We all kept telling them it was escalating and just going to get worse…
But no… every time one cybercrime group posts a mea culpa, or a few people get indicted or arrested, the pundits are like
Please, learn this time:
- Ransomware is lucrative, and orgs pay out $$$
- Have a tested IRP
- Have offline and tested backups
- Insurance won’t save you alone
- Blinky boxes won’t save you alone
- Retain IR if not in-house
- Work on basic security hygiene
- Be ready!
- Ransomware is lucrative, and orgs pay out $$$
- Have a tested IRP
- Have offline and tested backups
- Insurance won’t save you alone
- Blinky boxes won’t save you alone
- Retain IR if not in-house
- Work on basic security hygiene
- Be ready!
- Ransomware does not just come through phishing emails anymore. Your (perhaps overly cruel) awareness tests won’t save you, alone.
The most common vectors I’ve seen recently are supply chain and vulnerable ingress/egress perimeter devices like concentrators or virtual clients.
The most common vectors I’ve seen recently are supply chain and vulnerable ingress/egress perimeter devices like concentrators or virtual clients.
There is an excellent product that you can use to survey your own cybersecurity maturity. It is called C2M2. I recommend your org sit down and do the Incident Response portions ASAP, and see what maturity level you are at and what is keeping you from getting any further.
You can find great references for doing this at US DoE energy.gov/ceser/energy-s…
It is really not industrial specific.
It is really not industrial specific.
If you are not at MIL 1 yet I strongly encourage you to consider what structural, budget, and organizational changes you need to make it there, either internally or by retaining external security expertise.
Oh, I forgot - another security product to probably insult
- A cloud won’t save you, alone. Plenty of OneDrive, AWS, and Sharepoint getting encrypted during ransomware attacks.
- A cloud won’t save you, alone. Plenty of OneDrive, AWS, and Sharepoint getting encrypted during ransomware attacks.
“Defense in Depth across the Kill Chain” is *so many buzzwords* in one sentence, but actually mostly real ones, this time. There’s no magical silver bullet. Good cybersecurity requires layers of processes, architecture, tools, and humans.
I say this all because I genuinely care. My job is seeing organizations on their most catastrophic, stressful, costly cybersecurity day. Most of them joke they hope to never see me again. It’s fair.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
