Ransomware Surges 19%, Chrome Update Critical, and M365 Finance Teams Under Attack

by The Creator | Aug 7, 2026

Ransomware attacks jumped 19% in July 2026, hitting finance, technology, and healthcare sectors hardest. Small businesses need a ransomware attack response plan that covers backups, staff training, and incident protocols to survive an infection and recover operations.

Ransomware attacks jumped 19% in July 2026 after a relatively quiet second quarter, with finance, technology, and healthcare sectors bearing the brunt of the attacks according to Comparitech. This surge underscores the critical need for small businesses to maintain robust backup systems and ongoing employee security training.

Google has released Chrome 151, addressing 41 security vulnerabilities including 6 critical memory-safety flaws that could enable browser crashes, memory corruption, or malicious code execution. The update is rolling out for Windows, macOS, and Linux systems, and immediate installation is strongly recommended for all users.

A widespread phishing campaign is actively targeting Microsoft 365 accounts, with attackers specifically focusing on employees involved in payroll and financial workflows. The campaign employs adversary-in-the-middle (AitM) techniques and uses residential proxies to disguise malicious sign-ins as ordinary consumer traffic, making detection more challenging.

The North Carolina Ports Authority confirmed that a cyberattack disrupted IT systems and slowed operations at the Port of Wilmington, Port of Morehead City, and Charlotte Inland Port, demonstrating the real-world impact of cyber incidents on critical infrastructure and supply chains.

Twelve states, including several in the Northeast region, have reported cyberattacks on water systems. Federal authorities from the FBI, EPA, and CISA suggest these attacks may be linked to Iran-backed hackers and warn that critical infrastructure remains vulnerable to cyber threats.

Key Takeaways for Small Businesses: - Update Google Chrome immediately to version 151 - Train finance and payroll staff to verify all login requests - Maintain comprehensive backup systems - Recognize that your business depends on both your own infrastructure and community services - Develop and test an incident response plan

What should your ransomware attack response plan include?

A working ransomware attack response plan has five concrete parts. First, maintain offline backups that attackers cannot reach or encrypt. Second, train finance and payroll staff to verify login requests and recognize phishing, since the current M365 campaign targets these roles with adversary-in-the-middle techniques. Third, patch systems on schedule (Chrome 151 fixes 6 critical memory flaws). Fourth, document your incident response steps: isolate infected machines, notify CISA and law enforcement, preserve evidence, and communicate with customers. Fifth, test your plan quarterly. Manufacturers and professional services firms depend on uptime; a tested response plan cuts recovery time from weeks to days.

Key takeaways

Update Chrome immediately to version 151 to close 6 critical memory-safety vulnerabilities.
Train payroll and finance staff to verify all login requests, especially when using Microsoft 365.
Maintain offline backups disconnected from your network so ransomware cannot encrypt them.
Document and test your incident response plan quarterly so staff know what to do when an attack happens.

Frequently asked questions

What do I do immediately after discovering a ransomware attack?

Isolate infected machines from your network and backups at once. Do not pay any ransom. Contact local law enforcement, the FBI (ic3.gov), and CISA at central@cisa.dhs.gov. Preserve evidence by documenting what you see, take screenshots, and save logs. Then notify your customers and vendors if their data may be affected.

How often should I test my incident response plan?

Run a full test at least twice a year, ideally quarterly. Include tabletop exercises where your team walks through steps (detection, isolation, communication, recovery) without actually taking systems offline. Document what breaks and fix it before a real attack happens.

Can I rely on my antivirus software to stop ransomware?

No. Antivirus catches known malware, but ransomware often uses new code that antivirus does not recognize. Offline backups, staff training, and timely patches are your strongest defenses. Antivirus is one layer, not your entire wall.

Why should I care about Chrome 151 if I run Windows workstations?

Chrome 151 fixes 6 critical flaws that allow memory corruption and malicious code execution. If your staff uses Chrome for cloud applications (Microsoft 365, email, file sharing), an attacker who exploits a Chrome flaw can move sideways into your business systems. Update all browsers on all devices.