Spotlight: When Ransomware Comes Calling

This podcast transcript features an incident response manager discussing the evolving ransomware landscape: increasing use of double/triple extortion, living-off-the-land techniques that evade EDR, supply-chain risks (e.g., SolarWinds/Kaseya), and the operational gaps—lack of talent, monitoring, logging, and retention—that let attacks escalate. Practical advice includes isolating affected systems rather than restoring/wiping them, retaining forensic data and logs, preparing playbooks and external IR support in advance, and ensuring 24/7 visibility to detect and contain actors before encryption or data exfiltration.