#incident-response
40 stories taggedincident-response.
Florida Ransomware 'Expert' Charged With Secretly Paying the Hackers He Promised to Beat
Zohar Pinhasi, owner of MonsterCloud, is accused of billing victims millions while quietly funding the criminals who locked their files.
What to do in the first hours of a Google Workspace breach
A new webinar walks through real incidents inside Google Workspace and the early choices that either contain the damage or make it worse.
AI-Assisted Ransomware Gang Tore Through a Corporate Network in Under 10 Hours
Unit 42 researchers watched attackers use AI agents to do in a single working day what normally takes criminal crews two weeks. The case is a signal, not an outlier.
Six things MSPs should actually test before the next ransomware hit
Acronis lays out a practical checklist for managed service providers, moving the conversation past backups and antivirus to the full arc of prevention, detection and recovery.
Securing Enterprise AI: What Boards Are Getting Wrong About the Rush to Deploy
Sygnia's 2026 CISO Survey Report maps where AI adoption is outrunning the controls meant to keep it safe, and what security teams can do about it.
When Your AI Assistant Goes Rogue: What To Do in the First 24 Hours
An hour-by-hour guide for what actually happens when an AI agent starts doing things nobody asked it to do, drawn from real incidents and written for everyone who might be caught in the fallout.
A Local Housing Authority Lost $1 Million to Email Fraud. Here Is What It Did Next.
A cybersecurity consultant's account of how a small government agency rebuilt its defences after criminals silently rerouted a wire transfer offers a practical road map for the thousands of local bodies running on skeleton IT crews.
The Ransomware Scavengers: 'Ransom Busters' Emails Victims Demanding Up to $60,000
A new outfit is contacting companies already hit by ransomware and offering, for a fee, to wipe their stolen files from the attackers' servers.
Fake 'Ransom Busters' Service Is Actually a Ransomware Insider Running a Side Scam
A criminal pretending to rescue hack victims is really a ransomware affiliate trying to pocket ransom money before his own gang gets it.
Your Team's Slack Messages During a Breach Could Cost More Than the Breach Itself
The panicked notes, the finger-pointing threads, the 'we knew about this' one-liners: what your staff types in the first 24 hours of a cyber incident can become courtroom evidence. Here is why that matters, and what to do before the subpoena arrives.
Nearly One in Three UK Manufacturers Hit by a Cyber Attack, Survey Finds
A new survey reveals that nearly a third of British manufacturers were hit last year, and half had no plan ready when trouble arrived.
The criminals behind the Minnesota water attacks may have a better backup of your plant than you do
Hackers hit more than 30 small water utilities in two days. The most alarming detail isn't how they got in: they may have walked out with the only complete copy of control logic the operators ever had.
River Bank Paid Hackers to Delete Stolen Data After June Ransomware Attack
Alabama's River Bank & Trust was hit by ransomware in June. The bank appears to have paid the criminals to destroy what they took, but still can't confirm whether customer data was exposed.
What Hackers Actually Do After They're Inside Your Network
A Huntress case study shows why cleaning up the malware is only half the job. If you don't find the front door, they walk back in.
Nearly Three in Four Companies Admit They Aren't Ready for a Serious Cyberattack
A survey of 600 senior IT security leaders finds most have the tools but lack the coordination, visibility and boardroom alignment to survive a real incident.