Security pros more confident about fending off ransomware, despite being battered by attacks

Ponemon Institute’s 2024 survey of 2,547 security professionals finds that despite widespread exposure to ransomware attempts (88% faced containment efforts in the past year), confidence in defenses has risen, with 54% believing their controls are effective. Perceived targeting and concerns about supply chain and data leakage have declined since 2021, while phishing remains the leading entry vector and insider negligence a key contributor. Over half express concern about AI-enhanced ransomware, particularly in phishing and code refinement, though real-world AI use skews more toward improving existing developer workflows. Remediation times and staffing needs have improved (132 hours with 17.5 people vs. 190 hours with 14 in 2021), but costs remain high, and brand damage is now seen as the most expensive impact. The report underscores resilience measures such as microsegmentation to contain breaches and protect critical systems.