Ransomware Index 2024: A threat and vulnerability management perspective PDF Free Download
1 / 16/16
100%
A threat and vulnerability management perspecve.
Ransomware Index
2024
Ransomware Index Report 2024 Securin 1
Authencaon and access control vulnerabilies dominated the ransomware exploit
toolkit.
5. Access All Areas
Aackers adopted an ‘Advanced Persistent Threat’ strategy, seeking lateral movement
and persistence, with more strategic targeng making it more difficult for security teams
to cover defenses.
4. APT is a PITA
With 14.5% of aacks, healthcare bore the brunt of the ransomware pain as aackers
turned their aenon to crical sectors.
3. Healthcare Feels the Pain
Cross-collaboraon between ransomware groups, mul-stage aack strategies, and
sophiscated persistence mechanisms are the new normal.
2. Old Groups, New Tricks
RansomAI was the evoluon of a nightmare scenario. The ransomware group FunkSec
provided a compelling example of how generave arficial intelligence (GenAI) is lowering
the barrier to entry for sophiscated aacks.
AI-Assisted Ransomware Ops
Key Findings & Trends
What’s Keeping Us Up at Night:What’s Keeping Us Up at Night:
Ransomware in 2024 was no longer *just* about encrypon: it was about control, persistence, and
maximum disrupon. It was also the year that arficial intelligence (AI) entered the chat: while security
teams were busy training it to detect threats, the ulmate plot twist saw aackers using it to create
malware that other AI systems couldn’t detect. Overall, Securin’s research shows that 2024 was a year
of sophiscaon, collaboraon, evoluon, and strategic thinking – for ransomware aackers.
The Year the Machines Joined the Mayhem
When Gen-AI Met Ransomware:When Gen-AI Met Ransomware:
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 2
“AI-generated polymorphic ransomware, paired with adapve
exploit code, poses a severe threat by evading current EDRs
and security tools. This fast-evolving malware chains CVEs
into complex aack sequences, exploing system weaknesses
at scale and risking massive financial losses.
”
Dr. Srinivas Mukkamala | Securin Advisor
Most common aack paerns - and what
we can learn from them.
04
05 Best pracces for migang the threats.
Top weaknesses being exploited - and
which sectors are under fire.
03
Profile of the main threat actors, their taccs
and techniques.
02
Generave AI as both tool and target, and the
emergence of RansomAI.
01
What’s In
This Report?
Boom Line: This evoluon represents a significant challenge for defenders, as it combines the
persistence of ransomware groups with increasingly sophiscated exploitaon techniques. Aackers
are no longer simply looking for ways in; they’re strategically selecng vulnerabilies that provide the
broadest possible access, and the greatest chance of success.
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Preempve security is crical—proacvely remediang vulnerabilies
before they’re hit. We must shi from priorizing single CVEs to
analyzing CVE chains, using machine learning to predict aack paths and
bolster defenses.
Adapve security technology that learn ransomware’s tricks are key.
Without this evoluon in cybersecurity, AI-driven ransomware will
outpace us, turning vulnerabilies into weapons. Vigilance and
innovaon are non-negoable.
Ransomware Index Report 2024 Securin 3
The emergence of FunkSec – an AI-assisted
ransomware operaon – provided a compelling
example of how GenAI lowers the barrier to entry
for sophiscated aacks. Despite evidence that it’s
operated by relavely inexperienced actors, FunkSec
showed remarkable effecveness, claiming over 100
vicms with its double-extoron taccs and
AI-assisted tool development — maximizing impact,
maintaining low operaonal costs and surpassing the
efforts of established groups like Cl0p and Akira.
If many quesoned the credibility of FunkSec’s
claims, the EGAN framework showed us just how
bad things could get…
SPOTLIGHT: FunkSec - All of the Damage, None of the Experience
e.g., SSRF in AI Apps
New Aack Vectors
Model Poisoning
Prompt Injecon
Infrastructure
Supply Chain
GenAI as Target
e.g., RansomAI
Increased Aack Surface
Ecosystem
Generave AI
e.g., FunkSec
Low Barrier to Entry
Code Generaon
Evasion (EGAN)
Adapve Behavior
Social Engineering
GenAI as Aack Tool
Dual Impact of GenAI on Ransomware Operaons
The emergence of AI-assisted ransomware operaons in 2024 represented a significant shi in the
cybercrime ecosystem. As GenAI is increasingly integrated into both offensive and defensive
operaons, the threat landscape is being transformed in ways that demand immediate aenon.
AI-Powered Ransomware:
The Democrazaon of Ransomware Development
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 4
Cross-Prompt Injecon Aacks pose a parcular threat to AI systems, allowing malicious
actors to bypass security controls and manipulate AI systems into performing unauthorized
acons. Microso’s success in creang an automated scamming system using a combinaon
of large language models (LLM) and text-to-speech technologies illustrates how these
vulnerabilies could be weaponized at scale.
Cross-Prompt Injecon Aacks
The proliferaon of AI systems has created new aack surfaces that ransomware operators are
beginning to exploit. Microso's red team idenfied several crical vulnerabilies in AI infrastructure
that could be leveraged by ransomware operators:
AI Systems as High-Value Targets
90% success rate in evading detecon while encrypng files.
Adapve encrypon where RansomAI learned to opmize itself.
Automated aack process from reconnaissance to execuon.
Intelligent detecon evasion used to avoid dynamic defenses,
mechanisms, and anomaly detecon systems.
Perhaps even more concerning
than automated malware
development is the emergence
of adapve ransomware systems
like RansomAI. Created for
research purposes, in controlled
experiments, it gave some
insight into what an AI-powered
ransomware future could look
like, and it’s not prey:
RansomAI: Tesng Out Your Worst Nightmares
1
Documented by researchers, the Evoluonal Generave Adversarial Network (EGAN) framework
demonstrates the power of adversarial machine learning in creang highly evasive, polymorphic
ransomware variants. For threat actors and defenders alike, this is next level: it’s not just about
avoiding detecon, it’s about learning from each encounter and becoming more effecve.
EGAN’s success in bypassing AI-powered anvirus systems highlighted GenAI’s capacity to automate
the process of creang detecon-evasive malware. The framework demonstrates how reinforcement
learning can be used to create ransomware that dynamically adjusts its behavior to maximise damage,
while retaining stealth. The researchers’ success in bypassing commercial security soluons
underlines the growing sophiscaon of AI-assisted malware development
AI vs AI: The EGAN FrameworkAI vs AI: The EGAN Framework
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 5
While this technology enables more sophiscated aacks with lower barriers to entry, it also provides
new opportunies for defense. Proper security pracces, connuous tesng, and adapve defense
strategies are key to taking a proacve approach to emerging and evolving threats.
Maintaining strict security pracces during AI adopon, recognizing that
speed of implementaon should not compromise security.
3.
Combining automated tesng frameworks with human experse and
connuous security improvement.
2.
Developing comprehensive strategies to understand and address both
AI-enabled aacks and AI-specific vulnerabilies.
1.
In 2024, the AI threat landscape evolved beyond theory, underlining the real-world implicaons of
AI-powered ransomware. Best defense approaches include:
Key Defensive Approaches to AI-Generated Threats
2
The cybersecurity community’s response to emerging AI-ransomware and malware threats must be
mulfaceted. Microso’s open-source Python Risk Idenficaon Tool for generave AI (PyRIT)
framework is helping standardize AI red teaming pracces, enabling organizaons to adopt a
proacve approach. But, as Microso notes: “The work of securing AI systems will never be
complete.”
Reality Check: For every AI model there’s a prompt that can elicit undesired behavior. Perfect
security isn’t the goal – making aacks economically unfeasible is.
Evolving Defense Strategies to Meet Emerging AI Threats
Supply chain aacks against AI systems represent another emerging threat vector. The
discovery of a Server-Side Request Forgery (SSRF) vulnerability in a video-processing GenAI
applicaon demonstrates an uncomfortable new truth: tradional security vulnerabilies
don’t just persist in AI systems, they get amplified. This finding underscores the importance
of maintaining robust security pracces even as organizaons rush to adopt AI technologies.
Supply Chain Aacks
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 6
Rank: #5
Technical Sophiscaon:
Innovaon Index:
Impact Magnitude:
ATTACKS
12%
RansomHub
The Web Master
Primary Targets:
Water Systems | Healthcare | Government
Rank: #4
Technical Sophiscaon:
Innovaon Index:
Impact Magnitude:
ATTACKS
14%
Black Basta
The Overachiever
Primary Targets:
Healthcare | Manufacturing | Infrastructure
Rank: #6
Technical Sophiscaon:
Innovaon Index:
Impact Magnitude:
ATTACKS
8%
BlackCat (ALPHV)
Healthcare
Nightmare
Primary Targets:
Healthcare | Financial
Rank: #2
Technical Sophiscaon:
Innovaon Index:
Impact Magnitude:
ATTACKS
18%
Cl0p
The Supply
Chain Sniper
Primary Targets:
IT | Manufacturing | Energy
Primary Targets:
IT | Manufacturing | Energy
Rank: #3
Technical Sophiscaon:
Innovaon Index:
Impact Magnitude:
ATTACKS
15%
Akira
The New Kid
on the Block
Primary Targets:
Educaon | Financial | Healthcare
Rank: #1
Technical Sophiscaon:
Innovaon Index:
Impact Magnitude:
ATTACKS
26%
LockBit
The Comeback Kid
Primary Targets:
Government | Manufacturing | Financial
The Top Six Notable Ransomware Operators
2024’s Most Wanted:
While AI was busy moving the goalposts, the established ransomware groups were also upping their
game. 2024 saw all of the major groups demonstrate increasing sophiscaon. Despite law
enforcement disrupon, LockBit maintained its posion as a dominant threat in ransomware. The
group’s rapid recovery following significant global crackdown showed worrying levels of resilience and
de-centralized infrastructure. Meanwhile, new ransomware groups like RansomHub and
MedusaLocker emerged, while established actors like Cl0p connued their paern of exploing file
transfer vulnerabilies. We also saw the emergence of groups focused specifically on cloud
environments, soware supply chains and crypto exchanges. Here’s our analysis of the major players:
Ransomware Main Players
The Usual Suspects? Who’s Aacking?
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 7
While healthcare bears the brunt of these aacks, the ripple effects extend throughout our
interconnected infrastructure. Informaon technology firms, the backbone of digital services, faced
10.3% of aacks that threatened to disrupt countless downstream organizaons. Manufacturing
facilies experienced 9.1% of aacks, creang supply chain vulnerabilies that reach far beyond
factory walls. The targeng of government facilies (8.5%) and transportaon systems (5%)
completes a troubling picture of comprehensive threats to crical infrastructure. These aren't isolated
incidents, but rather a co-ordinated assault on fundamental systems. The energy sector, though
experiencing fewer aacks, faces some of the most sophiscated threats. Notable incidents like the
Schneider Electric breach, where 1.5TB of corporate data was stolen, demonstrate how these aacks
could potenally disrupt power distribuon and crical energy infrastructure.
4
Ripple Effects Across Interconnected Infrastructure
Healthcare & Public Health
Informaon Technology
Manufacturing
Government & Public Sector
Educaon
Transportaon & Logiscs
Financial Services
Energy 2.6% of aacks
5.2% of aacks
5.3% of aacks
5.5% of aacks
9.1% of aacks
8.5% of aacks
10.3% of aacks
14.5% of aacks Communicaons
Defense
Entertainment
Food & Agriculture
Hospitality
Water & Wastewater Systems
Chemical
Dams
0.1% of aacks
0.1% of aacks
0.3% of aacks
0.4% of aacks
1% of aacks
0.9% of aacks
1% of aacks
1.6% of aacks
Severity Scale: High Low
2024 Ransomware Aacks By Industry
As Securin’s in-depth report on crical sector aacks revealed, 2024 marked a deeply concerning
paern of threats to essenal services. Our ransomware data underlines this trend, with healthcare
the most vulnerable sector at 14.5% of aacks. The sophiscaon of aacks, exemplified by groups
like LockBit and Black Basta, suggests an evoluon in taccs that poses an unprecedented challenge
to naonal security and public safety.
3
Which Sectors Are Under Aack
In The Firing Line:
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 8
What can we learn
from the data? This
mul-vectored
approach to weakness
exploitaon suggests
that aackers have a
mature understanding
of enterprise soware
vulnerabilies - and the
ability to exploit both
simple and complex
weaknesses.
CWE ID Weakness Name Count
CWE-287
CWE-119
CWE-787
CWE-288
CWE-276
CWE-306
CWE-416
CWE-22
CWE-94
5
3
3
3
2
2
2
2
2
Improper Authencaon
Improper Restricon of Operaons
within Memory Buffer
Out-of-Bounds Write
Authencaon Bypass Using Alternave Path
Incorrect Default Permissions
Missing Authencaon for Crical Funcon
Use Aer Free
Path Traversal
Code Injecon
Evolving Defense Strategies to Meet Emerging AI Threats
The exploitaon of Path Traversal (CWE-22) and Incorrect Default Permissions (CWE-276)
shows that ransomware groups are leveraging misconfiguraons and design flaws in addion
to implementaon vulnerabilies.
Misconfiguraon and Design Flaws
Including buffer operaons and out-of-bounds writes (CWE-119, CWE-787). These are
parcularly concerning because they oen lead to code execuon capabilies.
The presence of Use Aer Free (CWE-416) vulnerabilies in mulple security products
suggests that ransomware operators are also targeng more sophiscated memory
corrupon vulnerabilies that require deeper technical experse to exploit.
Memory-Related Vulnerabilies
Securin’s analysis of weaknesses exploited by ransomware in 2024 reveals a clear focus on
authencaon and access control vulnerabilies. Improper Authencaon (CWE-287) emerges as the
most commonly exploited weakness, oen paired with Authencaon Bypass (CWE-288) and
Missing Authencaon (CWE-306), indicang that ransomware aackers are primarily targeng
vulnerabilies that allow them to circumvent security controls rather than exploit memory corrupon
issues. The next most significant clusters of weakness are:
Hacker Hotspots:
Top Weaknesses Being Exploited by Ransomware Actors
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 9
For example, vulnerabilies such as Memory Buffer Operaons and Improper Input Validaon are
under-represented in MITRE’s Top 25, but dominate real-world aack paerns and exploitaon. In
fact, Memory Buffer Operaons is the most dramac under-ranking in the MITRE list: this weakness
consistently ranks as the #1 target for both threat groups and ransomware operators.
Memory-related weaknesses, such as buffer overflows and use-aer-free issues, are frequently
leveraged in sophiscated aacks due to their potenal for arbitrary code execuon and privilege
escalaon. Adversaries exploit these flaws to gain footholds in systems, deploy ransomware, and
execute remote code with elevated privileges. Security teams need to priorize vulnerabilies based
on real-world exploitaon data rather than relying solely on predefined lists.
CWE-79 (XSS)
CWE-119 (Memory Buffer)
CWE-89 (SQL Injecon)
CWE-20 (Input Validaon)
CWE-787 (Out-of-bounds)
CWE-120 (Buffer Overflow)
CWE-843 (Type Confusion)
CWE-284 (Access Control)
Common Weakness Enumeraon (CWE)
Rank
0
5
10
15
20
25
16
13
1
20
1 1
3
19
14
12
2 2 3 3
2NA
18
10
NA
13 12
NA
11
22
MITRE Rank Threat Actor Rank Ransomware Rank
Top Discrepancies: MITRE vs Threat Actor & Ransomware Rankings
Securin’s analysis of MITRE’s 2024 Top 25 Common Weakness Enumeraons (CWEs) reveals a
striking misalignment between standardized rankings and real-world exploitaon.
Discrepancies Between MITRE Rankings
and Real-World Aacks
Mind the Gap(s):
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 10
What’s notable here is the significant discrepancy between the MITRE ranking and the real-world
threat and ransomware target. Again, we see how the concept of severity vs risk comes into play
when we’re looking at MITRE Top 25 rankings whose core calculaon relies on the Common
Vulnerability Scoring System (CVSS). For example, remote code execuon vulnerabilies oen
operate as ransomware – doubling the likelihood of exploitaon. And ransomware-associated
vulnerabilies themselves are oen part of broader campaigns leveraging mulple Known Exploited
Vulnerabilies (KEVs).
The disparity between MITRE rankings and real-world exploitaon paerns suggests a need for more
dynamic and context-aware security priorizaon frameworks. They also underline challenges around
the need for context-aware rankings, resource allocaon, and the evoluon of security programs that
are flexible enough to adapt to emerging threats.
Common Weakness Enumeraon (CWE)
Rank
0
5
10
15
20
25
CWE-20 (Improper
Input Validaon)
CWE-78 (OS
Command Injecon)
CWE-416 (Use
Aer Free)
CWE-798 (Use of
Hard-coded Credenals)
CWE-1392 (Use of
Default Credenals)
CWE-284 (Improper
Access Control)
CWE-693 (Protecon
Mechanism Failure)
12
1
7
2
8
3
22
10
NA
12
NA
13
NA
14
MITRE Rank 2024 Wild Exploit Rank
Top Discrepancies: MITRE vs 2024 Exploited-in-the-Wild
The tech world has moved beyond simple web applicaons, and the cybercriminals have followed
suit. Their focus is on weaknesses that allow direct pathways to privilege escalaon, and remote code
execuon. Securin’s analysis of MITRE’s top 25 CWEs in their real-world context underlines this
reality: as the graph below shows, Buffer Overflow, Type Confusion, and Access Control weaknesses
have become more lucrave for threat actors than XSS and SQL Injecon.
The Implicaons of MITRE Ranking
Disparies for Ransomware
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 11
The prominence of “Exploing Trust in Client” and “OS Command Injecon” (see table above)
indicates that aackers are primarily targeng vulnerabilies that allow them to bypass security
controls and execute malicious commands with elevated privileges.
CAPEC ID Aack Paern Name Count
CAPEC-22
CAPEC-88
CAPEC-127
CAPEC-242
CAPEC-114
CAPEC-115
CAPEC-76
CAPEC-79
CAPEC-650
6
6
5
4
4
4
4
4
4
Exploing Trust in Client
OS Command Injecon
Directory Indexing
Code Injecon
Authencaon Abuse
Authencaon Bypass
Manipulang Web Input to File System Calls
Using Slashes in Alternae Encoding
Upload a Web Shell to a Web Server
CAPEC-43 4
Exploing Mulple Input Interpretaon Layers
The aack paerns for ransomware in 2024 were characterized by sophiscated exploitaon
strategies, focused on circumvenng authencaon and gaining remote code execuon capabilies.
Most Common Aack Paerns (CAPECs)
Referenced in 2024 Ransomware CVEs
CVE-2024-51568 (CyberPanel) and CVE-2024-1709 (ConnectWise ScreenConnect)
were among the most exploited vulnerabilies.
Mulple ransomware groups, including LockBit, Black Basta, and BlackCat, targeted
CVE-2024-1709, indicang a rapid exploit-sharing culture.
Cleo Harmony (CVE-2024-55956) exploitaon by Clop reflects a connued focus on file
transfer system vulnerabilies
JetBrains TeamCity (CVE-2024-27198) was exploited to compromise soware
development and deployment pipelines, shiing towards soware supply chain aacks.
New CVEs Exploited by Ransomware in 2024
Key Trends in Paerns, Taccs, & Techniques
Cracking the Code:
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Post-compromise acvies show a strong
emphasis on discovery operaons (T1082,
T1083), indicang that ransomware groups are
spending more me mapping networks before
deploying payloads.
Post-Compromise:
Inial access is primarily gained through
exploing public-facing applicaons (T1190),
followed by the high frequency of
stolen/compromised credenals abuse (T1078)
and external remote service exploitaon
(T1133).
Inial Access:
Again, we’re seeing a sophiscated aack cycle, combining opportunisc scanning with targeted
aacks emphasizing discovery, persistence and evasion of defenses:
Top Ransomware ATT&CK Taccs & Techniques 2024
Our analysis suggests ransomware groups are increasingly adopng
APT-like taccs, moving beyond simple encrypon tools to sophiscated
mul-stage aacks that leverage a diverse range of aack paerns.
3. Advanced Persistent Threat (APT) Taccs:
The increased frequency of authencaon abuse/bypass alongside
command injecon techniques demonstrates a taccal progression: bypass
security controls, then achieve code execuon. More complex paerns like
"Exploing Mulple Input Interpretaon Layers" indicates that
ransomware operators have developed sophiscated technical capabilies
and are able to chain mulple aack techniques together effecvely.
2. Authencaon-Related Aack Paerns (Authencaon Abuse & Bypass):
An emerging trend, with aackers leveraging mulple encoding methods
to bypass security controls. The combinaon of Directory Indexing aacks
with Web Shell uploads suggests a systemac approach to persistence
once inial access is gained.
1. Manipulaon of Web-Based Inputs and Directory Traversal Techniques:
Ransomware Index Report 2024 Securin 12
Securin’s research reveals addional significant aack paern trends:
Key Trends in Ransomware Aack Paerns 2024
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 13
Move beyond reliance on CVSS/MITRE rankings alone.
Implement context-aware vulnerability management considering ransomware likelihood.
Priorize weaknesses commonly exploited in ransomware aacks in your sector.
Monitor for exploitaon chains rather than isolated vulnerabilies.
Revise Vulnerability Priorizaon Frameworks:
4.
Healthcare organizaons: Focus on clinical system segmentaon and resilience.
Manufacturing: Implement OT/IT network separaon with monitored interfaces.
Government: Deploy advanced EDR soluons with behavioral analysis.
Financial services: Enhance monitoring for novel lateral movement techniques.
Develop Sector-Specific Defense Strategies:
3.
Deploy exploit prevenon systems focused on memory corrupon vulnerabilies.
Implement memory protecon tools like Control Flow Guard (CFG) and Address Space
Layout Randomizaon (ASLR).
Priorize patching of memory-related vulnerabilies idenfied in this report (CWE-119,
CWE-787, CWE-416).
Enhance MemoryProtecon Mechanisms:
2.
Implement MFA across all systems, especially for privileged accounts and remote access.
Deploy connuous monitoring for suspicious authencaon aempts.
Implement privileged access management (PAM) soluons.
Consider Zero Trust architecture as a strategic goal.
Priorize Authencaon & Access Control Vulnerabilies:
1.
With all proacve security strategies, knowing your aack surface is half the bale. Here are seven
concrete acons that defenders can take to migate the ransomware risks we’ve just looked at.
Taking Acon:
Best Pracces to Defend Against Ransomware
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
Ransomware Index Report 2024 Securin 14
Develop GenAI-Aware Security Programs:
Conduct red team exercises specifically targeng AI systems.
Implement security controls for AI development and deployment pipelines.
Establish monitoring for potenal prompt injecon aacks and AI-targeng.
Maintain strict access controls on AI training data and model parameters.
Adopt an APT-Focused Defensive Posture:
Implement connuous threat hunng for persistent threats.
Deploy decepon technology to detect stealthy reconnaissance acvies.
Monitor for living-off-the-land techniques using legimate system tools.
Enhance visibility into lateral movement and privilege escalaon aempts.
Establish Comprehensive Recovery Capabilies:
Implement immutable backups beyond ransomware reach.
Conduct regular recovery tesng simulang sophiscated ransomware scenarios.
Develop staged restoraon procedures priorizing crical business funcons.
Create offline incident response playbooks for ransomware scenarios.
Strategic Defensive Posioning
Ransomware Best Pracces:
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
securin.io
Follow Us On
At Securin, we empower teams and organizaons to minimize their business risk
with our comprehensive range of offensive cybersecurity soluons. These
soluons are carefully craed to be intuive, adaptable, and scalable, catering to
organizaons of all sizes in today's ever-changing digital landscape. Securin's
human-augmented intelligence approach to cybersecurity empowers organizaons
to thrive by proacvely addressing emerging threats and uncertaines, ensuring
their security.
About Securin
Ransomware Index Report 2024 Securin 1
4 Schneider Electric Breach: hps://www.bleepingcomputer.com/news/security/cactus-ransomware-claim-to-steal-15tb
-of-schneider-electric-data/
2 CISA Sectors Crical Infrastructure 2024: hps://www.securin.io/cisa-sectors-crical-infrastructure-2024-download/
3 Python Risk Idenficaon Tool for generave AI:
hps://www.securin.io/cisa-sectors-crical-infrastructure-2024-download/
1 Evoluonal Generave Adversarial Network (EGAN): hps://arxiv.org/pdf/2405.12266
References
Introducon Best PraccesGen AI Threat Actors Top Weaknesses Aack Paerns
