Medusa ransomware affiliates have breached hundreds of critical infrastructure entities.

Medusa ransomware affiliates have breached more than 500 organizations across critical infrastructure sectors by exploiting unpatched software (including CVE-2026-1731); US agencies warn organizations to prioritize patching, network segmentation, phishing-resistant MFA, and restrict remote access. Separately, the DOJ unsealed an indictment charging 17 individuals tied to the Mabna Institute for a long-running campaign of intrusions on behalf of Iran’s IRGC affecting hundreds of universities, companies, and some government entities; a Fortinet acquisition of Virtue AI is noted in business news.