DarkSide ransomware was used in the attack against Colonial Pipeline Co.

DarkSide Ransomware Gang Says It Has Shut Down

Doug Olenick • May 14, 2021

The gang behind DarkSide ransomware, which U.S. authorities say was used in the attack against Colonial Pipeline Co., says it's closed its ransomware-as-a-service operation after losing access to part of its infrastructure.

Business Continuity Management / Disaster Recovery

Researcher Finds New Vulnerabilities in Cellebrite's Tools

Latest

COVID-19

A Cloud-Based Approach to Predicting Advanced Threats

Geetha Nandikotkur • May 14, 2021

To improve their ability to predict advanced threats, organizations should use a cloud-based model with advanced analytics powered by machine learning and artificial intelligence, says Harshil Doshi, regional director, India and SAARC, at Securonix.

Business Continuity Management / Disaster Recovery

Paying a Ransom: Does It Really Encourage More Attacks?

Doug Olenick • May 14, 2021

Some cybersecurity experts question the contentions of Speaker of the House Nancy Pelosi and another member of Congress, who say a $5 million ransom reportedly paid by Colonial Pipeline Co. after being hit by DarkSide ransomware would serve as a catalyst for attacks on other critical infrastructure providers.

Cybercrime

ISMG Editors’ Panel: Analysis of Colonial Pipeline Attack

Anna Delaney • May 14, 2021

Four editors at Information Security Media Group discuss the Colonial Pipeline attack, providing insights on the DarkSide ransomware gang and securing critical infrastructure.

Endpoint Security

Patched Wi-Fi Vulnerabilities Posed Risks to All Users

Prajeet Nair • May 14, 2021

A Belgian security researcher says he uncovered vulnerabilities that affect all modern Wi-Fi security protocols and most wirelessly connected devices, including smartphones, routers and IoT devices. Many tech companies have fixed the flaws to avoid leaks of user data.

Critical Infrastructure Security

Teardown: Inside the Colonial Pipeline Ransomware Attack

Anna Delaney • May 14, 2021

Diving into the Colonial Pipeline ransomware attack - culprits, impact, recovery, and the increasing political firestorm it’s triggered - is the focus of the latest edition of the ISMG Security Report. Security leaders weigh in on the attack's significance and potential long-term ramifications.

Fraud Management & Cybercrime

Biden's Cybersecurity Executive Order: 4 Key Takeaways

Scott Ferguson • May 13, 2021

By issuing a sweeping cybersecurity executive order on Wednesday, the Biden administration is attempting to take a critical step to address security issues that have come to light after recent cyberattacks. Here's an analysis of the order's key elements.

3rd Party Risk Management

Colonial Pipeline Attack: 'We're Simply Unprepared'

Tom Field • May 13, 2021

As former CISO of Pacific Gas & Electric, Bernie Cowens knows plenty about cyber securing the nation's critical infrastructure. He shares his informed opinion on the Colonial Pipeline ransomware attack and what public and private sector entities must do to shore up key defenses.

3rd Party Risk Management

Biden Signs Sweeping Executive Order on Cybersecurity

Doug Olenick • May 12, 2021

President Joe Biden signed an extensive executive order Wednesday that describes the government's plan to increase cybersecurity protection across the public and private sectors as well as secure the nation's infrastructure against the type of attack that targeted SolarWinds and its customers.

Critical Infrastructure Security

Colonial Pipeline Restarts Operations Following Attack

Scott Ferguson • May 12, 2021

Colonial Pipeline Co. announced Wednesday that it had restarted its operations following a ransomware attack last Friday. The company says it will take several days to restore all of its supply chain operations.

Critical Infrastructure Security

Colonial Pipeline Attack: 'All Monsters Are Human'

Tom Field • May 12, 2021

In April, Cybereason published a blog describing its research into the DarkSide ransomware strain that infected Colonial Pipeline this past week. Sam Curry, CSO of Cybereason, shares insights on DarkSide and the tactics behind the new breed of ransomware attacks.

Endpoint Detection & Response (EDR)

Tips on Implementing XDR

Suparna Goswami • May 11, 2021

When it comes to implementing XDR - cross-layered detection and response - enterprises need to be able to leverage their existing tools, says Aaron Sharp, cybersecurity consultant at Verizon Advanced Solutions.

Critical Infrastructure Security

Colonial Pipeline: 'A Global Day of Reckoning'

Tom Field • May 11, 2021

Gregory Touhill, the retired Air Force general and former federal CISO under President Obama, minces no words when he describes the Colonial Pipeline ransomware attack as a "global day of reckoning" for critical infrastructure protection.