Welcome to ISMG's Ransomware Resource Center!

Ransomware has rapidly become one of the world's most prevalent types of cybercrime. The lure for criminals is easy to see: Using highly automated and easily distributed crypto-locking malware to forcibly encrypt systems, attackers can demand bitcoin ransoms in exchange for decryption keys. Use this Ransomware Resource Center for the latest details on emerging ransomware variants, threat intelligence on attackers, plus best practices for detection, response and remediation.

Breach Roundup: Tycoon2FA Phishing Platform Rebounds

Pooja Tikekar • March 26, 2026

This week, Tycoon 2FA, Trio-Tech, messaging app spying and a ransomware broker sentenced. Iran-linked hackers. Mazda disclosed a breach. Oracle patched a flaw. North Korean actors weaponized VS Code, a Spanish port ransomware attack, a French teacher data breach and a healthcare firm victim surge.

Fraud Management & Cybercrime

Univ. of Mississippi Medical Center Dealing With Cyberattack

Latest

Agentic AI

Speed, Judgment and Behavior: AI's Defense Mandate

Tom Field • March 31, 2026

Cybersecurity can no longer stop at the system boundary. Organizations must understand how humans and AI agents behave, and intervene before attackers exploit that behavior, says Niloofar Razi, operating partner at Capitol Meridian Partners.

Cybercrime

National Cyber Resilience Demands Unified Defense

Rahul Neel Mani • March 31, 2026

Cyber risk is rising as digital dependence grows and threat actors expand. NCSC CEO Richard Horne outlines why leaders must treat cybersecurity as mission-critical, strengthen their resilience, and align defense efforts to counter ransomware, AI-driven threats, and supply chain attacks.

Cyberwarfare / Nation-State Attacks

Telecom Sleeper Cells: Nation-State Threats Below the Radar

Anna Delaney • March 30, 2026

Nation-state actors have embedded kernel-level implants inside telecom networks designed to stay dormant for years - and 99.9% of organizations have no idea these capabilities even exist, says Christiaan Beek, vice president of threat intelligence at Rapid7.

3rd Party Risk Management

Cloud-Based EHR Vendor Notifies SEC About Hacking Incident

Marianne Kolbasuk McGee • March 30, 2026

Electronic health records vendor CareCloud has notified the U.S. Securities and Exchange Commission of a cyber incident earlier this month that temporarily disrupted the software and accessed one of its EHR environments. The company is assessing whether patient data was accessed or stolen.

Agentic AI

How AI Agents Are Redrawing Enterprise Security Models

Michael Novinson • March 28, 2026

Perimeter defense has become obsolete, and as AI agents operate across enterprises with unconstrained access, securing the full data-to-model continuum is the only viable path, says Abhishek Shukla, managing director at Prosperity7 Ventures.

Agentic AI

AI-Based Coding Redefines Software Development

Michael Novinson • March 25, 2026

Coding agents that once struggled below the surface level of basic web development can now refactor decades-old enterprise code at a speed and scale far beyond traditional teams, says Cisco's Jeetu Patel. He explains how AI-built software and machine-scale defense redefine competitive advantage.

Government

CISA Leadership Shakeup Amid DHS Shutdown

Chris Riotta • February 27, 2026

The U.S. cyber defense agency is going through a major leadership shakeup - again - following months of staffing turnover, budget cuts and shutdowns. Acting Director Madhu Gottumukkala is moving into a senior strategy role at the Department of Homeland Security, of which CISA is a component.

Data Security

Norton Healthcare to Pay $11M to Settle BlackCat Lawsuit

Marianne Kolbasuk McGee • February 18, 2026

Norton Healthcare, which operates nine hospitals and other care facilities in Kentucky and Indiana, has agreed to pay $11 million to settle class action litigation stemming from a 2023 data theft attack by ransomware-as-a-service gang Alphv/BlackCat that affected nearly 2.5 million people.

Data Loss Prevention (DLP)

Zscaler Purchases SquareX to Secure Browsers Without Agents

Michael Novinson • February 6, 2026

Zscaler has acquired SquareX to deliver browser security through extensions rather than endpoint agents or stand-alone browsers. CEO Jay Chaudhry said the approach speeds deployment, improves security for unmanaged devices and accelerates time-to-market by up to a year.

Video

Unlocking Data and AI to Digitally Transform Manufacturing

Cal Harrison • January 25, 2026

Manufacturers want to digitally transform to tap into the latest artificial intelligence tools, but they're saddled with decades-old equipment that was not designed to easily share data with other systems. But there's hope, said James Van Pelt, manufacturing practice lead at Stibo Systems.

Artificial Intelligence & Machine Learning

StrongDM Acquisition Expands Delinea's Cloud PAM Scope

Michael Novinson • January 16, 2026

Delinea's acquisition of StrongDM will combine strengths across legacy, cloud-native and developer-first infrastructure. The move supports just-in-time privilege delivery and AI agent access, delivering unified policy enforcement across IT, developer and machine users.

Access Management

JumpCloud Grows Presence in Brazil With MSP MacSolution Buy

Michael Novinson • January 8, 2026

JumpCloud has acquired MacSolution, a longtime partner and its largest MSP in the Americas, to enhance global service delivery and deepen its IT modernization capabilities. The move positions Sao Paulo, Brazil, as a strategic hub and strengthens support for partners and customers in Latin America.