New guidance from the FBI contains IOCs and technical details on how the ransomware spreads.

The cost is skewed by massive fines but a new survey shows there was still a steady increase in the number of GDPR fines across the EU last year.

The Linux PolicyKit bug, $770 million lost in social media scams, and more - catch up on the infosec news of the week with the Friday Five!

The Justice Department announced this week that it arrested two involved with deploying ransomware and that it seized $6.1 million in ransom payments.

The new security audit self-assessment tool is designed to help organizations better understand how well they're equipped to defend and recover from ransomware.

A recent report looked at the average costs incurred by the healthcare sector following a ransomware attack.

A ransomware attack against one of San Diego's main healthcare systems has lasted for 12 days so far, resulting in lab test delays and forcing doctors and nurses to use pen and paper.

A ransomware attack late last week took down a major U.S. pipeline but the company says its making incremental progress bringing things back online.

The figure, about 272.5 million euros, corresponds to 281,000 data breach notifications issued by regulators across Europe since GDPR went into effect.

In a recent FBI note the agency outlined how DoppelPaymer ransomware attacks have impacted critical infrastructure - and the lengths the attackers have gone to get paid.

Not only is the average ransom payment going up, so are cases in which the attackers threaten to release a company's stolen data.

The full scope of the incident isn't yet known but as a result, facilities across the U.S. have been left without access to computer systems.

A new framework published by the UK Information Commissioner's Office can help organizations comply with the GDPR's accountability requirements.

Data protection authorities around the world are reiterating that in most scenarios, data protection laws do not stand in the way of the provision of healthcare and the management of public health issues.

A new report that aggregates post-GDPR data breach statistics in Europe suggests new, higher fines are to come in 2020.

The European Data Protection Supervisor has issued a preliminary opinion on how data protection obligations should factor into scientific research in the EU.

The General Data Protection Regulation (GDPR) has become the norm for data privacy in the European Union. What have we learned in the time since its been in effect? We asked 24 data privacy and compliance experts.

The U.K.'s data protection authority recently issued new draft guidelines to sharing data while maintaining compliance.

The massive fine comes one day after the ICO's fine of British Airways.

The fine would be the largest against a company post-GDPR and roughly 1.5 percent of the company's annual revenue.