Content by Anna Delaney

Sound Off: A Post-Mortem on the Colonial Pipeline Attack

Anna Delaney  •  February 22, 2022

On this week's "Sound Off," attorney Lisa Sotto demonstrates how Colonial Pipeline did "a lot right" in its response to the DarkSide ransomware attack that led the firm to shut down operations for nearly a week last May. She shares best practices for enterprises to improve incident response plans.

ISMG Editors: Ransomware Trends - The Bad and the Ugly

Anna Delaney  •  February 18, 2022

In the latest weekly update, four ISMG editors discuss how ransomware attacks got worse in 2021, the backlash from privacy experts sparked by the IRS' decision - now changed - to use facial recognition technology on American taxpayers, and why cybersecurity fosters competitive advantage.

Cybercrime Markets: The Latest Movers, Shakers and Losers

Anna Delaney  •  February 17, 2022

The latest edition of the ISMG Security Report features an analysis of takedowns of multiple Russian-language cybercrime markets and communities by Russian authorities. It also describes the role of cryptocurrencies in the banking sector and how the identity market will evolve in 2022.

Enhancing the Cyber Resilience of Critical Infrastructure

Anna Delaney  •  February 15, 2022

"All too often we hear that our industrial control systems have no security. That's not true," says Kevin Jones, group CISO of Airbus. In fact, he states, "some of these systems have been designed with security encapsulating them and security around them." He discusses enhancing cyber resilience.

Sound Off: What Does the OMB Zero Trust Strategy Get Right?

Anna Delaney  •  February 15, 2022

On this week's "Sound Off," we ask John Kindervag, the founder of Zero Trust, for his reaction to the recently released Office of Management and Budget federal strategy to move the U.S. government toward a mature Zero Trust architecture.

ISMG Editors: Has Ransomware Group BlackMatter Rebooted?

Anna Delaney  •  February 11, 2022

In the latest weekly update, four editors at Information Security Media Group discuss important cybersecurity issues, including how the BlackMatter ransomware group has rebranded itself yet again, how the DOJ confiscated stolen Bitcoin worth more than $4 billion and takeaways from a U.S. Senate hearing on open-source...

Biggest Cryptocurrency Seizure in US History

Anna Delaney  •  February 10, 2022

This edition of the ISMG Security Report analyzes what prosecutors say is the biggest cryptocurrency seizure in U.S. history as well as the biggest financial seizure. It also details how a school district CISO resigned over the district's handling of a severe data breach and busts Zero Trust myths.

ISMG Editors: How Russian Cyber War Could Have Ripple Effect

Anna Delaney  •  February 4, 2022

Four ISMG editors discuss important cybersecurity issues, including misconceptions around Zero Trust implementation, lessons learned from the crippling NotPetya malware attack of 2017 that nearly sank logistics giant Maersk and how a Russian cyberwar in Ukraine could move beyond its borders.

Russian Cyber Operations Target Ukraine: What Happens Next?

Anna Delaney  •  February 4, 2022

The latest edition of the ISMG Security Report features an analysis of how Russia's escalation in Ukraine is raising cyber defense alarms. It also describes how a Dark Overlord collaborator received a three-year prison sentence and shares tips for Zero Trust implementation.

ITRC Data Breach Report Shows Surge in Data Compromises

Anna Delaney  •  January 31, 2022

In 2021, there were 1,862 data compromises - a 68% increase over 2020, according to the Identity Theft Resource Center's Annual Data Breach Report. "In this past year, there were more cyberattack-related data breaches than there were all forms of data breaches in 2020," says ITRC COO James E. Lee.

ISMG Editors: Tough Lessons Learned From Log4j, Ransomware

Anna Delaney  •  January 28, 2022

Four ISMG editors discuss: how too many organizations fail to implement basic cybersecurity defenses - such as MFA; a proposed lawsuit against health insurer Excellus that calls for an improvement to its data security program; and strategies for securing open-source and other software components.

ITRC: Identity Crime Predictions for 2022

Anna Delaney  •  January 28, 2022

Eva Velasquez, CEO of the Identity Theft Resource Center, shares six predictions for 2022 that show a shift from identity theft to identity fraud as cybercriminals continue to refine who they target, what information they steal and what they do with it.

All the World's a Stage: Russia Arrests Ransomware Suspects

Anna Delaney  •  January 28, 2022

The latest edition of the ISMG Security Report features an analysis of whether a new ransomware operation is a spinoff of the notorious REvil or simply copying the group's moves; how Maersk responded to the NotPetya wiper malware attack; and essential incident response skills.

'Email Security Doesn't Get the Attention It Deserves'

Anna Delaney  •  January 25, 2022

"Email security doesn't get the attention it deserves" because "phishing is not going away and is not getting any less," says Jess Burn, a senior analyst at Forrester. She shares best practices for phishing prevention.

ISMG Editors: Will Ransomware Kill Cyber Insurance?

Anna Delaney  •  January 21, 2022

In the latest weekly update, four ISMG editors discuss the state of cyber insurance today and why its future is uncertain; applying a security-by-design reliability model to analyze vulnerabilities; and how Russia takes down members of the REvil ransomware group as cyber aggressions in Ukraine rise.