Extortion: articles and guides

PwC has confirmed a cybersecurity incident at a third-party vendor that hosts its employee learning records, after the Everest extortion group listed PwC and claimed ~590.69 GB of data. What PwC actually confirmed, what Everest claims (still unverified), and the third-party / LMS lessons for security leaders.

A Semperis report (via The Register) says 37% of ransomware attacks now include threats against staff. The numbers, the caveats and the IR impact.

ShinyHunters claims a PeopleSoft zero-day on apply.fbijobs.gov let it steal 2–3TB from FBI GovCloud. What’s confirmed, what isn’t, and what to do now.

An evergreen defensive brief on Clop (Cl0p) ransomware — its hallmark mass exploitation of managed file-transfer zero-days, double extortion via a leak site, and a practical response plan if your organisation is named.

A plain-language explainer of the ransomware economy — how extortion payments flow from victim to affiliate to operator, the role of RaaS, negotiation, cryptocurrency rails and cashing out — written for defenders.