due to the amount of money involved certainly but there have been a great many lower profile lawsuits brought by ransomware victims in the last couple of years and those cases have also largely been won the insurance companies are not happy and they're responding which brings us to another thing i want to talk about the rising cost of cyber insurance the suburban school cooperative insurance program sscip is an insurance pool designed to allow school districts to join together sort of in a collective bargaining way to negotiate better insurance rates and lower management fees one of the school districts participating in this co-op program is the bloomington school district NUMBER_TOKEN in chicago illinois that school district recently published its cyber insurance renewal details which caught some of the tech press's eye they reported that their cost jumped in one year from what it had been six thousand six hundred and sixty one dollars in NUMBER_TOKEN to NUMBER_TOKEN NUMBER_TOKEN for NUMBER_TOKEN NUMBER_TOKEN of the previous year and in fact the cooperative was apparently fortunate to even get that in their memo the district noted that quote in light of events that have negatively impacted the cyber insurance market sscip was unable to initially find the required coverage for the group after a small delay the cooperative was ultimately able to secure an insurer willing to accept the risks of the pool um msi soft recently published a summary of ransomware attacks in NUMBER_TOKEN i mean that's just a report begging to be written wouldn't be very difficult right you know just there's playback this podcast for the year of NUMBER_TOKEN. they wrote predictably NUMBER_TOKEN was largely a replay of the previous two years with the u.s public sector again experiencing a barrage of financially motivated ransomware attacks the attacks impacted a total of NUMBER_TOKEN local governments schools and healthcare providers the breakdown was four with NUMBER_TOKEN state and municipal governments and agencies NUMBER_TOKEN schools and NUMBER_TOKEN healthcare healthcare providers an interesting bit of the memo published by district NUMBER_TOKEN talking about their cyber insurance uh coverage indicated that the districts participating in the cooperative insurance policy would be required to do more than just make their payment premiums or premium payments to qualify for this coverage the districts would also be required to fully implement multi-factor authentication for all logins across all of their accounts and interestingly until that was done the insurance coverage limits would remain low so the insurer is saying okay here's the price uh we're not gonna like give you full coverage until you can assert that you have taken the steps of implementing multi-factor login authentication for every login you have once that's done and they're expecting to be able to do that by the end of march then you get the full coverage that you're paying for which i thought was interesting as we know in the log for j world adding multi-factor authentication to logins won't help right since the bad guys are crawling in through the back door rather than guessing the authentication protecting the front door but adding multi-factor authentication where it's been absent before which was probably everywhere would certainly remove the lowest hanging fruit and you know i would i would argue that certainly provides significant protection uh overall though as we you know expected to see the cost of cyber cyber insurance coverage is predictably increasing significantly across the board for anyone who needs it yikes and we have to talk about and this leads us to some discussion uh again about wordpress uh the guys at word fence have uncovered another very critical this one's a cvss of NUMBER_TOKEN flaw in a wordpress add-on named wp html
NO_SEGMENT_TOKEN