Startup Lantern

New alert from US-CERT: : Medusa Ransomware

The joint Cybersecurity Advisory by the FBI, CISA, and MS-ISAC provides details on the Medusa ransomware variant, its operational tactics, and mitigation strategies. It emphasizes ongoing ransomware threats, encourages protective measures, and shares insights into the cybercriminal models used for attacks. Recommendations include robust cybersecurity practices and incident reporting.

See article here:

#StopRansomware: Medusa Ransomware | CISA Medusa is a ransomware-as-a-service (RaaS) variant first identified in June 2021. As of February 2025, Medusa developers and affiliates have impacted over 300 victims from a variety of critical infrastructure sectors.

New alert from US-CERT: 2023 Top Routinely Exploited Vulnerabilities

Cybersecurity agencies from the U.S., Australia, Canada, New Zealand, and the UK issued an advisory on frequently exploited vulnerabilities in 2023. They encourage secure development practices and prompt patching to mitigate risks. Notable vulnerabilities include those affecting various software products, emphasizing the need for coordinated vulnerability disclosure and robust cybersecurity measures.

See article here:

2023 Top Routinely Exploited Vulnerabilities | CISA Secure .gov websites use HTTPS A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

New alert from US-CERT:

Russian FSB Cyber Actor Star Blizzard Continues Worldwide Spear-phishing Campaigns

CISA

Russian FSB Cyber Actor Star Blizzard Continues Worldwide Spear-phishing Campaigns | CISA Secure .gov websites use HTTPS A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

New alert from US-CERT:

Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers

CISA

Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers | CISA Secure .gov websites use HTTPS A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.