Halcyon adds endpoint controls against ransomware data theft

Halcyon announced Double Extortion Prevention, an endpoint capability designed to disrupt ransomware data theft alongside its existing protection against file encryption. The company says it delivers the capability through the agent deployed across 1,000 customer environments globally, with Windows, Linux and macOS support at launch. When a connection targets known malicious infrastructure, the system can sever that connection while allowing the process and its legitimate connections to continue. Transfers that exceed expected thresholds are flagged for investigation as potential data theft, with Halcyon's Ransomware Operations Center investigating and responding to suspected attempts.