████ # This file was generated bot-o-matically! Edit at your own risk. ████
Ransomware Attack Pushes City of Oakland Into State of Emergency [securityweek.com]:
The city of Oakland, California issued a local state of emergency late Tuesday as a result of the ongoing impact following a ransomware attack [securityweek.com] that first hit city IT systems on Wednesday, February 8.
According to an update, the city “continues to experience a network outage that has left several non-emergency systems including phone lines within the City of Oakland impacted or offline.”
City officials say the declaration of a local state of emergency (PDF [amazonaws.com]) allows Oakland to expedite the procurement of equipment and materials, activate emergency workers if needed, and issue orders on an expedited basis to help restore systems and bring services back online.
While voicemail and other non-emergency services were disrupted or taken offline, no critical or emergency services such as 911 and fire departments have been impacted.
City officials have not provided any details on the type of ransomware used, any monetary amounts related to a ransom demand, nor did they say whether the incident has resulted in any data theft.
Ransomware attacks targeting US cities and counties are not new. Over the past several years, numerous ransomware attacks against cities and countries have led to critical services being shut down and have also impacted election systems and school districts.
While some cities paid the ransom – including Florence City [securityweek.com], Lake City [securityweek.com], and Riviera Beach City [securityweek.com] – others chose not to pay, in some cases with disastrous results. The City of Atlanta, which refused to pay a $51,000 ransom, spent millions to recover the impacted systems [securityweek.com].
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
" rel="url2html-2327016">https://www.securityweek.com/application-security-protection-for-the-masses/">
While there are many routes to application security, bundles that allow security teams to quickly and easily secure applications and affect security posture in a self-service manner are becoming increasingly popular. (Joshua Goldfarb) [securityweek.com]
" rel="url2html-2327016">https://www.securityweek.com/dealing-with-the-carcinization-of-security/">
Varied viewpoints as related security concepts take on similar traits create substantial confusion among security teams trying to evaluate and purchase security technologies. (Marc Solomon) [securityweek.com]
" rel="url2html-2327016">https://www.securityweek.com/stop-collaborate-and-listen-disrupting-cybercrime-networks-requires-private-public-cooperation-and-information-sharing/">
No one combatting cybercrime knows everything, but everyone in the battle has some intelligence to contribute to the larger knowledge base. (Derek Manky) [securityweek.com]
" rel="url2html-2327016">https://www.securityweek.com/how-the-atomized-network-changed-enterprise-protection/">
Our networks have become atomized which, for starters, means they’re highly dispersed. Not just in terms of the infrastructure – legacy, on-premises, hybrid, multi-cloud, and edge. (Matt Wilson) [securityweek.com]
" rel="url2html-2327016">https://www.securityweek.com/mapping-threat-intelligence-to-the-nist-compliance-framework-part-2/">
How threat intelligence is critical when justifying budget for GRC personnel, and for threat intelligence, incident response, security operations and CISO buyers. (Landon Winkelvoss) [securityweek.com]
Cybercrime Malware & Threats Cyberwarfare Ransomware IoT Security
https://www.securityweek.com/ransomware-attack-pushes-city-of-oakland-into-state-of-emergency/">
href="whatsapp://send?text=Ransomware Attack Pushes City of Oakland Into State of Emergency
https://www.securityweek.com/ransomware-attack-pushes-city-of-oakland-into-state-of-emergency/">
href="https://www.securityweek.com/cdn-cgi/l/email-protection#58672b2d3a323d3b2c650a39362b37352f392a3d78192c2c393b3378082d2b303d2b781b312c2178373e781739333439363c7811362c37780b2c392c3d78373e781d353d2a3f3d363b217e393528631a171c016511783e372d363c782c30312b78392a2c313b343d7831362c3d2a3d2b2c31363f7839363c782c30372d3f302c78373e782b30392a31363f78312c782f312c307821372d76781b303d3b3378312c78372d2c6278302c2c282b6277772f2f2f762b3d3b2d2a312c212f3d3d33763b3735772a39362b37352f392a3d75392c2c393b3375282d2b303d2b753b312c2175373e753739333439363c7531362c37752b2c392c3d75373e753d353d2a3f3d363b2177">
Cybercrime
The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.
Management & Strategy
Industry professionals comment on the recent disruption of the Hive ransomware operation and its hacking by law enforcement.
Cybercrime
The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.
Ransomware
US government reminds the public that a reward of up to $10 million is offered for information on cybercriminals, including members of the Hive...
Ransomware
The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.
Cybercrime
More than 3,800 servers around the world have been compromised in recent ESXiArgs ransomware attacks, which also include an improved process.
Malware & Threats
Unpatched and unprotected VMware ESXi servers worldwide have been targeted in a ransomware attack exploiting a vulnerability patched in 2021.
Cybercrime
Cybercriminals earned significantly less from ransomware attacks in 2022 compared to 2021 as victims are increasingly refusing to pay ransom demands.
klaus-told-us-in-advance dept.