Protecting Healthcare Organizations from Ransomware Attacks

With cyber insurance premiums climbing and coverage shrinking, carriers now require MFA, access management, and phishing training; investing those dollars in offensive security may pay off better.

Gartner attributes up to 95% of cloud breaches to human configuration errors; NetSPI catalogs usual suspects like missing MFA, cloud-on-prem integration, and over-permissioned accounts.

July 2024 roundup: the CrowdStrike outage spotlights disaster recovery testing, ransomware shuttered LA County courts, and the AT&T breach tied to Snowflake credentials renews MFA calls.

January 2022 roundup: phishing enrolled attacker devices into Azure AD tenants lacking enforced MFA; LockBit hit the French Ministry of Justice and European firms via GPO-based deployment; noPac can compromise DCs in seconds.

Thycotic's Joseph Carson on ransomware defense: backups alone fail—restored data can carry the infection—so pair tested recovery with app whitelisting, patching, least privilege and anti-macro rules.

Wiz examines 'malware-less' database ransomware: exposed MySQL, PostgreSQL and MongoDB servers with weak auth are looted, wiped and ransomed via native commands — no malware to detect.