IT and security teams are being tripped up by open-source, old, and low-scoring vulnerabilities associated with ransomware.