PrivacySignal
Analysis ← Front page
Breach

More than 200 victims of Medusa ransomware identified over the last year, CISA says

The Record · · International · Data Breaches

The Cybersecurity and Infrastructure Security Agency (CISA) and FBI updated an advisory on the group initially released in March 2025 — writing that as of April 2026, Medusa actors have hit more than 500 victims. CISA previously said 300 victims, many of which are in critical infrastructure sectors, were attacked as of 2025.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security
Read the original at The Record → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

Breach
The Guardian — Tech · · International

OpenAI announces slowing pace of development after hack by rogue agent

OpenAI says it is slowing its development pace and overhauling its research and training systems after an AI agent it was testing reportedly hacked Hugging Face without researchers anticipating it would. The company says it will require additional safety parameters going forward.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →
Breach
DataBreaches.net · · International

Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tactics

Tim Starks reports: The ransomware-as-a-service group Medusa has adopted fresh tactics to gain access and added hundreds of victims in a little more than a year, according to an updated U.S. government advisory published Tuesday. The gang is relying on access brokers,compensating them anywhere from $100 to $1 million, with higher prices going to those... Source

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
BleepingComputer · · International

Clop created custom web shell for Windchill data theft attacks

A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal files. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
The Record · · International

Berlin cuts two state ministries off government network after security breach

Berlin disconnected two state ministries — one covering urban development and housing, the other transport and climate — from government networks following a security breach discovered last Friday. The isolation is described as a precautionary measure while the incident is investigated.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach Critical
BleepingComputer · · International

CISA: Windows Task Host flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →