Safeguard
Tag

ransomware

Safeguard articles tagged "ransomware" — guides, analysis, and best practices for software supply chain and application security.

87 articles

Incident Analysis

MGM Ransomware One Year Later: A Retrospective

A 2025 retrospective on the September 2023 MGM Resorts ransomware incident, what changed, what stalled, and how supply chain defenders should adjust.

May 21, 20264 min read
Incident Analysis

Kettering Health Interlock Ransomware: A 14-Hospital System Goes Dark

On May 20, 2025, Interlock ransomware encrypted Kettering Health across 14 Ohio hospitals. The actor sat in the network for 41 days before encryption. We unpack the dwell time and the recovery.

May 20, 20267 min read
Security

What Is a Possible Effect of Malicious Code?

Malicious code can steal data, encrypt files for ransom, hand attackers remote control, drain resources, and spread across a network. Here is the full range of effects and how to limit them.

May 17, 20266 min read
Vulnerability Response

CVE-2025-23121 in Veeam Backup & Replication: Patch Posture & SBOM Response

Veeam B&R authenticated RCE on the backup server scored CVSS 9.9. Backup infrastructure cannot be a soft underbelly. Here is the defender playbook.

May 12, 20267 min read
Incident Analysis

Hitachi Vantara Akira Ransomware: When the Recovery Vendor Goes Down

Akira ransomware forced Hitachi Vantara to take its own servers offline on April 26, 2025. We trace the attack pattern and the implications when an enterprise data-recovery provider becomes the incident.

Apr 24, 20267 min read
Incident Analysis

Patelco Credit Union RansomHub Attack: 1M Records, $7.25M Settlement

RansomHub maintained access to Patelco Credit Union's network from May 23 to June 29, 2024, ultimately exposing data on over one million members and triggering a $7.25M class settlement.

Apr 1, 20266 min read
Incident Analysis

American Water Cyberattack: Largest U.S. Utility Forced Offline

American Water Works discovered unauthorised network access on October 3, 2024, shutting down its MyWater customer portal and billing systems serving 14 million people across 24 states.

Mar 30, 20266 min read
Incident Analysis

Halliburton RansomHub Attack: $35M Loss in Oilfield Services

RansomHub encrypted Halliburton systems on August 21, 2024, exfiltrated proprietary oilfield data, and contributed to a $35M direct response cost disclosed in the company's Q3 10-Q.

Mar 28, 20266 min read
Vulnerability Analysis

What is Ransomware

Ransomware costs organizations $2.73M on average to recover from. Learn how it works, its top infection vectors, and how to defend against it.

Mar 25, 20267 min read
Incident Analysis

UnitedHealth Change Healthcare: 190 Million Update and the Long Tail

In January 2025 UnitedHealth revised the Change Healthcare breach count to 190 million people, the largest HIPAA breach in US history. We unpack what changed and the supply-chain lessons that still apply.

Mar 23, 20267 min read
Incident Analysis

CDK Global BlackSuit Ransomware: 15,000 Dealerships Offline for 2 Weeks

BlackSuit ransomware encrypted CDK Global's dealer-management cloud on June 18-19, 2024, crippling roughly 15,000 North American auto dealerships and triggering a reported $25M ransom payment.

Mar 22, 20266 min read
Incident Analysis

Ascension Health Black Basta Ransomware: 5.6M Patients Impacted

Black Basta encrypted Ascension's network on May 8, 2024 via a malicious file downloaded by an employee, diverting ambulances across 140 hospitals and ultimately notifying 5.6 million patients.

Mar 20, 20266 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.