Highlights:

1. The “Ransomware” attacks set a new record by creating a 44% share of data violations in 2024.
2. The most attack on small and medium business (SMBS), 88% violations target this class.
3. The first cyber attack is taking place through network devices and vPN weaknesses.
4. Special attention to patching and third-party security in organizations, yet security insufficient.
5. The victims of “ransomware” may be reducing ransom payment, but the speed of the attacks is not stopping.

Why is the Shatani of “Ransomware” doing more?

The figures surfaced in 2024 are shocking. “Ransomware” is now causing 44% of data violations, which has grown faster than previous years. While earlier this figure was around 32%, now it is indicating serious threat with an increase of 12%.

The main reason for this increase is the weaknesses present in systems like network edge devices and VPN, which are rapidly exploiting cyber criminals. According to Verizon's report, this year has seen an increase of 34% in the exploitation of weaknesses.

Who is doing more “Ransomware”?

Small business business and OO Chuta Over

Particularly small businesses are becoming the easiest goals of “ransomware” because they lack cyber security structures. 88% of violations on SMBs indicate this. At the same time, this percentage in big organizations is 39%.

Why are the organizations taking measures?

Emphasis on taching and teard-party vendor safety

Even though organizations are moving towards patching, their speed and skill are still incomplete. According to Verizon's report, only 54% of the weakens of network edge devices were cured in an average of 32 days.

In addition, organizations are also more vigilant in their relationship with third-party vendors as the possibility of violations to external partners has doubled.

How are the era of “ransomware”?

According to cyber safety experts, the trends of the attack are no longer dependent on the ransom. The attackers now enter the system and try to cause maximum damage, whether payment or not. This means that organizations will now have to adopt multilevel security structures.

Can the peaks be removed?

• Regular monitoring of network edge devices and timely patching.
• VPN strengthening security.
• Security audit of third-party vendors.
• Employees training to avoid fishing and social engineering.
• Constant backup system and data encryption.

Last word

“Ransomware” has now become a strategic crisis for global organizations, not just a cyber crime. Constant changing attacker patterns and growing weaknesses give a clear indication that now is the time to be cautious and active. Every organization should be prepared to deal with potential threats, fixing its cyber security strategy.