AXA axes ransomware insurance. Who’s next? - TechBeacon

End of the beginning? Huge multinational insurance firm AXA Group has announced it will no longer write cyber-insurance policies that pay out extortionate #ransoms to hackers. So far, this applies only to France, but observers wonder if the strategy will spread.

As the #French say, /pour encourager les autres/. And, yes, it might well encourage other insurers to get serious about this knotty problem.

In this week’s #SecurityBlogwatch, we’re careful with that AXA, Eugene. At @TechBeaconCom: https://t.co/5xFlrCRVrl

— @Richi 😷 Jennings (@RiCHi) May 13, 2021

Rail Firm Staff Fail ‘Bonus’ Phishing Test, Chaos Ensues - Security Boulevard

COVID Pretext FAIL: “Click here to claim your bonus pay,” said email from a British train company, signed by the firm’s chief. Hundreds of @WestMidRailway employees did exactly that. Because of course they did.

What a kick in the teeth for staff who’ve been putting their health on the line since early 2020. OTOH, phishing exercises are an established part of staff #infosec … errm … training. In today’s #SBBlogwatch, we’re deeply conflicted. At @SecurityBlvd: https://t.co/0kxSnG6mU0

— @Richi 😷 Jennings (@RiCHi) May 12, 2021

Colonial Pipeline FAIL: Ransomware Gang Threatens Gas Supplies - Security Boulevard

Something-Something #DarkSide: Carrying almost half of the east coast’s road and jet fuel, the Colonial Pipeline is critical infrastructure—of that there’s no doubt. But ransomware scrotes have stolen and encrypted 100 GB of data, crippling the pipeline’s operation.

Prepare for inflated gas prices, long lines at the pumps and canceled flights.

In today’s #SBBlogwatch, we angrily buy a used Nissan Leaf. At @SecurityBlvd: https://t.co/ZddHFEf1dL

— @Richi 😷 Jennings (@RiCHi) May 10, 2021