Why Whac-A-Mole is not a strategy for defending against ransomware attacks

Recently, I participated in a training exercise where a team of hackers (the red team) simulated an attack on an organization’s infrastructure, and a team of Cyber experts (the blue team) was tasked with responding to the incident and restoring normal operations. As the red team inflicted its initial attack, the blue team jumped on their monitoring tools and detection technology, scrambling to quickly quell the threat and fend off the attackers. Their natural response was to put up one …

attack attacks blue blue team business security cyber defending exercise experts hackers incident infrastructure operations organization ransomware ransomware attacks red team strategy team training whac-a-mole