I think it is just media bias, ransomware has become an interesting story so it is getting published more frequently, not necessarily having anything to do with any actual uptick in activity. (same issue with covid-related violence towards asians. I remember hearing a bit about it at the beginning of the pandemic, very little for months and months, then a few weeks of intense coverage which has simmered down recently. I doubt any of this really correlates with the actual frequency of incidents). News has trends and people mistake what the news is talking about something for the actual prevalence of the subject.

Many many companies are really very insecure, there doesn't have to be some big 0day for most. More like a combination of long known, unpatched vulnerabilities, social-engineering vulnerabilities, and instances of essentially leaving the door entirely open.