I don't think anything unique should be done now, solutions are the same as always: keep your infra and software up-to-date. Configure dependabot or similar, make updates weekly, enforce 2FA everywhere, instruct the team to be more responsible, make backups (and probably backups of backups) and be consistent in all these boring chores.
I still believe that majority of recent incidents were related to human factor, all these "we'll update it somewhere next sprint or next year" kind of people sitting on Python 2.7 / PHP 7 just paid for their irresponsibility, unfortunately. These days it's just easier to reach these vulnerable places