Ransomware Costs Spike: VPNs and SonicWall Exploited
The 2026 InsurSec Report, published by At-Bay, reveals a concerning 7% increase in cyber insurance claims, with the average severity of damages per incident now estimated at a staggering $221,000. This isnβt just about financial loss; it reflects the real-world operational disruption and recovery costs organizations face.
Cyber Updates - Asher Tamam highlights that the average ransom payment has hit $508,000. A critical point for defenders: the majority of these attacks are leveraging VPN connections and SonicWall equipment. This points directly to the persistent exploitation of known vulnerabilities in perimeter devices, a low-hanging fruit for attackers that continues to pay dividends.
Cyber Updates - Asher Tamam further notes that small businesses and organizations with significant third-party exposure (customers, suppliers) are experiencing greater damages and more severe legal consequences. This underscores the expanded attack surface and the ripple effect breaches have beyond the initial target. Attackers know that compromising a smaller, less secure link in a supply chain can open doors to larger, more lucrative targets.
What This Means For You
- If your organization relies on VPNs or SonicWall equipment, you need to immediately audit your patch management and configuration. Attackers are actively targeting these vectors because they are often neglected. Prioritize patching known vulnerabilities, enforce strong multi-factor authentication (MFA) on all remote access, and segment your network to limit lateral movement if a perimeter device is compromised. Don't be the low-hanging fruit.
π‘οΈ Detection Rules
3 rules Β· 6 SIEM formats3 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free β export to any SIEM format via the Intel Bot.