Organizations using on-premise Cisco, Citrix, or SonicWall VPNs are at high risk of ransomware, report claims.