Northwave Cyber Security

This #WorldBackupDay, we’re sharing why organisations must think beyond backups. With modern ransomware, data theft, pressure tactics, and reputational risk matter just as much as system recovery. Today’s threat actors: - steal data before locking systems - threaten public leaks (double extortion) - pressure executives and even employees directly So even with backups, you can still be extorted. 👉 Swipe through for practical steps to becoming truly resilient in 2026. Learn more about evolving ransomware tactics in our free whitepaper: https://lnkd.in/gjRVJiJM And, to start putting your cyber resilience to the test in realistic scenarios, get in touch with our cyber crisis readiness team: https://lnkd.in/eYvYnGyw #Ransomware #CyberSecurity #CyberResilience

Was für zwei unglaublich bereichernde Tage! ✨ Unser Media Cyber Forum bei Lensing Media in Dortmund ist nun zu Ende – und wir könnten nicht dankbarer sein für den intensiven und offenen Austausch mit unseren Gästen aus der Medien‑ und Kreativwirtschaft. Vor einigen Jahren haben wir dieses spezielle Format ganz bewusst entwickelt, weil wir gespürt haben, wie groß der Bedarf nach einem vertraulichen, fachlich tiefen Austausch in diesem Kreis ist. Genau das hat sich auch dieses Mal wieder eindrucksvoll bestätigt. Thematische Highlights und Diskussionen: - AI & Digitale Souveränität - NIS2 – konkret für Medienhäuser - Awareness als dauerhaft wirkungsvollste Maßnahme - Druckumgebungen als OT‑kritische Bereiche - Risiken in Legacy‑Systemen und der OT‑Lieferkette Der Austausch war praxisnah, voller konkreter Einblicke aus dem Tagesgeschäft unserer Teilnehmenden und geprägt von großer Offenheit. Ein herzliches Dankeschön geht an Jens‑Uwe Heß und Christian Liedtke von Lensing Media GmbH & Co. KG, die uns ihre Räumlichkeiten für dieses Event zur Verfügung gestellt haben. Danke, dass ihr alle dabei gewesen seid. 🙏

Northwave’s SOC is continuing to track malvertising campaigns that distribute trojanised work‑related digital tools. New, malicious applications are showing up regularly, often signed with developer certificates that initially appear legitimate. Here’s a quick look at a case we recently observed: ☠️ PDFSkillsApp - benign after initial download - later attempts execution via a scheduled task ‘UpdateTaskZT’  - opens connections to skillcli[.]com and pwrtail[.]com - tool and updater signed by “RED ROOT LTD”, linked to other malicious tools 🛡️ Defender for Endpoint blocked execution and quarantined files Additional similar cases reveal consistent reuse of Tactics, Techniques, and Procedures (TTPs) across samples. We keep these examples up to date in our IoC overview page: https://lnkd.in/ezQk2TCx In this recent article we detail how our investigation first exposed the cleverly disguised malware: https://lnkd.in/gvpFdMj9 We expect these convincing malvertisment campaigns to continue increasing in 2026. Scroll through for our recommendations on how to keep your organisation safe. 

Northwave is tracking an important shift in ransomware that organisations must be ready for. Threat actors are blending more into legitimate tooling and weaponising vulnerabilities before public exploitation is confirmed. We’ve detailed how our incident responders uncovered these tactics in a recent ransomware case. Scroll through below for our key takeaways for defenders.  Read the full case write-up here: https://lnkd.in/eQAhnp83   #Ransomware #Cybersecurity #CERT

We get it, running through your security check list every year can keep things tidy and help you meet ISO 27001 standards. But does this approach meaningfully strengthen your defences when cyberattacks could strike at any time? In this article, we break down the ways PDCA cycles fall short of supporting true resilience and what you can do instead: https://lnkd.in/gvDfHYT8

Recent high profile ransomware events expose something shocking: millions people are victims of cybercrime without ever being called "victim" and without doing anything wrong. They were simply a customer, patient, a citizen; now their private data is in the hands of criminals. In our latest article, Inge van der Beijl, Northwave’s General Manager of Innovation and cyber psychologist, examines the tremendous toll that ransomware takes on indirect victims and the inadequate support they receive. She outlines the steps we must take as a society to mitigate the harm that ransomware inflicts on innocent bystanders.  👉 Read the article here: https://lnkd.in/eDwCstDM 🇳🇱or check out Inge's original blog in Dutch, here: https://lnkd.in/evWUniAn

Recent high profile ransomware events expose something shocking: millions people are victims of cybercrime without ever being called "victim" and without doing anything wrong. They were simply a customer, patient, a citizen; now their private data is in the hands of criminals. In our latest article, Inge van der Beijl, Northwave’s General Manager of Innovation and cyber psychologist, examines the tremendous toll that ransomware takes on indirect victims and the inadequate support they receive. She outlines the steps we must take as a society to mitigate the harm that ransomware inflicts on innocent bystanders.  👉 Read the article here: https://lnkd.in/eDwCstDM 🇳🇱or check out Inge's original blog in Dutch, here: https://lnkd.in/evWUniAn

2026 is ushering in major changes to OT security in Europe.   NIS2, the Cyber Resilience Act, the revised EU Cybersecurity Act, and CER bring OT firmly into scope at the board level.  Swipe below for a clear explanation of what these regulations mean for OT.   🛡️ Want to understand your compliance gaps and how to fix them without disrupting production? Start with Northwave’s OT Security assessment. Learn more about our approach here: https://lnkd.in/ea2JG72V #OTSecurity #NIS2 #SCADA  

Happy Women´s Day 🩵 At Northwave, we see every day how different backgrounds, skills, and experiences strengthen our ability to solve complex challenges for our clients. On International Women’s Day and every day, we recognise the women across Northwave whose expertise helps drive our mission of ensuring a safe digital journey for all. #InternationalWomensDay #CyberSecurity #WomenInCyber #ConfidentCrew #ProudToBeANorthwaver

🤞 Your AI ambitions deserve better than crossed fingers Organisations are racing to unlock AI's potential - but without the right data security foundation, that innovation stalls at the compliance checkpoint. At the Microsoft Security Summit, we're keeping it practical. Visit our booth to discover how our free Data Security Workshops help you: 🔍 See clearly what data you actually have (and where AI might expose it) 💡 Act confidently with Microsoft Purview as your classification engine 🚀 Move faster from AI experimentation to AI deployment Meet our specialists for straight talk about Data Security, AI governance, and why Purview is much more than a compliance tool. Walk away with actionable next steps. Sign up here: https://lnkd.in/esT3SYn8