Norsk Hydro responds to ransomware attack with transparency

Last March, aluminum supplier Norsk Hydro was attacked by LockerGoga, a form of ransomware. The attack began with an infected email and locked the files on thousands of servers and PCs. All 35,000 Norsk Hydro employees across 40 countries were affected. In the throes of this crisis, executives made three swift decisions:

Pay no ransom.
Summon Microsoft’s cybersecurity team to help restore operations.
Communicate openly about the breach.

Read Hackers hit Norsk Hydro with ransomware to learn why this approach helped the company recover and get back to business as usual.

May 14

7 min read

Defense in depth for autonomous AI agents

As AI agents gain autonomy, defense in depth must evolve, with application-layer design, identity, and human oversight at the center.
May 14

18 min read

Kazuar: Anatomy of a nation-state botnet

Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for years and continues to evolve in support of espionage-focused operations.
May 14

7 min read

When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps

Exposed UIs, weak authentication, and risky defaults could turn cloud-native AI apps on Kubernetes into potential targets by threat actors.

Norsk Hydro responds to ransomware attack with transparency

Content types

Topics

Microsoft Security Team

Related posts

Defense in depth for autonomous AI agents

Kazuar: Anatomy of a nation-state botnet

When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps

Get started with Microsoft Security

Share