CISA is warning us (again) about the threat to critical infrastructure networks

Talos warns of active threats to critical infrastructure (notably recent water system incidents) and reports ongoing ransomware activity—specifically a MedusaLocker variant dubbed BabyLockerKZ that Talos telemetry shows infecting over 100 organizations per month—while also summarizing related developments (LockBit arrests and decryptor, a Kia web-app vulnerability), releasing detection signatures, and publishing multiple file hashes as IOCs.