Ransomware’s evolving tools and technical tactics confuse forensic analysis
Adversaries attempt to gain an upper hand by compromising the Active Directory, encrypting VM environments, and abusing Rclone.
About SC Media
incident-response
To avoid penalties for ransomware payouts, incident response pros press for due diligence
The onus is also on the threat intelligence community, said one IR expert, to practice responsible ransomware attribution, as it can affect companies’ decisions on whether or not to pay.
SolarWinds threat actor gains access to Mimecast’s production grid environment
The company earned kudos from security researchers for transparency and swift response, with one saying “I would have hoped to see more companies to be this responsive and forthcoming.”
School district IT leaders grade their handling of past malware attacks
Rockford Public Schools and Rockingham County Schools learned lessons in transparency, timely incident response, access management, data redundancy and disaster recovery.
Ransomware attack or not, Kia’s resilience is under the microscope
A days-long outage affecting mobile and web-based service calls into question Kia’s contingency planning for cybersecurity incidents, even as the company remains defiant about claims that a ransomware attack is to blame.
Cybersecurity and the ransacking of the US Capitol
For a short, but critical period of time last Wednesday, chaos reigned inside the U.S. Capitol building in Washington, D.C. Risk assessment failed.
Creating the Perfect Incident Response Playbook
Arctic Wolf’s Sam McLane sits with InfoSec Insider at the Black Hat Conference in Las Vegas to discuss the major dos and don’ts when it comes to incident response, in addition to some misconceptions that some security practitioners may have on the topic.
