skinny.

Latest / Future of Threat Intelligence

Trellix's John Fokker on Why Ransomware Groups Are Fragmenting

The criminal underground is experiencing its own version of startup disruption, with massive ransomware-as-a-service operations fragmenting into smaller, more agile groups that operate like independent businesses. John Fokker, Head of Threat Intelligence at Trellix, brings unique insights from monitoring hundreds of millions of global sensors, revealing how defenders' success in EDR detection is paradoxically driving criminals toward more profitable attack models. His team's systematic tracking of AI adoption in criminal networks provides a fascinating parallel to legitimate business…

The skinny

The skinny isn't ready yet — notes appear once the transcript is processed.