Video: What defenders can learn from past ransomware attacks
Summary: Cisco Talos Incident Response released a "Stories from the Field" video in which Matt Aubert discusses ransomware infections he has observed in real time and what defenders can learn from others' mistakes and recovery. The accompanying text states that phishing remained the leading initial access technique, the percentage of ransomware and pre-ransomware cases increased, and finance and public administration tied as the top-targeted industries.
Bottom line: Phishing is still the way in, and the share of ransomware and pre-ransomware cases rose, with finance and public administration tied as the most-targeted industries - so the incident your peers are recovering from is likely already addressed to your users.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026