Cybersecurity Leadership

Ransomware didn't just grow in the US in 2023, it evolved, with the frequency of ransomware claims jumping 64% year-over-year

A coalition of cyber insurance associations has pledged to back fresh government cybersecurity guidance designed to help victims avoid ever paying a ransom as part

While the financial burden of ransomware payments and data recovery is undeniable, the true cost of a cyberattack goes far beyond immediate expenses.

Those who understand “1s & 0s”need to explain to those who work in “dollars & cents” that the cyber-criminal world is evolving into a multi-tiered business structure that rivals their corporate structures

As is so often the case with simple solutions, it’s not as simple as it first appears

As the dark web evolves and cybercrime intensifies, organizations must adopt best practices to strengthen their defenses.

There's a good reason why ransomware gangs started exfiltrating victims' data instead of just encrypting it: those organizations pay more.

Understanding what defines our humanity, recognizing how our qualities can be perceived as vulnerabilities, and comprehending how our minds can be targeted provide the foundation for identifying and responding when we inevitably become the target.

Adversary alignment is more than just a strategy; it encourages CISOs and senior decision-makers to look at their security posture in an entirely new light.

Uneven maintenance practices and developers' willingness to download risky code have made open-source repositories a favored initial access tactic for attackers.

Historically, the financial services sector has been the most attacked by cybercriminals. Still, in 2021 there was a substantial shift, and a different industry ranked at the top for the first time – the manufacturing industry.

The legacy approach to cybersecurity, prioritizing perimeter protection and activity monitoring, needs to change, focusing on the real goals of cybercriminals.

The White House is considering a ban on ransomware payments, which could change the chief information and security officer (CISO) job. The ban would would elevate the cybersecurity conversation to the CEO, the CFO, and the board, and potentially end the practice of scapegoating CISOs when a breach happens.

As with any cybersecurity incident, preparation is key — ransomware is no exception. In fact, an ounce of prevention is worth a ton of cure. 

The quantum computing market boom has sparked concerns about the vulnerability of our current public-key cryptography algorithms, putting sensitive data integrity at risk.

Over the past decade, the ecosystem of Cybercrime-as-a-Service (CaaS) has really evolved and added several challenges to monitor this crime. One such challenge is that not one single threat actor executes one attack from beginning to end

Smaller businesses are in the crosshairs of cyber criminals and with attacks on the rise, now is not the time for misplaced confidence in your defenses.

Cyber hygiene is no longer a nice-to-have but necessary for organizations that want to survive the relentless barrage of cyberattacks being unleashed daily.

The number of ransomware victims paying ransom demands has dropped to a record low of 29% in the final quarter of 2023, according to ransomware negotiation firm Coveware.

Because of the criticality of remaining operational, industrial companies and utilities are far more likely to pay, attracting even more threat groups and a focus on OT systems.

The rise of highly skilled criminal gangs is a strong argument for cybersecurity and anti-fraud professionals to join forces

Generative artificial intelligence tools have unleashed a new era of terror to CISOs still battling longstanding shadow IT security risks.

The study sponsored by Zerto and conducted by Enterprise Strategy Group also reveals that nearly 60 percent of organizations reported an impact to regulated data, such as personally identifiable information, in successful ransomware attacks.

For those hoping to avoid the pay-or-not-to-pay ransomware dilemma, there are three things to focus on that can help CISOs

By reorienting systems defense around resilience, “we become more like attackers, we become nimble, empirical, curious,” Kelly Shortridge said at Black Hat USA 2023.