Critical Infrastructure Security: 1 Year After the JBS Ransomware Attack

A ransomware attack attributed to an Eastern European group forced Colonial Pipeline, supplier of nearly half the US East Coast's fuel, to shut down its entire system and triggered a federal response.

NetSPI consultant Michelle Eggers recaps the SANS ICS Security Summit 2023, from the beta SANS ICS 310 course to why ransomware tops ICS threats and how OT security differs from IT.

I attended the Nuclear Information Technology Strategic Leadership (NITSL) conference last week, which featured some very interesting discussions on cyber security.

Wiz explains CVE-2024-4577, a critical argument-injection RCE in Windows PHP CGI, and reports TellYouThePass ransomware exploiting it within days; patched versions and mitigations are covered.

Learn about the evolving ransomware landscape, including how attackers operate, the roles within the ransomware economy, and actionable strategies to strengthen your defenses.

Since 100% prevention is impossible, ransomware defense hinges on early detection. The article shows how BAS as a service, purple teaming, and baselining expose detection gaps in the kill chain.