More than 200 victims of Medusa ransomware identified over the last year, CISA says

The CISA and FBI have updated their advisory on the Medusa ransomware gang, revealing that over 500 victims have been identified in the last year, with a significant focus on the healthcare sector. Medusa is known for rapidly exploiting newly announced vulnerabilities, sometimes within 24 hours of disclosure, and has transitioned to an affiliate model. The group has been linked to a recent incident targeting the University of Mississippi Medical Center, and has demonstrated a willingness to target both healthcare facilities and government entities.