Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

sophos

The State of Ransomware in Retail 2026

Nov 10, 2026 By Mitch Pronschinske In Sophos
Insights from 217 IT and cybersecurity leaders across the retail sector in 17 countries whose organizations were hit by ransomware in the past year. This year’s State of Ransomware in Retail report showed significant improvement in the sector’s ransomware outcomes mixed with a few concerning new trends. Retail organizations paid less money to attackers than any other sector and had the fastest recovery times of any year in the survey’s history.
Read Post
sophos

The State of Ransomware in Financial Services 2026

Nov 5, 2026 By Mitch Pronschinske In Sophos
This year’s State of Ransomware survey showed financial services and insurance providers handing over less money to attackers than it did a year ago. Median ransom demands fell by two-thirds and median payments continued a three-year slide. The recovery story was less positive. The sector took a week longer to recover than last year, and its typical recovery bill is double the median across all sectors.
Read Post

New AI Security Podcast | Authorized Intelligence Trailer

Nov 2, 2026 By Rubrik In Rubrik
Authorized Intelligence is Rubrik's new podcast on AI security and resilience in the age of frontier AI, hosted by AI risk management expert Cal Al-Dhubaib. Each episode brings you into the room with the frontier model red teamers, CISOs, and AI policymakers navigating the risks and rewards of frontier AI. The first three episodes drop November 5. Subscribe to stay updated and follow Authorized Intelligence wherever you get your podcasts.
View Video
How Layered Cybersecurity Stops Ransomware and Data Breaches in Mid-Sized Businesses

How Layered Cybersecurity Stops Ransomware and Data Breaches in Mid-Sized Businesses

Nov 2, 2026 By SecuritySenses In SecuritySenses
A layered cybersecurity strategy protects mid-sized businesses by building multiple overlapping defenses, ensuring that if hackers breach one layer, another stops them before data is stolen or encrypted. Single-point solutions fail against modern cyber extortion, leaving growing organizations severely vulnerable. Today, threat actors aggressively target smaller companies that lack enterprise-grade defenses. In fact, an alarming 88% of SMB breaches involve ransomware, making small businesses more than twice as likely to face an attack compared to large enterprises.
Read Post
cyberint

Expiro Malware: File Infection, Credential Theft, and Persistent Access

Nov 1, 2026 By Adi Bleih In Cyberint
Expiro (also known as Xpiro) is a modular file-infector and information-stealing malware family that has been active since around 2010 and remains a persistent threat in various regions, particularly in Asia, Eastern Europe, and Latin America. Unlike typical standalone trojans, Expiro spreads by infecting executable files on the victim system, appending its malicious code while preserving original functionality.
Read Post
WatchGuard

How to Stop a Malware Campaign That Can Shift Its Infrastructure

Oct 30, 2026 By Euler Neto In WatchGuard
MSPs are used to blocking malicious domains, detecting suspicious IP addresses, and continuously updating their defenses against emerging threats. However, what happens when attackers can shift their infrastructure in near real-time without interrupting the campaign? The ErrTraffic campaign, analyzed by the WatchGuard Threat Lab, provides an example of how malware distribution techniques are evolving.
Read Post

Rubrik MSP Unscripted Ep 9 - Featuring Andrew Eva

Oct 27, 2026 By Rubrik In Rubrik
What does it take to build and scale a successful managed services business? In this episode of MSP Unscripted, Nawaz Ali sits down with Andrew Eva, Chief Operating Officer at Assured Data Protection, to discuss the evolving MSP landscape, shifting customer expectations, and the challenges of building scalable, profitable managed services. They explore how MSPs are moving beyond traditional backup toward cyber resilience, the importance of operational efficiency, and how AI and automation are shaping the future of managed services.
View Video
cyberint

Grandoreiro Malware: An Evolving Threat to Banking Customers

Oct 25, 2026 By Adi Bleih In Cyberint
Grandoreiro is a malware family classified as a backdoor and spyware, first seen in April 2020, and is consistently described as a banking trojan focused on credential theft, remote fraud enablement, and control of compromised Windows systems. It has remained active through recurring campaigns, including a renewed wave in May and June 2026 that concentrated heavily on Latin America, especially Mexico, while also reaching parts of Europe and North America.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.