[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiaAQ4CTijvz75UixkF6EYi460PAVo4pMoe6T9Pg1wjU":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":25,"status":26,"created_at":27,"published_at":28,"article":29,"tags":33,"podcasts":52,"controls":53},"cc3b6a91-30a9-4698-b6ba-06fe91bd5820","global-cyber-attacks-surge-48-driven-by-ransomware-phishing-and-ai-enabled-exposure","d9475406-48cc-4162-aa25-c5acd9fa65d1","Global Cyber Attacks Surge 48% Driven by Ransomware, Phishing, and AI-Enabled Exposure","The dramatic rise in cyber attacks — averaging nearly 2,800 per organization per week — signals that threat actors are scaling operations faster than most organizations can defend against them. Ransomware groups like 'The Gentlemen' are exploiting unpatched systems and weak controls, while phishing campaigns leverage malicious links that bypass underprepared users. Compounding this, employees inadvertently exposing sensitive infrastructure details through Generative AI prompts creates new attack surfaces that organizations have not yet accounted for in their security policies. This convergence of escalating attack volume, social engineering, and emerging AI-related data leakage underscores that technical defenses alone are insufficient without strong human-layer controls.","**Immediate Actions:**\n- Deploy or update email security gateways with URL sandboxing and real-time malicious link detection to reduce phishing success rates.\n- Establish and enforce an organizational policy prohibiting employees from entering sensitive infrastructure details, credentials, or proprietary data into public Generative AI tools.\n- Ensure endpoint detection and response (EDR) solutions are fully deployed and updated across all endpoints to detect ransomware behavior early.\n\n**Long-Term Improvements:**\n- Implement a continuous vulnerability management program that prioritizes internet-facing assets and reduces mean time to patch for critical CVEs.\n- Develop and regularly test an incident response playbook specifically addressing ransomware scenarios, including isolation procedures and communication chains.\n- Conduct mandatory, role-specific security awareness training at least quarterly, with simulated phishing exercises to measure and reduce human susceptibility.\n\n**Detection & Monitoring Measures:**\n- Enable centralized SIEM logging with alerting rules tuned to detect lateral movement, unusual data exfiltration, and ransomware-associated file activity.\n- Implement Data Loss Prevention (DLP) controls to monitor and block sensitive data from being submitted to unapproved external AI platforms or cloud services.\n- Establish a threat intelligence feed integration to receive timely indicators of compromise (IOCs) associated with active ransomware groups like 'The Gentlemen'.",[12,13,14,15,16,17,18,19,20,21,22,23,24],"CIS Control 7 – Continuous Vulnerability Management","CIS Control 9 – Email and Web Browser Protections","CIS Control 14 – Security Awareness and Skills Training","CIS Control 17 – Incident Response Management","NIST CSF ID.RA-1 – Asset Vulnerability Identification","NIST CSF PR.AT-1 – Security Awareness Training","NIST CSF RS.RP-1 – Incident Response Plan Execution","NIST SP 800-61 – Computer Security Incident Handling Guide","NIST SP 800-53 SI-3 – Malicious Code Protection","GDPR Article 32 – Security of Processing (data exposure via AI prompts)","ISO\u002FIEC 27001 A.12.6 – Technical Vulnerability Management","ISO\u002FIEC 27001 A.7.2.2 – Information Security Awareness and Training","ITIL 4 – Problem Management (recurring attack vector remediation)",{},"published","2026-10-08T14:20:25.964325+00:00","2026-10-08T14:20:25.629+00:00",{"id":7,"url":30,"slug":31,"title":32},"https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F10\u002F08\u002Fglobal-cyber-attacks-up-48-as-ransomware-and-phishing-climb-check-point-finds\u002F?utm_source=rss&utm_medium=rss&utm_campaign=global-cyber-attacks-up-48-as-ransomware-and-phishing-climb-check-point-finds","global-cyber-attacks-up-48-as-ransomware-and-phishing-climb-check-point-finds-e6221d","Global cyber attacks up 48% as ransomware and phishing climb, Check Point finds",[34,40,46],{"id":35,"name":36,"slug":37,"description":38,"color":39},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":41,"name":42,"slug":43,"description":44,"color":45},"182e11d5-57c4-444e-8ec8-4682ad60261b","Incident Response","incident-response","Slow detection, poor containment, missing playbooks","#14b8a6",{"id":47,"name":48,"slug":49,"description":50,"color":51},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",[],[54,58,62],{"slug":55,"name":56,"problem":57},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":59,"name":60,"problem":61},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",{"slug":63,"name":64,"problem":65},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them."]