ransomware

How UK manufacturers can run a penetration test across IT and connected production systems without stopping the line: what it covers, who should do it, scoping and cost.

A plain, ordered guide to the first hours and days after a ransomware attack: isolate, report, investigate, recover safely and decide on payment.

The Synnovis attack hit London hospitals through one supplier. Here are five questions that show whether your own suppliers could take you down.

US prosecutors say MonsterCloud told clients it could decrypt their files, then quietly paid the criminals and kept the difference. Here is what to ask before you hire help.

A ransomware readiness assessment checks whether you could stop, contain and recover from an attack. Here is what it covers and the questions to ask first.

Researchers found Aurora ransomware affiliates using the Cursor AI coding assistant to plan and run intrusions against at least ten organisations, exploiting the same Active Directory weaknesses pen testers have …

A PaperCut vulnerability chain let attackers bypass login and run code on print servers, and the vendor needed a second emergency patch after the first one was bypassed.

Ransomware isn’t getting more sophisticated, it’s getting more industrialised. Here’s how the criminal supply chain behind it works, and why the same basic gaps keep letting it in.

WilmerHale paid at least $18 million and Goodwin Procter around $10 million to the Luna Moth extortion group, which broke in using phone calls and fake IT visits rather than …

A record 93 active ransomware groups sounds alarming, but Q2 2026 data suggests ransomware market fragmentation is a sign of pressure, not strength.