'Cactus' Ransomware Strikes Schneider Electric

Schneider Electric reported a January 17 cyberattack limited to its Sustainability Business division—impacting the Resource Advisor platform—and media/analysts have attributed the incident to the Cactus ransomware group; Schneider states the incident was isolated from safety-critical systems and expected business recovery by Jan. 31. The report profiles Cactus as a prolific, young ransomware actor that leverages known vulnerabilities (notably Fortinet VPN flaws) and common tooling (network scanners, PowerShell) for initial access and lateral movement, and flags potential customer data exposure across many affected clients.