AI accelerates both attacks and defenses, but critical security gaps persist

SAN FRANCISCO, May 28, 2025 (GLOBE NEWSWIRE) -- Delinea, a pioneering provider of solutions for securing human and machine identities through centralized authorization, has unveiled new research highlighting how ransomware attacks have continued to surge over the past year, despite fewer victims paying. Over two-thirds (69%) of organizations globally have fallen victim to ransomware, with 27% being hit more than once. Meanwhile, attackers are harnessing AI to automate, scale, and sharpen their operations.

Based on insights from over 1,000 IT and security leaders worldwide, the 2025 State of Ransomware Report reveals an increasingly volatile threat landscape driven by AI-powered attacks, stolen credentials, and Ransomware-as-a-Service (Raas). While only 57% of organizations paid ransoms, down from 76% in 2024, the frequency and impact of attacks continued to grow as threat actors turned to other tactics like extortion, with 85% of ransomware victims threatened with exposure.

“Ransomware has evolved into a shape-shifting, AI-enabled threat that no business can afford to underestimate,” said Art Gilliland, CEO at Delinea. “In order to combat the sophistication of today’s attacks, organizations must fight AI with AI and embrace proactive, identity security strategies like zero trust architecture, Privileged Access Management, and continuous credential monitoring to stay ahead.”

AI: The Double-Edged Sword

The report highlights the growing role of AI on both sides of the ransomware equation. Threat actors are using AI to automate phishing, impersonate trusted individuals via deepfakes, and accelerate attacks. At the same time, defenders are increasingly relying on AI to detect and respond to threats faster, with 90% of organizations now using AI in their ransomware defense strategies – primarily within Security Operations Centers (64%), for analyzing Indicators of Compromise (62%), and to prevent phishing (51%).

Despite 90% of executives expressing concern over ransomware threats, many organizations continue to fall short in essential security practices, with only 34% enforcing least privilege access controls and just 57% implementing application control measures. Most victims reported extended recovery times, with 75% taking up to two weeks to recover.

To learn more about the latest ransomware trends and ways organizations can better protect against attacks, download a copy of the report here: https://delinea.com/resources/2025-ransomware-survey-report

About Delinea

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to seamlessly govern their interactions across the modern enterprise. Leveraging AI-powered intelligence, Delinea’s leading cloud-native Identity Security Platform applies context throughout the entire identity lifecycle – across cloud and traditional infrastructure, data, SaaS applications, and AI. It is the only platform that enables you to discover all identities – including workforce, IT administrator, developers, and machines – assign appropriate access levels, detect irregularities, and respond to threats in real-time. With deployment in weeks, not months, 90% fewer resources to manage than the nearest competitor, and a 99.995% uptime, the Delinea Platform delivers robust security and operational efficiency without complexity. Learn more about Delinea on Delinea.comLinkedInX, and YouTube.

A photo accompanying this announcement is available at https://www.globenewswire.com/NewsRoom/AttachmentNg/7aebd987-acd6-4ec0-99ed-89c0d0c71523



Media contact Justin Ordman Corporate Communications Director justin.ordman@delinea.com

Source(s) : Delinea