As ransomware attacks increase, more companies are seeking specialist negotiators who deal directly with hackers. The Financial Times reported growing demand for negotiators at major security firms such as Palo Alto Networks and Sophos. Negotiators aim to buy time, support executive decisions and gather information on attackers, and payment is not always required. Talks can last from 3 days to 3 weeks via dark web portals, email or encrypted messaging.

The Korea Internet & Security Agency warned on Thursday that hacktivist attacks targeting South Korean companies and institutions are increasing as Middle East geopolitical conflict spreads into cyberspace. It cited three main threats: DDoS attacks aimed at disrupting services, intrusions and data leaks, and ransomware infections for financial gain. KISA urged companies to strengthen monitoring, check web vulnerabilities, review 3-2-1 backups, build telecom cooperation for DDoS response, apply multi-factor authentication and enhance security training.