Key takeaways

• News this week of two significant cyber incidents that garnered huge sums of cash for the attackers serves as a reminder that companies should focus on the ways in which time-honored criminal strategies can be employed to exploit their regular business processes, and how common-sense cyber and human defenses can be structured to protect against them.
• In bringing both criminal and civil charges against one of the hacker groups, the government sent a clear message that it will not seek to blame every victim of a cyber incident, looking to make good on recent statements encouraging cooperation with law enforcement.