by Jesper Kråkhede, Sweden
Posted in Security Architecture, Technology on Jun 10th, 2021
I had been looking forward to this vacation for months. Bags packed, plans made. Then the phone rang. A service provider in northern Europe had been hit by ransomware, and not in a small way. More than 50 Active Directory forests, belonging to the provider and its customers, were lost. Encrypted or destroyed, all at […]
Posted in Security Architecture, Technology on Oct 4th, 2020
Autumn has come to Sweden. The leaves are turning yellow and red and falling one by one. Looking at the incidents this year, I can´t help seeing the same pattern among companies. They fall one after another, and nearly always for the same reasons. A remote access server without a second factor. Domain admins logging […]
Posted in Security Architecture, Technology on Jan 5th, 2020
Every time I help a customer recover from ransomware I ask myself what actually made the difference. After a few years the answer is surprisingly short. Three things: immutable backups, a bad network and a bad memory. Immutable backups first. A backup the attacker can reach is not a backup, it is just another target. […]