Welcome to ISMG's Ransomware Resource Center!

Ransomware has rapidly become one of the world's most prevalent types of cybercrime. The lure for criminals is easy to see: Using highly automated and easily distributed crypto-locking malware to forcibly encrypt systems, attackers can demand bitcoin ransoms in exchange for decryption keys. Use this Ransomware Resource Center for the latest details on emerging ransomware variants, threat intelligence on attackers, plus best practices for detection, response and remediation.

Moody's: Hackers Aim for Big Payouts, Supply Chain Attacks

David Perera • December 9, 2024

Improved cybersecurity will result in ransomware hackers targeting larger organizations to wring out high dollar extortion payments and intensified focus on supply chain attacks, predicts Moody's Ratings. The share of ransomware victims willing to meet criminal demands for money is at record lows.

Fraud Management & Cybercrime

Police Doxing of Criminals Raising Ransomware-Attack Stakes

Latest

Cloud Security

Tenable's Amit Yoran Takes Medical Leave; Interim CEOs Named

Michael Novinson • December 5, 2024

Longtime Tenable CEO Amit Yoran is temporarily stepping aside for cancer treatment and recovery, with top deputies Stephen Vintz and Mark Thurmond stepping up to lead the organization. Yoran was diagnosed in March with a treatable form of cancer, but recently learned he needs additional treatment.

Fraud Management & Cybercrime

Cyber Incidents Hit Three NHS Hospitals in UK

Marianne Kolbasuk McGee • December 2, 2024

At least three National Health Service hospitals in U.K. are responding to recent cyber incidents, including a children's hospital and a heart and chest specialty hospital - both located in Liverpool - that share IT systems. INC Ransom claims to have stolen data from the two hospitals.

Breach Notification

Victims Must Disclose Ransom Payments Under Australian Law

Jayant Chakravarti • November 26, 2024

The Australian government's proposed cybersecurity legislation passed both houses of the Parliament on Monday, formalizing the government's strategy to boost ransomware payment reporting, mandate basic cybersecurity standards for connected devices and enhance critical infrastructure security.

Security Operations

N-able Strengthens Cybersecurity via $266M Adlumin Purchase

Michael Novinson • November 20, 2024

With Adlumin’s cloud-native XDR and MDR services, N-able consolidates its position as a leader in IT management. Buying the Washington D.C.-based security operations vendor for up to $266 million drives value through AI-powered threat detection and compliance solutions tailored for MSPs.

Data Loss Prevention (DLP)

Data Protection Startup Cyera Raises $300M on $3B Valuation

Michael Novinson • November 20, 2024

Cyera secures $300M in funding from Accel and Sapphire Ventures, doubling its valuation to $3 billion. The company is enhancing its data security platform by integrating DSPM with DLP and identity security capabilities, addressing enterprise demand for comprehensive solutions.

Breach Notification

Oklahoma Hospital Says Ransomware Hack Hits 133,000 People

Marianne Kolbasuk McGee • November 19, 2024

An Oklahoma hospital quickly restored its IT systems after a ransomware attack in September, but the 62-bed hospital could not recover some data and later learned that hackers may have accessed the personal information of 133,000 people. The attack is the latest involving a small rural hospital.

Endpoint Detection & Response (EDR)

Trustwave, Cybereason Merge to Form an MDR Security Stalwart

Michael Novinson • November 12, 2024

SoftBank-backed merger between Trustwave and Cybereason brings together leading MDR, EDR, DFIR and threat intelligence capabilities. The combined organization aims to improve AI-driven detection and enhance Microsoft E5 support, targeting enterprise, mid-market, and public sector clients worldwide.

Application Security

Snyk Acquires Probely to Strengthen API Security for AI Apps

Michael Novinson • November 12, 2024

By buying DAST provider Probely, Snyk bolsters its platform with advanced API security testing for early SDLC stages. This acquisition aims to help developers identify and reduce vulnerabilities in AI-driven and API-heavy applications. Full integration into Snyk's platform is slated for early 2025.

3rd Party Risk Management

Poor Security Practices Put Banks at Risk of Cyberthreats

Suparna Goswami • October 24, 2024

Despite heavy security investments, banks still struggle with basic security issues such as default passwords, vendor vulnerabilities and social engineering scams. Scott Weinberg, CEO of Neovera, shares a new report that shows banks of all sizes still grapple with these common risks.

Standards, Regulations & Compliance

Dental Center Chain Settles Data Breach Lawsuit for $2.7M

Marianne Kolbasuk McGee • October 21, 2024

A Michigan-based dental practice with 250 centers across nine states has agreed to pay $2.7 million under a preliminary settlement of a proposed consolidated class action lawsuit centered on a 2023 hacking incident reported as affecting more than 1.9 million patients and employees.

Managed Security Service Provider (MSSP)

Sophos Fortifies XDR Muscle With $859M Secureworks Purchase

Michael Novinson • October 21, 2024

Sophos is acquiring Secureworks in a deal valued at $859 million, aiming to integrate its managed security services with Secureworks' Taegis XDR platform. This merger is expected to deliver advanced detection and response capabilities, and enhance global cybersecurity for businesses of all sizes.

Data Loss Prevention (DLP)

AI Powers Cyera’s $162M Buy of Data Security Startup Trail

Michael Novinson • October 17, 2024

With the $162 million buy of Trail Security, Cyera will offer customers AI-enhanced data loss prevention alongside its DSPM solution. The new platform promises stronger, real-time data protection for sensitive information both in motion and at rest, helping enterprises meet security demands.