FBI, CISA warn US hospitals of targeted BlackCat ransomware attacks

The FBI, CISA, and HHS issued a joint advisory warning that the ALPHV/BlackCat ransomware operation is actively targeting the U.S. healthcare sector, using an exploited ScreenConnect authentication bypass (CVE-2024-1709) for initial access and publishing indicators of compromise; the advisory follows disruptions to BlackCat's infrastructure and links to a major outage affecting Change Healthcare.