning Okta, Citrix, Azure, SharePoint, and more.
The Hacker News
2 years, 7 months ago
LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In
Multiple threat actors, including LockBit ransomware affiliates, are actively exploiting a recently disclosed critical security flaw in Citrix NetScaler application delivery control (ADC) and Gateway appliances to obtain initial access to target environments
Dark Reading
2 years, 7 months ago
Citrix Bleed Bug Inflicts Mounting Wounds, CISA Warns
Patch or isolate now: Organizations in every sector run the risk of hemorrhaging data as opportunistic attacks from LockBit ransomware and others grow.
The Hacker News
2 years, 7 months ago
Play Ransomware Goes Commercial - Now Offered as a Service to Cybercriminals
The ransomware strain known as Play is now being offered to other threat actors "as a service," new evidence unearthed by Adlumin has revealed
Bleeping Computer
2 years, 7 months ago
VX-Underground malware collective framed by Phobos ransomware
A new Phobos ransomware variant frames the popular VX-Underground malware-sharing collective, indicating the group is behind attacks using the encryptor. [...]
Bank Info Security
2 years, 7 months ago
Known MOVEit Attack Victim Count Reaches 2,618 Organizations
77 Million Individuals' Information Exposed, as More Victims Continue to Be CountedTrackers of the tally of individuals affected by the Clop ransomware group's mass hack attack on MOVEit servers added another 4.5 million patients' data to the ever-ascending total. The incident currently affects more than 2,600 organizations and 77 million individuals.
Bleeping Computer
2 years, 7 months ago
Rhysida ransomware gang claims British Library cyberattack
The Rhysida ransomware gang has claimed responsibility for a cyberattack on the British Library in October, which has caused a major ongoing IT outage. [...]
The Register
2 years, 7 months ago
Rhysida ransomware gang: We attacked the British Library
Crims post passport scans and internal forms up for 'auction' to prove it The Rhysida ransomware group says it's behind the highly disruptive October cyberattack on the British Library, leaking a snippet of stolen data in the process.…
The Register
2 years, 7 months ago
Your password hygiene remains atrocious, says NordPass
ALSO: FCC cracks down on SIM-swap scams, old ZeroLogon targeted by new ransomware, and critical vulnerabilities Infosec in brief It's that time of year again – NordPass has released its annual list of the most common passwords. And while it seems some of you took last year's chiding to heart, most of you arguably swapped bad for worse.…