Medusa ransomware hits 500 victims, CISA warns

CISA and the FBI updated an advisory saying Medusa ransomware actors have hit more than 500 victims as of April 2026, up from 300 in 2025. The group targets healthcare and exploits newly announced vulnerabilities within 24 hours.