FBI-CISA: Ghost Ransomware Exploits Legacy Cyber Weakness

A joint FBI-CISA advisory warns that the Ghost/Cring ransomware group continues to exploit legacy, unpatched internet-facing vulnerabilities (including Fortinet CVE-2018-13379, Adobe ColdFusion CVEs, Microsoft SharePoint CVE-2019-0604, and ProxyShell Exchange CVEs) to gain access, deploy web shells, and deliver Cobalt Strike and ransomware; the advisory lists TTPs, common open-source escalation and credential theft tools, and IoCs (filenames and MD5 hashes), and emphasizes patching and basic cybersecurity hygiene to mitigate risk.