Guides organizations through recovering from ransomware attacks, covering backup restoration, system rebuilding, decryption options, and negotiation considerations. Articles also address preventive measures and how to reduce downtime during a ransomware event.
posts
When SolarWinds disclosed in December 2020 that threat actors had compromised their Orion software update mechanism — affecting up to 18,000 organizations including multiple U.S. government agencies — it became the most significant supply chain attack in modern history. The organizations that responded effectively didn't improvise. They followed
The Attack That Paralyzed a Hospital System for 28 Days In 2024, Ascension Healthcare — one of the largest health systems in the United States — was hit by the Black Basta ransomware group. The attack disrupted operations across 140 hospitals. Clinicians reverted to paper records. Ambulances were diverted. It took nearly
The 277 Days You Can't Afford According to IBM's Cost of a Data Breach Report, the average organization takes 277 days to identify and contain a breach. That's nine months of a threat actor living inside your network, exfiltrating data, escalating privileges, and setting
The Breach That Proved "We'll Figure It Out" Doesn't Work In 2023, MGM Resorts lost an estimated $100 million after a social engineering attack that started with a single phone call to their help desk. The threat actors impersonated an employee, gained access to
The Breach That Took 277 Days to Find According to IBM's 2024 Cost of a Data Breach Report, the average time to identify and contain a data breach was 258 days. That number has barely improved in years. I've worked with organizations that discovered threat actors
