Microsoft has started to send targeted notifications to dozens of hospitals about vulnerable public-facing VPN devices and gateways located on their network. As part of their tracking of various groups behind human-operated ransomware attacks, Microsoft has seen one of the operations known as REvil (Sodinokibi) targeting vulnerabilities in VPN devices. This vulnerability is thought to be behind the Travelex and Ragnarok Ransomware attack by REvil. Microsoft wants to help these organizations stay ahead of the threat actors by sending targeted notifications about vulnerable devices.
Source: https://www.bleepingcomputer.com/news/security/microsoft-is-alerting-hospitals-vulnerable-to-ransomware-attacks/

