
How is ransomware developing, and is it still one of the most potent threats to cybersecurity?
Certainly, it poses significant risks to organisations in both the public and private sectors, and is the threat at the top of most boards’ agendas
The reasons are clear enough: ransomware damages reputations, as well as the balance sheet. in the worst case scenario, a business might never recover from an attack.
And ransomware itself is becoming more sophisticated, and so more dangerous. Groups have moved on from simple phishing and RDP attacks to exploiting zero days. And they are as likely to threaten to release confidential information, as they are to encrypt it.
At the same time, governments are considering banning ransomware payments, at least by public sector bodies. And CISOs are finding that ransomware attacks need their own, specific response plan and playbook.
As our guest for this episode suggests, ransomware has moved from an attack on availability to an attack on confidentiality.
And when it comes to advising on the ransomware threat, few are better placed than Raj Samani.
Senior vice president and and chief scientist at Rapid7, Raj is also chief innovation officer at the Cloud Security Alliance, a special adviser at the European Cybercrime Centre and a co-founder of No More Ransom.
Here he discusses the evolving ransomware threat, the real risks it poses, and how organisations should act when they are attacked, with editor Stephen Pritchard.

Featured image by Benjamin Nelan from Pixabay