Security teams are tasked with protecting an expanding attack surface with limited personnel and around-the-clock vigilance, facing adversaries who never rest. As cybercriminals increasingly leverage AI to enhance and scale their operations, the frequency, speed, and complexity of threats are on the rise. Bridging this gap requires more than just tools; it necessitates a partner…
Microsoft has revealed that a financially driven threat group known as Storm-1175, associated with China, has introduced a new ransomware variant called StormEncryptor, which had not been documented before. This new ransomware signifies a departure from the adversary’s earlier use of Medusa ransomware, according to the Microsoft Threat Intelligence Team. According to Microsoft’s posts on…
A financially driven threat actor, previously linked to the Medusa ransomware group, has begun using a new ransomware variant known as StormEncryptor. Microsoft Threat Intelligence is monitoring this actor under the designation Storm-1175 and indicates that the recent attacks were likely preceded by the exploitation of an authentication-bypass vulnerability (CVE-2026-18577) in the N-central remote monitoring…
