Security News > 2021 > November > Ransomware attacks are increasingly exploiting security vulnerabilities

The number of security flaws associated with ransomware rose from 266 to 278 last quarter, according to security firm Ivanti.
A report released Tuesday by security firm Ivanti looks at the rise in vulnerabilities exploited by ransomware attacks.
As detailed in its "Ransomware Index Update Q3 2021," Ivanti found that the number of security vulnerabilities associated with ransomware increased from 266 to 278 in the third quarter of 2021.
The total volume of vulnerabilities identified before 2021 associated with ransomware is currently 258, which represents more than 92% of all security flaws tied to ransomware.
In terms of others vulnerabilities, the Cring ransomware group staged attacks that exploited security holes in Adobe ColdFusion.
"Ransomware groups continue to mature their tactics, expand their attack arsenals, and target unpatched vulnerabilities across enterprise attack surfaces," said Srinivas Mukkamala, Ivanti's senior VP of security products.
News URL
Related news
- Security pros more confident about fending off ransomware, despite being battered by attacks (source)
- Cross-Domain Attacks: A Growing Threat to Modern Security and How to Combat Them (source)
- French govt contractor Atos denies Space Bears ransomware attack claims (source)
- Casio says data of 8,500 people exposed in October ransomware attack (source)
- Preventing the next ransomware attack with help from AI (source)
- Ransomware on ESXi: The mechanization of virtualized attacks (source)
- OneBlood confirms personal data stolen in July ransomware attack (source)
- Patch Tuesday: January 2025 Security Update Patches Exploited Elevation of Privilege Attacks (source)
- Enzo Biochem settles lawsuit over 2023 ransomware attack for $7.5M (source)
- Balancing usability and security in the fight against identity-based attacks (source)