The Front Door Is Guarded but the Back Door Isn't Even Locked
Security Magazine, Thursday, October 15th, 2026
Ransomware crews target hypervisor, storage and backup consoles that often lack MFA while perimeter spending soars.
Ransomware crews get paid when victims cannot restore, which means controlling hypervisors, storage arrays and backups.
The author notes that these consoles often require only a password, sometimes a shared one, because MFA programs were scoped by headcount and by what insurers asked about first.
With Palo Alto Networks reporting that 65% of initial access is identity-based, attackers arrive with valid credentials and the perimeter treats them as employees.
The piece argues that security budgets have their priorities backwards, leaving the systems needed for recovery less protected than the perimeter.