Why Law Firms Are the Perfect Ransomware Target | Konrads Klints | EP #15

Konrads Klints is CISO at Rajah & Tann Asia and formerly served as a senior incident response and red team consultant at KPMG.He spent years on the offensive side, running red team engagements against ATMs, mainframes, and telecoms infrastructure before crossing over to defense as the first full-time, dedicated CISO at a law firm in all of Asia.This episode covers how ransomware actually lands inside organizations that get hit, why law firms almost always pay, and what two incident response war stories reveal about the thing no playbook covers: knowing the right person at the right vendor before everything breaks.What we cover in this EP:◼ Why the "don't pay" advice from governments is mostly political posturing, and what law enforcement privately tells victims instead◼ How one senior budget decision made years before an attack determines whether you survive ransomware or get owned by it◼ What a SonicWall on your perimeter actually signals about the 10 security decisions that followed it◼ Why the vendor contact you need during an incident is never the one in your contract, and two recoveries that prove it◼ How Konrads spent $1,000 in AI tokens to replace a niche vendor that told him security wasn't their problem(0:00) – First dedicated CISO at a law firm in Asia, period(05:00) – Why Southeast Asian law firms had no dedicated security function(08:33) – Bitcoin enabled ransomware; North American firms got hit first(13:42) – The Shook Lin & Bok breach: Akira, the file list, and a negotiation gone public(18:24) – Why law firms almost always pay and what happens to clients who find out(27:35) – 86% of Akira breaches tied to SonicWall: what cheap appliances really signal(32:15) – Where to spend a limited security budget(35:53) – Get cyber insured before anything else(47:37) – The Ireland incident: how an Xbox contact unblocked a Microsoft lockout(54:42) – The Scandinavian recovery: 50 engineers in 48 hours, one relationship(58:00) – How to vet vendor support before you actually need it(1:08:21) – AI in 2026: where it helps and where it falls short(1:11:32) – Replacing a niche vendor with $1,000 in AI tokens(1:14:07) – Vibe coding in enterprise: what's actually risky(1:22:23) – What Konrads misses about red teaming(1:28:35) – Hardware keys: highest ROI security move(1:31:44) – If law firms do one thing: get cyber insuranceGuest ⬇️Konrads KlintsHosts ⬇️Alex Paguis & Yegor Sak (Co-Founders of Control D)Powered by Control D