More recently, attackers have exploited server-side vulnerabilities to deliver ransomware payloads by searching for networks that had failed to patch known vulnerabilities.” For defending against ransomware, the FTC panelists advised organizations to implement education and awareness programs that train staff members about how to avoid phishing attacks.