Intelligence-driven disruption of ransomware campaigns
Summary: A Cisco Talos piece co-authored with the Cyber Threat Alliance's Neil Jenkins describes the Ransomware Task Force's recommendation for a sustained, intelligence-driven, whole-of-government anti-ransomware campaign, issued days before the Colonial Pipeline attack. The authors argue the private sector has largely been left to defend itself and that a law enforcement-centric approach has failed to deter actors hiding in countries that do not cooperate with law enforcement.
Key Takeaway: The authors state plainly that when the only deterrent society offers is "you'll go to jail" and the actors sit in countries unwilling to cooperate, there is no deterrence - and that if disruption is not paired with raising the security baseline, new actors will simply step into the gap.
Read the original at Cisco Talos ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026