Ransomware Incident26 Sept 2026·5 sources
Storm-1175 deploys new StormEncryptor ransomware, likely via N-central auth bypass
Microsoft Threat Intelligence has observed Storm-1175, a financially motivated actor it previously linked to Medusa ransomware, deploying a new C++ ransomware strain called StormEncryptor, with exploitation of the N-able N-central authentication bypass CVE-2026-18577 the likely route in.
StormEncryptorStorm-1175N-central NCM+2
