Ransomware remains one of the greatest cyber threats to organisations. Certainly, it is the threat at the top of most boards' agendas.

The reasons are clear enough: ransomware damages reputations, as well as the balance sheet. in the worst case scenario, a business might never recover from an attack.

And ransomware itself is becoming more sophisticated, and so more dangerous. Groups have moved on from simple phishing and RDP attacks to exploiting zero days. And they are as likely to threaten to release confidential information, as they are to encrypt it.

As our guest suggests, ransomware has moved from an attack on availability to an attack on confidentiality.

When it comes to advising on the ransomware threat, few are better placed than Raj Samani. Senior vice president and and chief scientist at Rapid7, Raj is also chief innovation officer at the Cloud Security Alliance, a special adviser at the European Cybercrime Centre and a co-founder of No More Ransom.

Here he discusses the changing ransomware threat, and how organisations should act when they are attacked, with Stephen Pritchard.