The Good, the Bad and the Ugly in Cybersecurity – Week 34

The report covers three major stories: (1) U.S. indictments of 17 Iranian nationals tied to the Mabna Institute for a large-scale, state-linked cyber espionage campaign that compromised roughly 80,000 academic accounts and exfiltrated ~31 TB of intellectual property; (2) an updated joint advisory on the Medusa ransomware syndicate, a RaaS operation that has breached over 500 U.S. critical infrastructure and other organizations using double-extortion and an affiliate model; and (3) a critical, actively exploited Windows IKE RCE (CVE-2026-33824) affecting many supported Windows versions, prompting CISA to issue an urgent three-day mitigation directive and Microsoft to push patches and workarounds.