HIGHRansomware
Global

Talos Takes: 2025's ransomware trends and zombie vulnerabilities

Tuesday, April 7, 2026 at 12:03 PM UTC·Source: Cisco Talos

Updated: Tuesday, April 7, 2026 at 12:04 PM UTC

Executive Summary

In this episode of Talos Takes, Amy and Pierre Cadieux unpack the ransomware and vulnerability trends that defined 2025.

Analysis

In this episode of Talos Takes, Amy and Pierre Cadieux unpack the ransomware and vulnerability trends that defined 2025.
Source Attribution

Originally published by Cisco Talos on Apr 7, 2026.

Related Threats

CRITICALRansomware

Medusa Ransomware Fast to Exploit Vulnerabilities, Breached Systems

The group is using zero-days, quickly weaponizes fresh bugs, and exfiltrates and encrypts data within days of initial access. The post Medusa Ransomware Fast to Exploit Vulnerabilities, Breached Systems appeared first on SecurityWeek .

SecurityWeek
CRITICALRansomware

Microsoft says Medusa-linked Storm-1175 is speeding ransomware attacks

Microsoft has warned that Storm-1175, a cybercrime group linked to Medusa ransomware, is exploiting vulnerable web-facing systems in fast-moving attacks, at times moving from initial access to data theft and ransomware deployment within 24 hours. The company said the group has heavily targeted organizations in healthcare, education, professional services, and finance across Australia, the UK, and

CSO Online
HIGHRansomware

Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks

Microsoft has released a new report about the Storm-1175 group and its connection to Medusa ransomware

Infosecurity Magazine