Security Magazine: ransomware up 389%
- Fortinet said on April 30 its 2026 threat report logged 7,831 confirmed ransomware victims in 2025, up from roughly 1,600 a year earlier. (securitymagazine.com) - The sharpest detail is speed: time-to-exploit for critical outbreaks has fallen to 24–48 hours, while exploitation attempts rose 25.49% globally. (securitymagazine.com) - The bigger shift is industrialization — AI kits and crime-as-a-service are turning cybercrime into a faster, reusable production system. (securitymagazine.com)
Ransomware is getting more industrial — and that is the real story here. Fortinet’s new 2026 Global Threat Landscape Report says confirmed ransomware(securitymagazine.com)matters less by itself than what seems to be driving it: attackers are using AI, automation, and off-the-shelf crime kits to compress the whole attack cycle. (securitymagazine.com) ### Where does the 389% number come from? It comes from FortiRecon adversary intelligence in Fortinet’s annual threat report, whi(securitymagazine.com)ties part of that jump to easy access to tools like WormGPT, FraudGPT, and BruteForceAI. (fortinet.com) ### Is this really an “AI ransomware” story? Yes — but not in the movie-plot sense. The report is not saying an autonomous super-bot suddenly invented ransomware. (securitymagazine.com)abor. That turns skilled intrusion work into something closer to a service business. (fortinet.com) ### Why would brute-force attempts fall, then? Because efficiency im(fortinet.com)rgets. Fortinet also logged 67.65 billion brute-force incidents worldwide, so “down” does not mean “small” — it means more selective and probably more effective. (securitymagazine.com) ### What changed for defenders? Speed. Fortinet says time-to-exploit for critical out(fortinet.com)aw goes public. (fortinet.com) ### Which sectors are taking the hit? Manufacturing led Fortinet’s list with 1,284 ransomware victims, followed by business services at 824 and retail at 682. That makes sense. These are sectors where downtime hurt(securitymagazine.com)e weak link can jam the whole business. (securitymagazine.com) ### Why do crime kits matter so much? Because they lower the skill floor. A kit like WormGPT or BruteForceAI is basically leve(fortinet.com)ditized tooling were already eroding defenders’ old advantage. AI just pushes that trend harder. (fortinet.com) ### So what should security teams take from this? Treat this as an operations problem, not j(securitymagazine.com)identity controls, segmentation, better detection around credential abuse, and response workflows that do not wait for a human to notice everything first. Basically, if attackers are running a production system, defense has to become one too. (fortinet.com) ### Bottom line? The scary part is not that AI created a brand-new kind of crime. It is that AI is making familiar crime cheaper, faster, and easier to scale. That is how you get a 389% jump. (securitymagazine.com)
