Care what you share
Summary: Cisco Talos' 2024 Year in Review found ransomware actors used valid accounts for initial access in almost 70% of related cases and exploited public-facing applications nearly 20% of the time. The 2024 Known Exploited Vulnerabilities Catalog lists 28 of 186 vulnerabilities as known to be used in ransomware campaigns, spanning CVE IDs from 2012 to 2024 except 2015.
What you should know: Nearly 70% of ransomware cases started with valid accounts, meaning stolen or reused credentials - not novel exploits - were the primary way in, and 28 of 186 cataloged vulnerabilities were already tied to ransomware campaigns.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026