Threat actors are diversifying their entry points, leading to 26% of ransomware incidents involving compromised endpoints.