Uncle Sam urges action after Black Basta ransomware infects Ascension

CISA and Health-ISAC advisories describe Black Basta ransomware's widespread campaign (more than 500 targeted organizations since April 2022) and attribute a major disruption at healthcare provider Ascension to the group; the bulletin outlines common TTPs—spearphishing, use of loaders like Qakbot, post-compromise tooling (SystemBC, Mimikatz, CobaltStrike, Rclone), and exploitation of known CVEs—and recommends patching, phish-resistant MFA, securing remote access, reliable backups, and user training.