News that the U.S. government recovered more than $2 million from ransomware attackers whose victim, Colonial Pipeline, paid the ransom sparked conversations yet again about whether businesses should cough up the money cyberattackers demand. Federal agencies’ stance on this question is increasingly becoming a resounding...