While I’m on security, the UK government is explicitly asking to be notified about ransomware. Steve Barclay, Lead Minister for Cyber Security, told the National Cyber Security Centre’s (NCSC) CyberUK conference in Newport, Wales, specifically, “I would encourage any organization that suffers an attack to come forward,” he continued, adding, “By doing so, you will help us to strengthen our individual and collective resilience as we learn from each other.”
At the same event, Rob Joyce, director of cybersecurity at the National Security Agency (NSA), revealed that the number of ransomware attacks had gone down in recent months because sanctions against Russia are making it harder for cybercriminals to organize attacks and receive ransom payments. He noted that in the past month or two, ransomware is actually down.
Broader context – in an April consumer survey by NordVPN, 93% of Americans believe the threat of cyberwarfare is a concern, and only 19% were 100% confident in the government’s ability to protect citizens.
Why do we care?
Good news on the reprieve from ransomware and telling that government action on sanctions makes a difference. Let’s not forget this lesson – and advocate for more push to crack down on the criminal element.
I continue to think about how many providers are ready for that call to report. Do you know how to report? What’s required? What information you’ll be asked for?