Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The State of Ransomware in Financial Services 2026

This year’s State of Ransomware survey showed financial services and insurance providers handing over less money to attackers than it did a year ago. Median ransom demands fell by two-thirds and median payments continued a three-year slide. The recovery story was less positive. The sector took a week longer to recover than last year, and its typical recovery bill is double the median across all sectors.

New AI Security Podcast | Authorized Intelligence Trailer

Authorized Intelligence is Rubrik's new podcast on AI security and resilience in the age of frontier AI, hosted by AI risk management expert Cal Al-Dhubaib. Each episode brings you into the room with the frontier model red teamers, CISOs, and AI policymakers navigating the risks and rewards of frontier AI. The first three episodes drop November 5. Subscribe to stay updated and follow Authorized Intelligence wherever you get your podcasts.

How Layered Cybersecurity Stops Ransomware and Data Breaches in Mid-Sized Businesses

A layered cybersecurity strategy protects mid-sized businesses by building multiple overlapping defenses, ensuring that if hackers breach one layer, another stops them before data is stolen or encrypted. Single-point solutions fail against modern cyber extortion, leaving growing organizations severely vulnerable. Today, threat actors aggressively target smaller companies that lack enterprise-grade defenses. In fact, an alarming 88% of SMB breaches involve ransomware, making small businesses more than twice as likely to face an attack compared to large enterprises.

Expiro Malware: File Infection, Credential Theft, and Persistent Access

Expiro (also known as Xpiro) is a modular file-infector and information-stealing malware family that has been active since around 2010 and remains a persistent threat in various regions, particularly in Asia, Eastern Europe, and Latin America. Unlike typical standalone trojans, Expiro spreads by infecting executable files on the victim system, appending its malicious code while preserving original functionality.