China-Linked Storm-1175 Exploits Zero-Days for Rapid Medusa Ransomware Deployment

China-linked threat group Storm-1175 has exploited 16 or more CVEs, including zero-day vulnerabilities, to enable rapid deployment of Medusa ransomware within 24 hours of initial access. The campaign has compressed the exploit-to-deployment timeline from weeks to hours. The group targets critical infrastructure and enterprise environments across multiple sectors.