56% of all Microsoft critical vulnerabilities could have been mitigated by removing admin rights, according to the 2021 BeyondTrust Microsoft Vulnerabilities Report.
ransomware
Google Won’t Kill the URL After All

Plus: A Colonial Pipeline update, inside details of the FBI’s Anom caper, and more of the week’s top security news.
As Ransomware Demands Boom, Insurance Keeps Paying Out

While major carriers like AXA have backed away from covering ransoms, don’t expect the industry at large to break the vicious cycle.
A Mystery Malware Stole 26 Million Passwords From Windows PCs

The credentials were part of a trove containing 1.2 terabytes of sensitive data extracted between 2018 and 2020.
Hackers Stole a Ton of EA Data—Including Valuable Source Code

The video game publisher confirmed the breach, which could be a boon to the shadowy world of cheat-makers.
Microsoft Exchange Server vulnerabilities, ransomware lead spring 2021 cyberattack trends
Cisco’s Talos team said 35% of incidents led back to Microsoft Exchange Server vulnerabilities reported early in 2021, but new ransomware families have been appearing to fill the Emotet hole, too.
Ransomware Hit Another Pipeline Firm—and 70GB of Data Leaked

LineStar Integrity Services was hacked around the same time as Colonial Pipeline, but radical transparency activists have brought the attack to light.
How to Protect Your Files From Ransomware

It’s a growing threat for individual users and businesses alike—but there are ways to protect yourself.
The FBI’s Director Compares Ransomware Threat to 9/11

Plus, a Supreme Court decision on a controversial anti-hacking law, a WhatsApp walk-back, and more of the week’s top security news.
Ransomware Hits a Food Supply Giant—and Underscores Dire Risk

Hackers targeting JBS USA have disrupted meat processing facilities around the world, just one month after the Colonial Pipeline attack caused fuel distribution havoc.