NetApp

Data Platforms Take Active Role in Defending Against AI-Driven Ransomware Attacks

Cyberattacks are accelerating due to AI tools that help attackers find vulnerabilities and evade defenses faster than ever. Organizations now face an average of 276 days to fully identify and contain a security incident, leading to extended downtime and regulatory violations under GDPR. The core problem lies in organizational silos separating storage teams focused on performance and backups from security teams monitoring networks and endpoints. Modern enterprise storage systems from vendors like NetApp now incorporate real-time AI analytics to detect anomalies such as unusual encryption patterns or mass file access directly on the data layer. Integration with SIEM and SOAR platforms enables automated responses including creation of immutable snapshots and isolation of affected volumes within seconds. This approach helps meet strict requirements from NIS-2 and DORA while addressing the shortage of 79,000 IT security specialists reported by Bitkom.