Archive

Ransomware

2022 Developments: Expanding Cyber Threat Landscape, Growing Tensions Around Transparency, and Increasing Focus on Cyber Capacity Building

2022 Developments: Expanding Cyber Threat Landscape, Growing Tensions Around Transparency, and Increasing Focus on Cyber Capacity Building

In 2022, cybersecurity took center stage. Three prominent developments stand out: first, cyber threats are multiplying, drawing increasing attention from professionals across multiple economic sectors; second, assumptions about the benefits of technology-driven transparency seem increasingly tenuous; and third, a growing consensus about the range of cyber threats is breathing new life into efforts at cyber capacity building.

capacity building, cyber espionage, open-source, Ransomware, transparency

February 2, 2023

Eighteen Months On: Continued Progress on Ransomware Task Force Recommendations

Eighteen Months On: Continued Progress on Ransomware Task Force Recommendations

In the 6 months since the publication of the Ransomware Task Force (RTF) Progress Report this May, we have seen a great deal of action to combat ransomware, but we have also seen the scale of the threat continue to grow, even as stakeholders continue to focus on it.

deter, disrupt, incident reporting, prepare, progress report, Ransomware, respond

December 5, 2022

Scaling What’s Successful: Discussions on Countering Ransomware at the Paris Peace Forum

Scaling What’s Successful: Discussions on Countering Ransomware at the Paris Peace Forum

On November 11, IST's Elizabeth Vish joined experts from across the cybersecurity community at the Paris Peace Forum to discuss ways public-private partnerships can address the ransomware crisis.

cybersecurity, Paris Peace Forum, Public-private partnerships, Ransomware

December 2, 2022

Cyber Resilience and Insurance Innovation

November 30, 2022 1:00 pm

Cyber Resilience and Insurance Innovation

With the rise in volume and sophistication of ransomware, insurance companies and their insureds struggle with how to respond. This has driven new underwriting requirements and price changes but also innovation. On November 22, 2022, the Ransomware Task Force hosted the fifth webinar in the Blueprint for Ransomware Defense webinar series.

Blueprint for Ransomware Defense, cyber insurance, cybersecurity, Ransomware, resilience

November 30, 2022

Mapping the Ransomware Payment Ecosystem: A Comprehensive Visualization of the Process and Participants

Mapping the Ransomware Payment Ecosystem: A Comprehensive Visualization of the Process and Participants

Central to our ability to mitigate the threat of ransomware is the development of a common understanding of the actors, stakeholders, processes, and information, both required for and produced during the ransomware payment process. Yet, when we began this work, such a picture did not exist. We undertook this effort to fill that gap.

mapping, ransom payments, Ransomware, visualization

November 15, 2022

Plan maestro de defensa contra los programas de secuestro

Plan maestro de defensa contra los programas de secuestro

En respuesta a la acción 3.1.1 del Informe del Grupo de Trabajo sobre Programas de Secuestro, en la cual se exhorta a las organizaciones de ciberseguridad a establecer un marco claro y accionable para la mitigación, la respuesta y la recuperación ante programas de secuestro, el Grupo de Trabajo encargado de elaborar un plan de defensa contra los programas de secuestro formuló un plan maestro que abarca un subconjunto de salvaguardias esenciales de ciberhigiene seleccionadas de los controles críticos de seguridad del Centro para la Seguridad de Internet (CIS Controls®) v8.

Blueprint for Ransomware Defense, cyber attacks, defense, Future of Digital Security, Ransomware, RTF

November 10, 2022

Cyber Incident Reporting Framework

Cyber Incident Reporting Framework

The Framework lays out a set of model reporting formats the Cybersecurity and Infrastructure Security Agency (CISA) could use as the foundation for the cyber incident reporting.

CIRCIA, cyber, cybersecurity, incident reporting, Ransomware

November 3, 2022

Cyber incident reporting isn’t the problem — ignorance is

Cyber incident reporting isn’t the problem — ignorance is

In an op-ed for The Hill, IST's Chief Strategy Officer Megan Stifel and Cyber Threat Alliance's President & CEO Michael Daniel make the case for reporting cyber incidents.

CIRCIA, CISA, incident reporting, Ransomware

November 2, 2022

The Truth about Ransomware (and How to Stop It)

In the News, Podcast

The Truth about Ransomware (and How to Stop It)

Megan Stifel joins the podcast "The Internet of Threats" with host Eric Greenwald to discuss the current and future state of ransomware, what small- and medium-sized businesses can do to fight ransomware, and whether tactics like regulation and insurance actually help or hurt the fight against ransomware.

blueprint, cyber insurance, cybersecurity, Ransomware, RTF, SMEs

September 8, 2022

Ransomware Task Force Releases Blueprint for Ransomware Defense

Ransomware Task Force Releases Blueprint for Ransomware Defense

The Ransomware Task Force called for the cybersecurity community to “develop a clear, actionable framework for ransomware mitigation, response, and recovery.” The basis for the Blueprint for Ransomware Defense is the CIS Controls, a set of well-regarded and widely-used best practices that help enterprises focus their resources on the critical actions needed to defend against the most common cyber attacks. It includes a subset of these best practices, or “Safeguards,” that are most relevant to combating ransomware.

Blueprint for Ransomware Defense, Cyber Civil Defense, cybersecurity, Ransomware

August 4, 2022

Blueprint for Ransomware Defense: An Action Plan for Ransomware Mitigation, Response, and Recovery for Small- and Medium-Sized Enterprises

Blueprint for Ransomware Defense: An Action Plan for Ransomware Mitigation, Response, and Recovery for Small- and Medium-Sized Enterprises

In response to Action 3.1.1 of the Ransomware Task Force (RTF) report, which calls for the cybersecurity community to “develop a clear, actionable framework for ransomware mitigation, response, and recovery,” the Blueprint for Ransomware Defense Working Group developed a Blueprint comprised of a curated subset of essential cyber hygiene Safeguards from the Center for Internet Security Critical Security Controls® (CIS Controls®) v8.

blueprint, Blueprint for Ransomware Defense, cyber attacks, defense, Future of Digital Security, Ransomware, RTF

August 3, 2022

RTF Year Two: New Map; New Data: Same Mission

RTF Year Two: New Map; New Data: Same Mission

We estimate that in 2021 there were well over 4,000 documented ransomware incidents involving at least 60 ransomware "families," impacting organizations in 109 countries.

cyber attacks, incident map, incident reporting, Ransomware

July 13, 2022

Testimony: Rising Threats: Ransomware Attacks and Ransom Payments, Enabled by Cryptocurrency

Testimony: Rising Threats: Ransomware Attacks and Ransom Payments, Enabled by Cryptocurrency

On June 7, 2022, IST Chief Strategy Officer Megan Stifel testified in front of the U.S. Senate Committee on Homeland Security and Governmental Affairs for the hearing entitled, "Rising Threats: Ransomware Attacks and Ransom Payments, Enabled by Cryptocurrency."

blueprint, cryptocurrency, cybersecurity, ransom payments, Ransomware

June 7, 2022

Combating Ransomware: A Year of Action

May 20, 2022 12:00 am

Combating Ransomware: A Year of Action

Over the last year, ransomware attacks continued to plague institutions of all sizes—but thanks in part to the timely and comprehensive recommendations of the Ransomware Task Force, governments were more engaged and organizations are more focused on equipping themselves with the tools and policies needed to counter this threat. As the RTF completed its first year of impact, we hosted for a day of reflections, predictions, and connections on how we can continue to combat ransomware in 2022 and beyond.

cryptocurrency, deter, disruption, prepare, Ransomware, respond

May 20, 2022

The Ransomware Task Force: One Year On

Progress Report

The Ransomware Task Force: One Year On

In the year since the publication of the RTF report, the Ransomware Task Force reflects on progrsss, noting a great deal of action to combat ransomware and a continued rise observed incidents. This summary briefly discusses some of the ransomware-related activity of the last year, its impact, the current threat level, and the RTF's recommendations for moving forward.

cyber attacks, deter, disrupt, Future of Digital Security, prepare, Ransomware, respond, RTF

May 8, 2022

IST Joins Cyber Civil Defense Initiative

IST Joins Cyber Civil Defense Initiative

IST is grateful and excited to announce its participation in the Cyber Civil Defense Initiative, a multi-organization effort spearheaded by Craig Newmark to promote effective cybersecurity practices across the whole of society.

announcements, Craig Newmark, Cyber Civil Defense, Future of Digital Security, Ransomware

May 2, 2022