56% of all Microsoft critical vulnerabilities could have been mitigated by removing admin rights, according to the 2021 BeyondTrust Microsoft Vulnerabilities Report.
ransomware
Google Won’t Kill the URL After All


Plus: A Colonial Pipeline update, inside details of the FBI’s Anom caper, and more of the week’s top security news.
As Ransomware Demands Boom, Insurance Keeps Paying Out


While major carriers like AXA have backed away from covering ransoms, don’t expect the industry at large to break the vicious cycle.
A Mystery Malware Stole 26 Million Passwords From Windows PCs


The credentials were part of a trove containing 1.2 terabytes of sensitive data extracted between 2018 and 2020.
Hackers Stole a Ton of EA Data—Including Valuable Source Code


The video game publisher confirmed the breach, which could be a boon to the shadowy world of cheat-makers.
Microsoft Exchange Server vulnerabilities, ransomware lead spring 2021 cyberattack trends

Cisco’s Talos team said 35% of incidents led back to Microsoft Exchange Server vulnerabilities reported early in 2021, but new ransomware families have been appearing to fill the Emotet hole, too.
Ransomware Hit Another Pipeline Firm—and 70GB of Data Leaked


LineStar Integrity Services was hacked around the same time as Colonial Pipeline, but radical transparency activists have brought the attack to light.
How to Protect Your Files From Ransomware


It’s a growing threat for individual users and businesses alike—but there are ways to protect yourself.
The FBI’s Director Compares Ransomware Threat to 9/11


Plus, a Supreme Court decision on a controversial anti-hacking law, a WhatsApp walk-back, and more of the week’s top security news.
Ransomware Hits a Food Supply Giant—and Underscores Dire Risk


Hackers targeting JBS USA have disrupted meat processing facilities around the world, just one month after the Colonial Pipeline attack caused fuel distribution havoc.