by Jesper Kråkhede, Sweden
Posted in Security Architecture, Technology on Jun 10th, 2021
I had been looking forward to this vacation for months. Bags packed, plans made. Then the phone rang. A service provider in northern Europe had been hit by ransomware, and not in a small way. More than 50 Active Directory forests, belonging to the provider and its customers, were lost. Encrypted or destroyed, all at […]
Posted in Business, Security Architecture on May 30th, 2021
In my previous post I wrote about a service provider that lost more than 50 Active Directory forests in one attack. This one is for management, and especially for those who outsource IT operations. When you outsource your IT you don´t outsource your risk. You change it. Your security now depends on how the provider […]
Posted in Business, Security Architecture on Dec 19th, 2019
On the 4th of November one of Spain´s largest IT consultancies was hit by ransomware. The employees were told to keep their computers turned off and the company disconnected the network to its clients. Some of their customers cut the connections from their side as well, just to be on the safe side. Imagine being […]
Posted in Business on Oct 19th, 2019
After Texas I got the same question from a few managers: Could this happen to us? The honest answer is: Read your outsourcing contract and you´ll know. Most contracts I see measure uptime, response times and price per server. Very few say anything about how the provider protects the access they have to your environment. […]
Posted in Security Architecture, Technology on Sep 19th, 2019
On the 16th of August 22 local governments in Texas were hit by ransomware on the same day. The common thread was not a clever zero-day. They shared the same IT service provider and the attackers came in through the provider´s remote management tool. Think about what such a tool is. Something that can logon […]