Last Year in Ransomware: CISA Advisories and Updated Security Recommendations

This report reviews 2024 ransomware trends, highlighting record ransom payments (including a $75M payment), rising median and recovery costs, major impacts on healthcare and critical infrastructure, active exploitation of critical vulnerabilities (notably Cleo CVEs CVE-2024-50623 / CVE-2024-55956 and SonicWall CVE-2024-40766), involvement of threat actors such as Dark Angels and Termite, and corresponding government and CISA responses with updated security recommendations.