Old Vulnerabilities Keep Fueling Ransomware Attacks
Ransomware Vulnerability Management Still Has Gaps
Ransomware vulnerability management remains a major challenge as attackers continue to exploit known weaknesses that organizations have had time to fix. In this Techstrong TV interview, Mike Vizard talks with Shawn Dorsey, Senior Director of Global Managed Services at ThreatDown, about why groups such as Akira keep finding success through familiar tactics.
Dorsey explains that many incidents still involve exposed or unpatched devices, including SonicWall appliances used for initial access. The problem is not always neglect. Small and midsized businesses often have limited staff, limited budget and too many operational demands competing for attention.
Patch Management Is Harder for Smaller Teams
Large enterprises usually have formal security programs, automated processes and teams that track common vulnerabilities. Smaller organizations often do not. A single IT generalist may be responsible for everything from user support to infrastructure, cloud systems, networking and endpoint protection.
That creates a dangerous opening for ransomware operators. Ransomware vulnerability management requires visibility into assets, patch status, remote access systems and exposed services. Without that visibility, teams may not know which systems create the most risk until an attacker has already found them.
AI Could Accelerate Both Attackers and Defenders
The conversation also looks at how AI may change the speed and scale of cyberattacks. Dorsey warns that attackers can use AI to discover opportunities faster, automate parts of the attack chain and increase the number of campaigns they can run at once.
Defenders can also benefit from AI. It can help resource-constrained teams prioritize patching, check configurations and respond more quickly to alerts. The key is to use AI as a force multiplier while keeping strong security practices in place.
Regulation and Insurance May Raise the Baseline
Dorsey expects more pressure from regulators, insurers and business partners. Organizations that handle customer data may face stronger expectations for minimum cybersecurity practices. Vendors may also be asked to prove they can protect data before they are trusted by customers.
For technology leaders, the takeaway is practical. Ransomware vulnerability management cannot wait for a crisis. Teams need better asset visibility, faster patching, managed detection and response where needed, and a plan for using AI to keep pace with machine-scale threats.
