Blog

Cybersecurity Regulatory Landscape in Switzerland A Primer for Business
Blog

Cybersecurity Regulatory Landscape in Switzerland: A Primer for Business 

By Kirsten Doyle on Thu, 08/28/2025
Switzerland is famous for being neutral, discreet, and self-contained. And while that reputation holds in the digital world, too, in the immortal words of Bob Dylan, “the times they are a changin.” To stay in business, even Switzerland must meet data privacy standards set outside of its borders. Cyber threats are growing in volume and sophistication, and regulations need to adapt accordingly. For...
cephalus
Blog

Cephalus ransomware: What you need to know

By Graham Cluley on Wed, 08/27/2025
What is Cephalus?Cephalus is a relatively new ransomware operation that emerged in mid-2025, and has already been linked to a wave of high-profile data leaks. Like many other ransomware attacks, Cephalus not only encrypts but also steals sensitive data - with victims named-and-shamed on a dedicated leak site hosted on the dark web.Where does it get the name Cephalus from?Cephalus is a character...
The Impact of CMMC 3.0 on Government Contractors
Blog

The Impact of CMMC 3.0 on Government Contractors

By Katrina Thompson on Tue, 08/26/2025
With 55% of government contractors expecting their next job to include a CMMC requirement, adhering to the latest, most updated version of “CMMC 3.0" is imperative. According to a recent US Department of Defense (DoD) memo, such an update may be on the horizon.Here are the facts, and what they could mean for certification hopefuls.What is CMMC 3.0?First, let’s get a few things straight. The CMMC 2...
Imitation
Blog

Imitation May Be the Highest Form of Flattery, But Brand Impersonation Is Not

By Heather Wiederhoeft on Mon, 08/25/2025
Imitation is often the clearest sign your brand is making an impact. Whether through a viral moment or a market-defining launch, your success doesn’t just capture attention. It sets the pace, inspiring both competitors and collaborators to follow your lead.But when imitation crosses the line into online brand impersonation, the effects shift from flattering to potentially disastrous. Deceptive...
Online Impersonation
ransomware_pivot_from_hospital_to_high_street
Blog

Ransomware Pivot: From Hospitals to High Street

By Katrina Thompson on Mon, 08/25/2025
Last year, headline news of staggering ransomware attacks was inescapable. But according to new research by Comparitech, those numbers may be slowing down.By studying 211 ransomware attacks on the healthcare sector in H1 2025, the firm noted only a 4% increase year-over-year. While this still represents a modest improvement, figures for other “easier/more lucrative” industries were much higher,...
Cybersecurity Regulatory Landscape in Japan A Primer for Business
Blog

Cybersecurity Regulatory Landscape in Japan: A Primer for Business

By Kirsten Doyle on Fri, 08/22/2025
Cybersecurity in Japan has always had a cultural element, infused with precision, preparation, responsibility, and accountability. Today, it’s also a matter of national security and global trust. As threats intensify and alliances shift, Japan has responded with structured policy and determination. For companies operating in or with ties to Japan, cybersecurity compliance is part of the operating...
Compliance
Understanding the NIS2 Directive: What It Means for Business
Blog

Understanding the NIS2 Directive: What It Means for Business

By Katrina Thompson on Thu, 08/21/2025
What is the NIS2 Directive?The NIS2 (Network and Information Security 2) Directive is the European Union’s updated, overarching cybersecurity legislation governing cybersecurity in 18 critical sectors.NIS2 requires each EU Member State to adopt a national cybersecurity strategy, ensure the proper critical entities comply, and include risk management measures such as:Supply chain...
Compliance
warlock-ransomware
Blog

Warlock ransomware: What you need to know

By Graham Cluley on Wed, 08/20/2025
What is the Warlock?Warlock is a ransomware operation that emerged in 2025, combining the traditional "double extortion" tactics of encrypting victims' files so they cannot be accessed, and threatening to release data stolen from the company's network.Nasty, but sadly not that unusual.Unfortunately, that’s right. The Warlock ransomware group seems to have stepped up its attacks in recent months,...
Waiting to Patch
Blog

Waiting to Patch? Attackers Won’t Wait to Exploit.

By Cybersecurity Experts at Fortra on Wed, 08/20/2025
In the time it takes for some companies to determine which vulnerabilities to patch, attackers will have already launched their malicious strike.In cybersecurity, we see this all the time. A major company was breached through a vulnerability that had a patch available for over 6 months. The patch wasn’t applied due to internal process delays, competing priorities, and fear of system downtime....
Vulnerability Management
back_to_basics_why_checkbox_compliance_isnt_enough
Blog

Back to Basics: Why Checkbox Compliance Isn’t Enough

By David Henderson on Tue, 08/19/2025
Compliance doesn’t protect you. It simply outlines the defenses that should have been in place. And when you’re not compliant, the gap often only comes to light after something’s gone wrong. In today’s evolving threat landscape, passing an audit isn’t enough. Security leaders need continuous visibility, actionable insights, and real-world accountability, long before an auditor ever shows up. It’s...
Compliance
cybersecurity_regulatory_landscape_in_singapore_a_primer_for_businesses
Blog

Cybersecurity Regulatory Landscape in Singapore: A Primer for Businesses

By Kirsten Doyle on Mon, 08/18/2025
The world is more connected than ever, and laws cannot afford to lag behind threats. With this in mind, Singapore has built a legal and organizational backbone for cybersecurity that requires precision and constant readiness. Every company in the city-state (and even those beyond its borders handling the personal data of its people) must meet these strict rules or face the consequences. Core...
Compliance
Blog

BEC Global Insights Report: September 2025

By John Farina on Fri, 08/15/2025
The monthly Global BEC Insights Report from Fortra presents a comprehensive analysis of the latest tactics, techniques, and procedures (TTP) employed by BEC threat actors. This report draws on extensive intelligence gathered from hundreds of active defense engagements conducted throughout the month. Key insights include geolocation data, attack volume, and the variety of scams, such as payroll diversion and advance fee fraud. The report also highlights the use of gift cards in scams, the requested amounts in wire transfer fraud, and the banks and webmail providers frequently targeted by attackers. These findings provide a critical understanding of the evolving BEC threat landscape.
Blog

BEC Global Insights Report: August 2025

By John Farina on Fri, 08/15/2025
The monthly Global BEC Insights Report from Fortra presents a comprehensive analysis of the latest tactics, techniques, and procedures (TTP) employed by BEC threat actors. This report draws on extensive intelligence gathered from hundreds of active defense engagements conducted throughout the month. Key insights include geolocation data, attack volume, and the variety of scams, such as payroll diversion and advance fee fraud. The report also highlights the use of gift cards in scams, the requested amounts in wire transfer fraud, and the banks and webmail providers frequently targeted by attackers. These findings provide a critical understanding of the evolving BEC threat landscape.
Blog

BEC Global Insights Report: July 2025

By John Farina on Fri, 08/15/2025
The monthly Global BEC Insights Report from Fortra presents a comprehensive analysis of the latest tactics, techniques, and procedures (TTP) employed by BEC threat actors. This report draws on extensive intelligence gathered from hundreds of active defense engagements conducted throughout the month. Key insights include geolocation data, attack volume, and the variety of scams, such as payroll diversion and advance fee fraud. The report also highlights the use of gift cards in scams, the requested amounts in wire transfer fraud, and the banks and webmail providers frequently targeted by attackers. These findings provide a critical understanding of the evolving BEC threat landscape.