Welcome to ISMG's Ransomware Resource Center!

Ransomware has rapidly become one of the world's most prevalent types of cybercrime. The lure for criminals is easy to see: Using highly automated and easily distributed crypto-locking malware to forcibly encrypt systems, attackers can demand bitcoin ransoms in exchange for decryption keys. Use this Ransomware Resource Center for the latest details on emerging ransomware variants, threat intelligence on attackers, plus best practices for detection, response and remediation.

Hospitals at Risk of BeyondTrust Ransomware Hacks

Marianne Kolbasuk McGee • February 20, 2026

Federal authorities and industry officials are urging healthcare sector entities to address a critical flaw in BeyondTrust Remote Support and Privileged Remote Access software, which if exploited, could give an attacker a foothold inside a hospital or clinic network.

Business Continuity Management / Disaster Recovery

Writing Ransomware Using AI to Get Rich? Don't Bet the Farm

Latest

Data Loss Prevention (DLP)

Zscaler Purchases SquareX to Secure Browsers Without Agents

Michael Novinson • February 6, 2026

Zscaler has acquired SquareX to deliver browser security through extensions rather than endpoint agents or stand-alone browsers. CEO Jay Chaudhry said the approach speeds deployment, improves security for unmanaged devices and accelerates time-to-market by up to a year.

Data Governance

Unlocking Data and AI to Digitally Transform Manufacturing

Cal Harrison • January 25, 2026

Manufacturers want to digitally transform to tap into the latest artificial intelligence tools, but they're saddled with decades-old equipment that was not designed to easily share data with other systems. But there's hope, said James Van Pelt, manufacturing practice lead at Stibo Systems.

Artificial Intelligence & Machine Learning

StrongDM Acquisition Expands Delinea's Cloud PAM Scope

Michael Novinson • January 16, 2026

Delinea's acquisition of StrongDM will combine strengths across legacy, cloud-native and developer-first infrastructure. The move supports just-in-time privilege delivery and AI agent access, delivering unified policy enforcement across IT, developer and machine users.

Access Management

JumpCloud Grows Presence in Brazil With MSP MacSolution Buy

Michael Novinson • January 8, 2026

JumpCloud has acquired MacSolution, a longtime partner and its largest MSP in the Americas, to enhance global service delivery and deepen its IT modernization capabilities. The move positions Sao Paulo, Brazil, as a strategic hub and strengthens support for partners and customers in Latin America.

Data Breach Notification

Aflac Notifies 22.7 Million People of June Data Theft Attack

Marianne Kolbasuk McGee • January 2, 2026

Supplemental health insurer Aflac is notifying 22.65 million people whose sensitive health and personal information, including Social Security numbers, was potentially compromised in a June data theft incident. The incident will likely rank as the biggest U.S. health data breach reported in 2025.

Encryption & Key Management

Why 47-Day TLS and SSL Certificate Renewal Cycles Alarm CIOs

Sandhya Michu • January 2, 2026

Moving to 47-day TLS and SSL certificate renewal cycles by 2029 will turn certificate management into an enterprise risk. "Automation and crypto-governance are now board-level imperatives. Enterprises can prepare for continuous renewal cycles without losing resilience," says Sectigo CEO Kevin Weiss.

Cybercrime

2025 in Health Data Breaches and Predictions for 2026

Marianne Kolbasuk McGee • December 30, 2025

If 2025 lacked a signature attack, hundreds of hospitals, health systems, clinics, physician practices, business associates and other vendors nonetheless experienced breaches in 2025 that cumulatively affected tens of millions of Americans. Hackers will try again harder in 2026.

Fraud Management & Cybercrime

Georgia Hospital Settles Lawsuit in Alleged Embargo Hack

Marianne Kolbasuk McGee • December 11, 2025

A small, rural county-owned Georgia community hospital has agreed to settle consolidated class action litigation involving a 2024 hacking incident in which ransomware gang Embargo claimed to have stolen 1.15 terabytes of the organization's data and leaked it on the darkweb.

Government

Senators Reintroduce Bill to Boost Healthcare Cybersecurity

Marianne Kolbasuk McGee • December 8, 2025

Four U.S. lawmakers - including the chair of the Senate health, education, labor and pensions committee - are taking another stab with a bipartisan bill aimed at strengthening cybersecurity in healthcare. That includes bolstering HIPAA, and providing cyber grants and training to the sector.

Scattered Lapsus$ Hunters Tied to Targeting of Zendesk Users

Akshaya Asokan • November 28, 2025

Continuing its targeting of customer data, the cybercrime group Scattered Lapsus$ Hunters appears to be gearing up for large-scale attacks involving typosquatted domains that lead to phishing domains designed to steal Zendesk users' valid credentials, warn security researchers.

Cybercrime

Ransomware Moves: Supply Chain Hits, Credential Harvesting

Mathew J. Schwartz • November 28, 2025

Ransomware groups continue to display more innovation, persistence and planning in their quest to amass ransom-paying victims and maximize profits. This has included repeat supply-chain attacks, harvesting credentials to use in later campaigns, as well as launching their own affiliate programs.

Blockchain & Cryptocurrency

Ransomware Reshaping Cyber as National Security Priority

Akshaya Asokan • November 27, 2025

Ongoing, high-profile ransomware attacks against Britain and the United States have transformed cybersecurity into a national security priority, Anne Neuberger, the former White House deputy national security adviser for cyber, said at a Wednesday event in London.