Microsoft links Medusa ransomware affiliate to zero-day attacks

Microsoft warns that Storm-1175, a China-based financially motivated cybercriminal group, is rapidly exploiting n-day and zero-day vulnerabilities to gain access and deploy Medusa ransomware, often weaponizing flaws within a day and sometimes before patches are released; the group moves from initial access to data exfiltration and ransomware deployment within days and in some cases within 24 hours.