Provides in-depth coverage of ransomware threats, attack vectors, and defense strategies. Articles address backup best practices, endpoint protection, network segmentation, incident response procedures, and recovery planning to help organizations withstand ransomware attacks.
posts
Your Computer Security Software Didn't Stop the Breach In 2023, MGM Resorts lost an estimated $100 million after a social engineering attack that bypassed every piece of computer security software the company had deployed. The threat actors didn't hack through a firewall. They called the help
A $12.5 Billion Problem That Keeps Getting Worse The FBI's Internet Crime Complaint Center reported $12.5 billion in cybercrime losses for 2023 — a 22% jump from the prior year. And the trajectory hasn't slowed. If you're reading this in 2026 and still
The Phone Call That Cost One Company $25 Million In early 2024, a finance worker at engineering firm Arup was tricked into transferring $25 million after a video call with what appeared to be the company's CFO. Every person on that call was a deepfake. The attackers never
In 2023, MGM Resorts had a multi-billion dollar security stack — endpoint detection, firewalls, SIEM platforms, the works. A single social engineering phone call bypassed all of it. The attackers impersonated an employee, convinced the IT help desk to reset credentials, and caused an estimated $100 million in damages. If you
A $100,000 Antivirus Setup That Stopped Nothing I worked with an organization in 2024 that had invested heavily in computer security software — endpoint detection, next-gen firewalls, SIEM, the works. They still got hit with a ransomware attack that encrypted 14,000 files and shut down operations for nine days.
The Misconfiguration That Exposed 100 Million Records In 2019, a former cloud engineer exploited a misconfigured web application firewall at Capital One and accessed over 100 million customer records stored in AWS S3 buckets. The breach cost the company over $270 million in settlements and remediation. It wasn't
The Ransom Note Nobody Expected In January 2026, a mid-sized hospital network in the American Midwest discovered that every imaging workstation, patient scheduling system, and billing server had been encrypted overnight. The ransom demand: 200 Bitcoin. Staff resorted to paper charts and fax machines for eleven days. Surgeries were postponed.
The Federal Agency Most Hackers Wish You'd Never Heard Of In January 2024, CISA — the Cybersecurity and Infrastructure Security Agency — issued an emergency directive after threat actors exploited vulnerabilities in Ivanti VPN products to infiltrate multiple federal agencies. The directive gave agencies 48 hours to disconnect affected devices.
Most Organizations Read CISA's Advice — Then Ignore the Hard Parts In 2023, the City of Dallas got hit with Royal ransomware. Services went down. Police dispatch systems broke. Recovery took weeks and cost millions. The attack vector? The kind of basic intrusion that CISA cybersecurity guidelines have warned
A Single Click Cost One Hospital $28 Million In 2024, Change Healthcare — a unit of UnitedHealth Group — suffered a ransomware attack that started with compromised credentials and insufficient access controls. The fallout disrupted healthcare claims across the United States for weeks. The company paid a $22 million ransom, and total
