During a cyberattack, the first step is to contain the threat by isolating affected systems and preventing the attack from spreading. Next, assess the scope of the attack and communicate with relevant stakeholders. Immediate action and clear communication are crucial for minimizing damage and facilitating recovery.