CISA: Medusa ransomware hit over 300 critical infrastructure orgs

CISA, the FBI, and MS-ISAC issued a joint advisory warning that the Medusa ransomware operation has impacted over 300 organizations across critical U.S. infrastructure sectors as of early 2025, detailing its evolution into an affiliate RaaS model that leverages initial access brokers and public data-leak/ extortion sites; the advisory includes mitigation guidance such as timely patching, network segmentation, and blocking untrusted remote access.