Ransomware summit takeaways: Pledges to disrupt safe havens, money laundering

The Latest

• 

  Opinion

  How to secure the enterprise against REvil-style attacks

  There is no way to fully protect against advanced attacks such as zero-day vulnerabilities or nation-state threats — responding quickly is critical to minimizing damage.

  Strategy

• 

  A security expert's guide to the top-exploited vulnerabilities

  The biggest and baddest ransomware groups love an easy vulnerability.

  Vulnerability

• 

  War room preparation key to ransomware response, experts say

  Companies need to assemble stakeholders ahead of an attack and be ready for potential fallout from litigation, reputational risk and operations disruption. 

  Strategy

• 

  Deep Dive

  What's under the hood of a medical device? Software bill of materials hits inflection point

  President Joe Biden's executive order calls for SBOMs, and the FDA wants to require premarket submissions to have an inventory of third-party device components. AdvaMed is concerned the data could be exploited by hackers.

  Strategy

• 

  CISOs: Approach the board with precision, simplicity

  Executives from PepsiCo, Mandiant and Texas Children's Hospital honed the art of approaching the board. Their techniques leave stakeholders asking, "Do you need anything?"

  Leadership & Careers

• 

  Why CEOs become communication chiefs after a cyberattack

  When ransomware hit, the CEOs of Colonial Pipeline and Accellion paused their day-to-day duties. Their immediate new roles? Communication.

  Strategy

• 

  6 types of CISO and the companies they thrive in

  Jeff Pollard, VP and principal analyst at Forrester, wants CISOs to discover the type of leader they are — transformational, tactical, steady — and run with it.

  Leadership & Careers

• 

  DOJ cracks down on ransomware with cyber task force, civil fraud initiative

  Federal authorities will target illegal crypto trading platforms and pursue federal contractors that fail to report breaches.

  Policy & Regulation

• 

  Mandiant CEO: 3 threats that changed cybersecurity in 2020

  CISOs getting comfortable in a more operational role were met with unprecedented cyberattacks — implants, zero days and ransomware — within the last year and a half.

  Strategy

• 

  Insider threat environment faces challenges amid changing corporate landscape

  As remote work becomes permanent and employee turnover rises, companies face additional challenges in protecting sensitive data, according to a panel discussion at Mandiant Cyber Defense Summit.

  Strategy

• 

  What cyber insurance CEOs want to see from customers

  Insurers joined high-profile CEOs at the White House summit last week to discuss how to improve national cybersecurity. For one insurance CEO, the industry needs three points of improvement.

  Strategy

• 

  Top global companies falling short in protecting domain security

  Major brands leave themselves and their customers open to phishing attacks, ransomware and BEC due to inadequate measures.

  Vulnerability

• 

  REvil, DarkSide highlight surge in Q2 ransomware attacks: report

  The government sector saw more ransomware attacks, while financial services companies faced increased threats in the cloud, according to McAfee Enterprise research.

  Cyberattacks

• 

  With remote work, any employee could be an insider threat. How is CISA mitigating the risk?

  CISA released a self-assessment tool which organizations can use to generate reports on their tolerance and capabilities for preventing insider threats. 

  Strategy

• 

  NIST urges supply chain to include cyber in risk management

  Industries that rely heavily on technology are the best at incorporating cyber in their supply chain risk management plans, according to NIST's Jon Boyens.

  Strategy

• 

  Ransomware attacks put availability of medical devices at risk: FDA cyber chief

  Industry reached a "watershed moment" earlier this year when a device outage caused by malware endangered patient lives, said the acting director of cybersecurity at CDRH. 

  Cyberattacks

• 

  Why is the CIO-CISO dynamic strained?

  In an enterprise where every executive has competing priorities in deadlines, money and personnel, some CISOs and CIOs fight for equal shares. 

  Leadership & Careers

• 

  Digitization costs manufacturing plants 'the luxury of isolation,' changing risk management

  OT organizations transition from site-level best practices to overall best practices, and move plant operations into an enterprise SOC.

  Strategy

• 

  Healthcare workers concerned with cybersecurity amid burnout and pandemic woes

  Nearly three-quarters of healthcare professionals are concerned that patient health information is being sent through unsecured tools, according to a new survey from hospital communications firm Spok.

  Strategy

• 

  Deep Dive

  Microsoft, under attack from threat actors, positions itself as cyber guardian

  The pandemic created more business opportunity, but malicious actors dogged the company's technology stack. Now, the very same products touted as security defense tools are under fire. 

  Threats

• 

  Threat actors more frequently — and successfully — target Active Directory

  Attacks on AD played a prominent role during the high-profile SolarWinds campaign and LockBit 2.0 ransomware attacks.

  Vulnerability

• 

  Timely patching remains pain point even as high-profile bugs linger

  With business continuity already challenged by COVID-19, patches interfering with business productivity became more of a challenge for security teams. 

  Vulnerability

• 

  Microsoft warns of new credential-stealing backdoor from SolarWinds threat actor

  The newly identified malware, called FoggyWeb, has been observed since April and is used to steal from compromised AD FS servers. 

  Cyberattacks

• 

  How hackers are making the leap from cloud to the software build processes

  The security problem with third-party container applications is not, however, indicative of infrastructure flaws.

  Vulnerability

• 

  Ripple effects from a cyber incident take a year to develop: report

  Organizations are likely to both generate and suffer the downstream consequences of cyber incidents because of the technological reliance companies have on one another.

  Breaches

More stories