The State of Ransomware 2026: Payments are dropping but encryption is climbing
2026-07-15T20:51:36Z•555eab92f9b4f3a757f7cacc28e7eed195eca5ad9bf76ec6f08c1066f7e630a6
active-exploitationai-threatsendpoint-detectionexploit-mitigationpqcransomwareransomware-trendssonicwall-sma1000sophos-firewall-v22-mr2supply-chain-compromiseteampcpvect
What happened
Feed of Sophos blog posts (Jul 2026) covering: State of Ransomware 2026 (survey of 2,158 IT/cyber leaders: payments falling but encryption rising); active exploitation of SonicWall SMA1000 vulnerabilities; Sophos Firewall v22 MR2 release (AI app control, PQC detection, Chromebook support); supply‑chain/credential harvesting enabling Vect and TeamPCP ransomware campaigns; multiple AI-related analyses (AI agents triggering endpoint detections, taxonomy of AI threats); and discussion of stagnant exploit‑mitigation and recommended default‑on mitigations. No CVEs are listed in the provided feed.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sophos_news
- Record identifier
- 555eab92f9b4f3a757f7cacc28e7eed195eca5ad9bf76ec6f08c1066f7e630a6
- Enrichment time
- 2026-07-15T20:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.