Ransomware incidents up 50% in 2025, but payments stay flat