WithSecure Blog

Despite constant progress and evolution in the cyber security landscape, ransomware remains one of the most daunting threats facing organizations. At its core, ransomware persists because it is profitable. Cybercriminals will continue to launch ransomware attacks as long as they can expect to make significant financial returns.

Recently the WithSecure Incident Response team has identified an increase on the number of cases related with Business email compromise (BEC),  this type of attack the threat actor uses social engineering techniques, such as phishing emails, to trick users into compromising their accounts and leveraging that to compromise high-value assets, or even impersonating the user and uses that to request fraudulent changes on bank details. In most cases, the threat targets specific individuals within organizations and shares personalized emails with the intended victim. 

Recently the WithSecure Incident Response team has identified an increase on the Approach to estimating organizations' readiness in defending against ransomware campaigns and attacks using Attack Path Workflow Analysis.

The recent update by CrowdStrike which caused global issues highlights the need for all software vendors to ensure that their updates to customers are robust and fit for purpose. This applies to all software vendors, not just those delivering cybersecurity products.

Discover practical steps for midsized companies to achieve NIS2 compliance by the October 2024 deadline. Learn about the NIS2 Directive, its impact on essential and important organizations, and how to navigate the challenges. Explore minimum requirements, cybersecurity mindset shifts, and the value of external solutions.

In today's cybersecurity climate, and for the overstretched security teams dealing with it, Extended Detection and Response (XDR) and Managed XDR have emerged as a critical consolidation opportunity for organizations seeking comprehensive threat detection and response capabilities and fewer security tools to manage.