Articles, write-ups, and musings concerning the world of cybersecurity and technology.
Ransomware isn't just after file servers anymore. Why attackers target VMware ESXi, what gets encrypted, how the encryption works, and two real campaigns that hit hundreds or thousands of hosts.
How the 2017 NotPetya ransomware attack crippled Maersk's global shipping operations, and the real story of the domain controller recovery that saved the company's network.
A few incidents from earlier this year are worth a quick look, less for drama and more because they're useful, concrete examples of how different "something went wrong" actually looks in practice.
When ransomware locks up a hospital, the hardest question isn't technical. It's whether to pay the people who did it.
Cybersecurity professionals face constant ethical decisions, from protecting critical information to navigating complex questions like ransomware payments. The real challenge isn't knowing what's right: it's being prepared to act ethically when circumstances make the answer far from simple.
JPMorgan Chase spends roughly $600 million a year on cybersecurity. Meanwhile, just 5% of small business owners surveyed in 2022 called it their biggest risk. The information for this post was gathered and sourced in 2024 when most of the content was written. Though the...
