Top stories.
- Medusa ransomware affiliates have breached hundreds of critical infrastructure entities.
- US accuses 17 Iranians of hacking for Iran's IRGC.
- Business news: Fortinet acquires AI security firm Virtue AI.
Medusa ransomware affiliates have breached hundreds of critical infrastructure entities.
The US Cybersecurity and Infrastructure Security Agency (CISA) said yesterday that Medusa ransomware-as-a-service affiliates have breached more than 500 entities in critical infrastructure sectors, including the medical, education, legal, insurance, technology, and manufacturing industries. In a joint advisory issued alongside the FBI and the US Department of Health and Human Services (HHS), the agency said Medusa actors "operate opportunistically by targeting victims with unpatched software rather than focusing on specific organizations or sectors," and "leverage vulnerability announcements, such as the February 2026 publication of BeyondTrust vulnerability (CVE-2026-1731), to identify CVEs to exploit."
Officials urge organizations to prioritize patching vulnerabilities, segment networks to limit lateral movement, require phishing-resistant multifactor authentication, and restrict remote access from untrusted sources.
US accuses 17 individuals of hacking for Iran's IRGC.
The US Justice Department yesterday unsealed an indictment charging 17 individuals with hacking US government and United Nations entities on behalf of the Iranian military, the Record reports. The individuals allegedly worked for the Mabna Institute, an Iranian contractor that works for Iran’s Islamic Revolutionary Guard Corps (IRGC). The Justice Department says the Mabna Institute has, since at least 2013, "conducted a coordinated campaign of cyber intrusions into computer systems for 144 U.S.-based universities, 178 foreign universities, at least 42 U.S.-based private sector companies, at least 11 foreign private sector companies, at least five U.S. federal and state government agencies, and at least two non-governmental organizations."
Business news: Fortinet acquires AI security firm Virtue AI.
Fortinet has acquired San Francisco-based AI security company Virtue AI. Fortinet says the acquisition "advances the company’s broader Security for AI strategy and vision for securing the agentic enterprise, building on Fortinet's existing AI security solution portfolio, including its FortiGate Hyperscale Firewall." The company adds that Virtue's technology "complements FortiAIGate and further strengthens Fortinet’s AI runtime security capabilities with Virtue AI’s automated validation and real-time protection."
Read more in the Business Briefing at 4pm ET.
