Joseph Steinberg

APRIL 23, 2025

From ransomware and cloud misconfigurations to vulnerable medical devices, U.S. healthcare organizations are under relentless cyber pressure and the risks to patient safety have never been higher. The post Cyber Risk in U.S. Whats Broken in U.S. Healthcare Cybersecurity And How to Fix It.

Healthcare 159

Healthcare Cyber Risk Artificial Intelligence Risk 159

eSecurity Planet

NOVEMBER 6, 2024

Following a July 18 attack by the Rhysida ransomware group — believed to have Russian affiliations — Columbus is still reeling from the exposure of vast amounts of sensitive resident data. Businesses that handle customer data or interact with city networks are now faced with heightened risks.

Ransomware 113

Ransomware Authentication Identity Theft Penetration Testing 113

Security Affairs

NOVEMBER 6, 2024

Georgia, a ransomware attack disrupted Memorial Hospital and Manor’s access to its Electronic Health Record system. A ransomware attack hit Memorial Hospital and Manor in Bainbridge, Georgia, and disrupted the access to its Electronic Health Record system. Ransomware attacks on U.S. terabytes of data.

Ransomware 129

Ransomware Healthcare Antivirus Data breaches 129

Security Affairs

OCTOBER 29, 2024

Fog and Akira ransomware operators are exploiting SonicWall VPN flaw CVE-2024-40766 to breach enterprise networks. Fog and Akira ransomware operators are exploiting the critical SonicWall VPN vulnerability CVE-2024-40766 (CVSS v3 score: 9.3) to breach corporate networks via SSL VPN access. ” reads the advisory.

VPN 132

VPN Ransomware Firewall Internet 132

Digital Shadows

NOVEMBER 12, 2024

DRP Insights: Credential Exposure Makes Up 75% of Alerts Construction companies are increasingly vulnerable to opportunistic attacks, with credential exposure incidents now accounting for 75% of all GreyMatter Digital Risk Protection (DRP) alerts for the sector.

Ransomware 111

Ransomware Phishing Cyber threats Malware 111

Security Boulevard

MAY 8, 2025

A survey by CrowdStrike finds the gap between SMB awareness of cyber threats and efforts by them to protect themselves is widening, with not enough of them spending the money needed on AI and other tools to defend against ransomware and other attacks.

Risk 113

Risk Cyber threats Ransomware Data privacy 113

Security Boulevard

JANUARY 8, 2025

The post Insecure Medical Devices Illumina DNA Sequencer Illuminates Risks appeared first on Security Boulevard. IEI-IEI, Oh: Running an obsolete OS, on obsolete hardware, configured with obsolete settings.

Risk 125

Risk Social Engineering Internet Internet 125

Security Affairs

JANUARY 15, 2025

The ransomware group Codefinger is using compromised AWS keys to encrypt S3 bucket data using SSE-C, Halcyon researchers warn. The ransomware group Codefinger has been spotted using compromised AWS keys to encrypt data in S3 buckets. Halcyon researchers pointed out that this ransomware campaign does not exploit any AWS vulnerability.

Encryption 121

Encryption Ransomware Authentication Accountability 121

The Last Watchdog

JUNE 9, 2025

Attackers—from nation-state actors to ransomware gangs—are growing more creative and persistent in probing utility networks and operational technology systems that underpin modern life. With Bastazo, Huff and his team are advancing a bold alternative: risk-informed remediation. However, there are real supply chain risks to patching.

Risk 113

Risk Energy and Utilities Data collection Cybersecurity 113

Tech Republic Security

JULY 10, 2024

Read about the new Cisco Talos report on the top ransomware groups’ techniques and learn how to mitigate this cybersecurity risk. Cisco Talos observed the TTPs used by 14 of the most prevalent ransomware groups based on their volume of attack, impact to customers and atypical behavior.

Ransomware 211

Ransomware Risk Cybersecurity Social Engineering 211

Security Affairs

DECEMBER 9, 2024

Romanian energy supplier Electrica Group is investigating an ongoing ransomware attack impacting its operations. The company did not disclose details of the cyberattack, however, Romania’s Ministry of Energy confirmed that the company was the victim of a ransomware attack that hasn’t impacted the company’s SCADA systems.

Ransomware 121

Ransomware Cyber Attacks Cybercrime Marketing 121

Security Boulevard

DECEMBER 6, 2024

The post Stoli Vodka: Bankrupt After Ransomware Attack appeared first on Security Boulevard. Absolutely un-fabulous: Smells like Russia is responsible, but reality is a bit more complicated.

Ransomware 115

Ransomware Cyber Attacks Security Awareness Risk 115

Penetration Testing

APRIL 7, 2025

The digital landscape continues to be challenged by the persistent and evolving threat of ransomware. Organizations worldwide face an increasing risk of sophisticated cyberattacks that can disrupt operations, compromise sensitive data, and inflict significant financial and reputational damage.

Ransomware 97

Ransomware Risk Cybersecurity Malware 97

The Last Watchdog

MARCH 19, 2025

SpyCloud , the leading identity threat protection company, today released its 2025 SpyCloud Annual Identity Exposure Report , highlighting the rise of darknet-exposed identity data as the primary cyber risk facing enterprises today. It requires organizations to rethink the risks posed by employees, consumers, partners and suppliers.

Cyber Risk 113

Cyber Risk Risk Phishing Cybercrime 113

IT Security Guru

JANUARY 30, 2025

So, lets explore how spread betting platforms are rising to this challenge and ensuring that their platforms are cyber risk-free. Cyber Risks Facing Spread Betting Platforms Cyber threats are becoming more dangerous than ever, and spread betting platforms are a major target for most of these cyberattacks.

Cyber Risk 95

Cyber Risk Risk Penetration Testing Accountability 95

Digital Shadows

FEBRUARY 17, 2025

Key Findings First observed in March 2024, BlackLock (aka El Dorado or Eldorado) has rapidly emerged as a major player in the ransomware-as-a-service (RaaS) ecosystem. By Q4 2024, it ranked as the 7th most prolific ransomware group on data-leak sites, fueled by a staggering 1,425% increase in activity from Q3.

Ransomware 83

Ransomware Malware Risk Accountability 83

Security Boulevard

MARCH 5, 2025

That is why it is absolutely crucial to have an expert cybersecurity leader to comprehend the risk situation and communicate the business landscape options. It is a dynamic adversarial endeavor where risk must be continually managed. To all the CEOs, CIOs, fellow C-suites, and Boards out there, be smart when it comes to cybersecurity.

Ransomware 85

Ransomware Cybersecurity Risk Technology 85

Malwarebytes

JANUARY 6, 2025

A US chain of dental offices known as Westend Dental LLC denied a 2020 ransomware attack and its associated data breach, instead telling their customers that data was lost due to an accidentally formatted hard drive. In October 2020, Westend Dental was attacked by the Medusa Locker ransomware group.

Data breaches 144

Data breaches Ransomware Passwords Insurance 144

Security Boulevard

APRIL 15, 2025

The recent ransomware breach tied to ICICI Bankclaimed by the LockBit grouphas raised fresh concerns about the fragility of digital ecosystems and third-party risk. The post ICICI Bank Ransomware Breach: A Stark Reminder of Supply Chain Risk and the Need for Real-Time Cyber Vigilance appeared first on Security Boulevard.

Banking 59

Banking Risk Ransomware 59

Krebs on Security

JUNE 15, 2023

CISA’s mandate follows a slew of recent attacks wherein attackers exploited zero-day flaws in popular networking products to conduct ransomware and cyber espionage attacks on victim organizations.

Risk 279

Risk VPN Internet Internet 279

eSecurity Planet

MARCH 17, 2025

The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the Federal Bureau of Investigation (FBI) and the Multi-State Information Sharing and Analysis Center (MS-ISAC), has released a joint cybersecurity advisory warning organizations about the escalating threat posed by the Medusa ransomware.

Ransomware 70

Ransomware Backups Firmware Insurance 70

Tech Republic Security

FEBRUARY 26, 2025

Ransomware groups now steal, encrypt, and threaten to leak company data on the dark web, forcing victims to pay or risk exposing sensitive information.

Ransomware 192

Ransomware Encryption Risk Artificial Intelligence 192

Jane Frankland

JUNE 8, 2025

However, the lines are blurring and if these executive roles don’t realign—clearly and deliberately—the result will be friction, inefficiency, and exposure to security and reputational risks that no organisation can afford. The CIO: At Risk of Being Sidelined Historically, the CIO oversaw enterprise-wide IT. Projects stall.

CISO 130

CISO Digital transformation Technology Risk 130

Security Boulevard

OCTOBER 21, 2024

It is good to see US government leaders realize that ransomware is a growing existential threat to our country, at the hands of our adversaries. A top US national cybersecurity advisor stated in a recent op-ed , “This is a troubling practice that must end.” The government is looking at ways to disrupt ransomware attacks.

Ransomware 75

Ransomware Insurance Cyber Insurance Government 75

The Last Watchdog

OCTOBER 23, 2024

As small businesses increasingly depend on digital technologies to operate and grow, the risks associated with cyber threats also escalate. INE Security recommends establishing a routine for updating and patching software, which can significantly reduce the risk of a breach. Cary, NC, Oct.

Small Business 162

Small Business Data breaches Backups Passwords 162

Security Boulevard

JANUARY 31, 2025

Bloody hell: New York Blood Center Enterprises crippled by ransomware scrotes unknown. The post Ransomware Scum Out For Blood: NYBCe is Latest Victim appeared first on Security Boulevard.

Ransomware 91

Ransomware Social Engineering Healthcare Data privacy 91

Security Affairs

OCTOBER 19, 2024

This week, Sophos researchers warned that ransomware operators are exploiting the critical vulnerability CVE-2024-40711 in Veeam Backup & Replication to create rogue accounts and deploy malware. Overlapping indicators link these cases to prior Fog and Akira ransomware attacks. In one case, attackers dropped Fog ransomware.

Backups 133

Backups Ransomware VPN Authentication 133

Thales Cloud Protection & Licensing

FEBRUARY 12, 2025

The Rise of Non-Ransomware Attacks on AWS S3 Data madhav Thu, 02/13/2025 - 04:39 A sophisticated ransomware gang, Codefinger, has a cunning new technique for encrypting data stored in AWS S3 buckets without traditional ransomware tools. Unlike conventional ransomware, the malicious actors dont exfiltrate any data.

Ransomware 77

Ransomware Encryption Digital transformation Risk 77

Security Boulevard

JUNE 18, 2025

Whether it’s stolen data, ransomware, or phishing, attacks are becoming more frequent and severe. The post Cyber Risk Management Strategy: How to Plan appeared first on Security Boulevard. Online threats are everywhere, and no organization is safe from them. That’s why having a clear.

Cyber Risk 59

Cyber Risk Risk Phishing Ransomware 59

Malwarebytes

NOVEMBER 27, 2024

In 2019, a ransomware attack hit LifeLabs, a Canadian medical testing company. The ransomware encrypted the lab results of 15 million Canadians, and personally identifiable information (PII) of 8.6 Reportedly , LifeLabs paid the ransomware group, which is why it’s still unknown which group was behind the attack.

Ransomware 123

Ransomware Healthcare Risk Encryption 123

SecureWorld News

MAY 5, 2025

Companies that treat burnout like an HR issue instead of a security risk are leaving their front door wide openand ransomware gangs are walking right in. Every missed alert, every "temporary" shortcut, every unchecked admin request compounds the risk. A ransomware group doesn't hit during periods of stability.

Ransomware 79

Ransomware Firewall Encryption Phishing 79

eSecurity Planet

FEBRUARY 24, 2025

Over 200,000 internal messages from the notorious ransomware group Black Basta have surfaced online exposing deep divisions, ransom negotiations, and internal dysfunction. Cybersecurity experts are now poring over the data, uncovering a rare inside look at how one of the most feared ransomware groups operates and potentially unravels.

Ransomware 67

Ransomware Phishing Healthcare Cryptocurrency 67

SecureWorld News

JUNE 9, 2025

The attack vectors are diverse: fraudulent websites mimicking airline booking portals, phishing campaigns targeting airline staff, distributed denial-of-service (DDoS) attacks crippling airport websites malware infiltrating maintenance system, ransomware encrypting critical backend databases, and more.

Cybersecurity 111

Cybersecurity Social Engineering Computers and Electronics Risk 111

Security Affairs

APRIL 7, 2025

RISKS AND IMPACTS ON CYBERSECURITY AND PRIVACY The availability of accounts linked to law enforcement and other government agencies, combined with the ease Threat Actors have in renting an EDR service, jeopardizes both the security of governmental infrastructures and the protection of citizens privacy.

Cybercrime 140

Cybercrime Social Engineering Accountability Government 140

The Last Watchdog

JUNE 11, 2025

Related: Getting the most from cyber insurance At RSAC 2025, I met with ESET Chief Security Evangelist Tony Anscombe to trace a quiet but growing convergence: endpoint defense, cyber insurance, and monoculture risk are no longer separate concerns. They’re overlapping — and reshaping how security programs are evaluated. And what of AI?

Insurance 147

Insurance Cyber Insurance Antivirus CISO 147

BH Consulting

APRIL 16, 2025

Dr. Ng emphasised the balancing act between innovation and risk. Cloud calls for cooperation in a changed risk landscape Has computing really changed with the cloud? Although the core architecture hasnt shifted drastically, he said the risk landscape has.

Risk 59

Risk Government Ransomware Retail 59

Security Affairs

MARCH 24, 2025

“In this scenario, criminals use free online document converter tools to load malware onto victims computers, leading to incidents such as ransomware.” ” Victims often realize too late that malware has infected their devices, leading to ransomware or identity theft. ” reads the alert.

Malware 119

Malware Scams Identity Theft Antivirus 119