Feds post $15 million bounty for info on ALPHV/Blackcat ransomware crew

Infosec roundup: the U.S. State Department has offered up to $15M in rewards for information on the ALPHV/BlackCat ransomware gang as the group continues targeting critical infrastructure; Siemens disclosed multiple critical vulnerabilities (CVSS up to 9.8) affecting industrial devices and software requiring urgent patching; EncroChat-derived evidence continues to yield criminal convictions; a ransomware incident took the Colorado State Public Defender's network offline; and an unnamed U.S. state government was breached via compromised administrator credentials with stolen host/user data posted for sale—readers are advised to enable MFA, apply critical patches, and follow incident response procedures.