It is a scorching matter, the outdated “pay or do not pay” for hackers to not leak your information. Since recording this a number of days in the past, we have had Grafana go along with the “no pay” strategy, and I’ve seen a raft of commentary round different corporations reaching “agreements”, which is a a lot politer method of claiming “we paid extortionists a ransom”. I am involved in regards to the normalisation of ransom funds, and utilizing language that deflects from the prison nature of it’s a large a part of that. Instructure’s precise phrases had been that they “reached an settlement with the unauthorised actor concerned”, which actually waters down the severity of the entire thing. It seems to be like, in the intervening time, “pay or leak” is the brand new norm… together with nonsensical statements like “the info was returned to us” 🤷♂️
Weekly replace
