Across ransomware attacks that begin with exploited vulnerabilities, compromised credentials, or brute force, 38% of initial compromises occur in exposed applications and systems.
| Publisher | Sophos |
| Report | The State of Ransomware 2026 |
| Published | 15 July 2026 |
| Topics | Applications, Ransomware |
Published by Sophos in The State of Ransomware 2026, 15 July 2026. The figure is taken from the report as published; the full methodology is in the source.