The 2024 threat landscape saw a rise in ransomware activity, with 33 new or rebranded groups emerging and posting stolen data on leak sites. Incident responders observed a mix of new ransomware groups and old security tricks, including social engineering and vulnerability exploitation. While zero-day vulnerabilities were exploited, file transfer technologies like GoAnywhere MFT and MOVEit Transfer saw critical issues remain unexploited.