All updates
Written by Apr 6, 2026

security: Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

Apr 6, 2026

Microsoft says Storm-1175 is running fast-moving Medusa ransomware campaigns that exploit recently disclosed vulnerabilities in web-facing systems for initial access, data theft, and ransomware deployment. The actor uses Medusa ransomware, also referred to as Gaze.exe.

Sponsored by GitAds