Chris Reffkin, Chief Security & Risk Officer at Fortra, authored an article for Manufacturing.net that outlines how technology and security leaders should react in the critical early moments of a ransomware attack. He explains why containment must remain the top priority, how leaders should communicate clearly and quickly with executives, and how to assess the impact with support from legal and incident response teams.

Ransomware groups are increasingly using AI powered bots to scale negotiations, compress timelines, and pressure incident response teams.

Josh Taylor examines how hacktivism has shifted from headline-grabbing stunts to something far more complex and harder to spot.

Fortra’s Nick Oram spoke with The Register about the latest ransomware group, Ox Thief, and its aggressive new tactics.

Microsoft's latest Patch Tuesday brings 57 fixes, including six actively exploited zero-days.

In an article for The Daily Upside, Mieng Lim discusses the biggest security gaps businesses face.

​​Dark Reading highlights Microsoft’s largest security update to date, featuring 159 patches addressing vulnerabilities across various technologies.

​​In a recent article from Infosecurity Magazine, Microsoft’s first Patch Tuesday of 2025 addressed eight zero-day vulnerabilities, three of which were under active exploitation.

Microsoft has confirmed three zero-day vulnerabilities actively targeting Windows 10, 11, and Server 2025.

Microsoft’s final Patch Tuesday updates for 2024 address 72 security flaws, including CVE-2024-49138, an actively exploited privilege escalation vulnerability in the Windows Common Log File System (CLFS) Driver.

​​Tyler Reguly is quoted in TechRepublic discussing Microsoft's December Patch Tuesday.

​​Krebs on Security's latest article highlights Microsoft's December 2024 Patch Tuesday, which addresses over 70 security vulnerabilities, including an actively exploited zero-day flaw in the Windows Common Log File System (CLFS).

Microsoft’s latest Patch Tuesday update addresses several critical vulnerabilities, with experts urging immediate action to protect Windows systems from active cyberattacks.

​​In Forbes' recent coverage of Microsoft’s November 2024 Patch Tuesday updates, Fortra’s Associate Director of Security Research, Tyler Reguly, offered expert insights into the severity of two new vulnerabilities impacting Windows OS users.

Fortra’s Tyler Reguly shares his insights in Dark Reading on Microsoft’s adoption of the Common Security Advisory Framework (CSAF).

​​Fortra's security research team has identified a novel exploit chain, tracked as CVE-2024-6769, which allows attackers to bypass Windows User Access Control (UAC) and escalate privileges to gain full system control.

​​Fortra researchers are urging organizations to be vigilant about potential risks associated with a vulnerability affecting Microsoft systems.​

​​CSO covered Fortra’s disclosure of a Microsoft privilege escalation issue that allows attackers to bypass UAC prompts. Fortra's Tyler Reguly explained that this bypass removes key security checks, posing a risk. Microsoft disagrees, calling it a convenience issue, but the debate continues.​

The Futurum Group’s analysis of Black Hat 2024 highlights how the growing complexity of cybersecurity tools is driving the need for streamlined platforms. Fortra is mentioned alongside other leading vendors for offering solutions that reduce tool sprawl, cut costs, and close security gaps.Originally published by The Futurum Group.Excerpt: "The cybersecurity market has long been driven by user...

Microsoft has identified and confirmed a fix for a critical security vulnerability introduced by a recent Windows 10 update.