Is the new director of CISA doing the right thing? Do people really pay for ransomware keys? What about the T-Mobile hack? Is sorry good enough? What is the new method of ransomware that only encrypts part of a file?