> Most of the currently used AV software contains heuristic/ML components that are able to gather and analyze various indicators of compromise

Ransomware runs just fine on corporate computers with the latest and greatest "antivirus" software.

I really lost hope some 10 years ago, when i saw that i have to manually remove malware from memory sticks, because macaffe was clueless. After more than a year they released an update that will detect and remove the malware (it was a virus speading through autorun.inf with exe names which did not have any sense like jhghjjj.exe)