Medusa, Mabna Institute and HTML: Cyberattacks Escalate

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily for CISOs, security leaders, and business decision-makers. Each episode delivers concise, actionable context on the threats shaping enterprise risk. Today’s briefing covers five developments:

1. 01

   CISA and the FBI report that Medusa ransomware has identified more than 500 victims, including over 200 added in the past year, with healthcare and critical infrastructure heavily targeted. Its rapid exploitation of vulnerabilities, stolen credentials, and legitimate remote-access tools increases the risk of sudden outages, data theft, and extortion.

2. 02

   U.S. prosecutors have indicted 17 Iranians allegedly linked to the Mabna Institute, accusing them of stealing 31.5 terabytes of research from more than 100,000 academic accounts and at least 144 universities. The case highlights the scale and long-term economic impact of state-sponsored intellectual-property theft.

3. 03

   Ransom Busters claims to have breached HTML and accessed internal systems and sensitive data. If confirmed, the incident could create exposure, operational disruption, extortion risk, and urgent obligations for the company and its stakeholders.

4. 04

   Researchers say the Cosnitch attack copilot is helping adversaries map target environments before launching intrusions. AI-assisted reconnaissance could lower the expertise required for tailored attacks and make enterprise defenses harder to prepare for.

5. 05

   The final item is presented as a verification gate, but no article or substantive details were provided. Its significance and potential business or security impact cannot yet be assessed.