Ammolite Insights: June 25, 2026
Recent cyberattacks affecting organizations such as Health atHome Ontario and Foxconn demonstrate that cyber incidents can disrupt organizations of any size or industry. The difference between a manageable incident and a major business disruption often comes down to preparedness, decision-making, and the ability to execute a response plan under pressure.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
When Was The Last Time You Tested Your Cyber Incident Response Plan?
Recent cyberattacks affecting organizations such as Health atHome Ontario and Foxconn demonstrate that cyber incidents can disrupt organizations of any size or industry. The difference between a manageable incident and a major business disruption often comes down to preparedness, decision-making, and the ability to execute a response plan under pressure.
If your organization experienced a ransomware attack tomorrow, would your leadership team know exactly what to do? Who would make critical decisions? Who would communicate with customers, regulators, employees, and stakeholders? How would you maintain operations while responding to the incident?
A cybersecurity tabletop exercise allows your executives, managers, and key stakeholders to practice responding to a realistic cyber incident before a real crisis occurs. By testing your response plan in a safe, guided environment, you can identify gaps, strengthen communication, clarify responsibilities, and build confidence across your leadership team.
The organizations that recover most effectively from cyber incidents are the ones that prepare before a crisis occurs. Investing time in preparedness today can help reduce business disruption, improve decision-making under pressure, and strengthen organizational resilience. The question is simple: if a cyber incident happened tomorrow, would your team be ready?
In The News
New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones
The vulnerability exploited by the Usbliter8 exploit cannot be patched and a PoC exploit has been released by researchers.
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
LastPass Confirms Data Breach in Klue Supply Chain Attack
LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens in the Klue supply chain attack earlier this month.
Preparing for CPCSC Compliance Requirements?
If your organization supports Canada’s defence supply chain, now is the time to start evaluating your cybersecurity readiness. Eligible organizations may qualify for grant-funded support to assess gaps, strengthen cybersecurity practices, and prepare for evolving CPCSC requirements.
Ammolite Insights: June 4, 2026
Recent cybersecurity incidents involving organizations such as Charter Communications and Carnival Corporation have highlighted a growing reality: many cyberattacks begin with compromised accounts, phishing attempts, and social engineering tactics rather than sophisticated malware.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Grant-Funded CPCSC Readiness Support for Canadian Defence Suppliers
Canadian defence suppliers are facing growing expectations around cybersecurity readiness. As cybersecurity requirements continue to evolve across Canada's defence supply chain, organizations may be asked to demonstrate stronger cybersecurity controls, governance, documentation, and risk management practices to support defence-related contracts and opportunities.
Ammolite Security is accepting registrations for eligible organizations interested in grant-funded CPCSC Level 1 and Level 2 readiness support. Designed for defence contractors, subcontractors, manufacturers, technology firms, engineering companies, and critical infrastructure suppliers, the program may include CPCSC awareness training, readiness guidance, gap assessments, policy and documentation support, executive briefings, and practical next steps.
Your Biggest Cybersecurity Risk May Not Be Technology
Recent cybersecurity incidents involving organizations such as Charter Communications and Carnival Corporation have highlighted a growing reality: many cyberattacks begin with compromised accounts, phishing attempts, and social engineering tactics rather than sophisticated malware.
Cybercriminals continue to target employees and executives through deceptive emails, fake login pages, fraudulent phone calls, and other techniques designed to gain trust and access to sensitive systems and information.
Building cyber resilience requires more than technology. It requires informed employees, engaged leadership, and a culture of cybersecurity awareness throughout the organization.
Custom Corporate Cybersecurity Training from Ammolite Security helps organizations educate employees, strengthen cyber awareness, reduce human risk, and build a stronger first line of defence against evolving threats
In The News
Supply Chain Attack Hits 32 Red Hat NPM Packages
Hackers published 96 malicious package versions, injected with a credential-stealing worm similar to Mini Shai-Hulud.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
New Ransomware Threat Group, ‘The Gentlemen,’ Has Become One of The Most Active Ransomware Operators
NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunneling, evade detection, and support rapid lateral movement across enterprise environments.
Ammolite Insights: May 14, 2026
May 2026 has been a significant month for the Ammolite Security team as we participated in major cybersecurity, aerospace, defence, and business events across Alberta.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Transforming Insight into Action: Securing Regional Infrastructure, Defence and Enterprise
May 2026 has been a significant month for the Ammolite Security team as we participated in major cybersecurity, aerospace, defence, and business events across Alberta. From technical briefings to strategic industry collaboration, our focus remains on helping organizations strengthen resilience against evolving cyber threats.
Technical Briefings & Industry Education
At the UCan Brave Tech - Alberta Cybersecurity Forum, we joined cybersecurity and critical infrastructure leaders to discuss emerging threats impacting industrial control systems and critical infrastructure environments.
We also delivered a cybersecurity session at the BBB Bootcamp: Ignite Your Growth, providing practical guidance for SMEs on securing business operations, protecting sensitive data, and reducing ransomware risk in an increasingly AI-driven landscape.
Strategic Engagements & Partnerships
The team also attended the Calgary Police Service Cybersecurity Summit, collaborating with law enforcement and cybersecurity professionals on emerging cybercrime trends, ransomware activity, and evolving social engineering threats.
At the AAAD Summit, we connected with aerospace, defence, and manufacturing leaders to discuss CPCSC compliance, supply chain security, and strategies for meeting federal cybersecurity procurement requirements.
As cyber threats continue to evolve, Ammolite Security remains committed to helping organizations build resilient, future-ready security frameworks that protect operations, infrastructure, and business continuity.
Why the Recent University and College Cyberattack Matters to Every Organization
The recent cyberattack targeting Canvas, a learning management platform used by approximately 9,000 universities and colleges worldwide, is another reminder that organizations are increasingly exposed through the digital platforms and third-party systems that they rely on every day. While the incident impacted the education sector, the broader cybersecurity lesson applies to businesses, healthcare organizations, municipalities, critical infrastructure operators, and government agencies alike.
When one widely used platform is compromised, the impact can quickly extend across thousands of organizations and millions of users.
This is why organizations must ensure not only that their own systems are secure, but that they are working with vendors, partners, and providers who meet strong cybersecurity and compliance standards. Understanding where vulnerabilities exist across your organization and digital ecosystem is becoming increasingly critical.
At Ammolite Security, we help organizations assess cybersecurity readiness, identify potential gaps and risks, strengthen compliance posture, and improve resilience through cybersecurity assessments, strategic guidance, training, and security-focused planning.
Cybersecurity today is no longer just about protecting internal systems. It is about understanding and securing the broader digital ecosystem your organization depends on.
In The News
Google Detects First AI-Generated Zero-Day Exploit
The zero-day was designed to bypass 2FA, and it was developed by a prominent cybercrime group.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
New Cybersecurity Industry Coalition Aims to Lead US Critical Infrastructure Protection
The Alliance for Critical Infrastructure's biggest goal: changing how the nation plans for a major cybersecurity crisis.
Ammolite Insights: April 23, 2026
Ammolite Security has been recognized by the U.S. Embassy in Canada as part of the Freedom 250 Initiative, celebrating organizations strengthening Canada-U.S. innovation and economic ties.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Ammolite Security Recognized in U.S. Freedom 250 Initiative
Ammolite Security has been recognized by the U.S. Embassy in Canada as part of the Freedom 250 Initiative, celebrating organizations strengthening Canada-U.S. innovation and economic ties. This recognition highlights our work supporting cybersecurity, defence, and critical infrastructure across borders.
As digital threats continue to evolve, cross-border collaboration is more important than ever, and we're proud to be part of that effort.
In The News
ZionSiphon Malware Targets ICS in Water Facilities
The malware is configured to operate on systems associated with Israeli water treatment and desalination plants.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
A Fake Slack Download is Giving Attackers a Hidden Desktop on Your Machine
A trojanized Slack download from a typosquatting website is giving attackers something most users wouldn’t even know to look for: a hidden desktop running on their machine.
WEF Urges Intelligence Sharing as Port Cyber Threats Outpace Siloed Defences
New analysis published by the World Economic Forum (WEF) argues that as posts become increasingly digitized and interconnected, their exposure to cyber risk is no longer confined to individual operators but extends across maritime ecosystems.
Strengthen Your Cybersecurity Processes with Expert-Led Tabletop Exercises
Cyber incidents are evolving faster than ever, and the stakes continue to rise. IBM's 2025 Cost of a Data Breach Report found that the U.S. average breach cost has reached a record $10.22 million, with critical infrastructure sectors among the hardest hit.
Ammolite Security's expert-led tabletop exercises give your organization a proactive way to strengthen readiness. Tailored for oil and gas, energy, and infrastructure sectors, these sessions simulate real-world threats and help leadership and IT teams identify gaps, improve response protocols, and make high-impact decisions before a breach occurs.
Ammolite Insights: March 26, 2026
Researchers warn that Microsoft Intune may have been weaponized to wipe critical devices.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Stay Eligible for Defence Contracts with CMMC & CPCSC
If your organization operates in the defence supply chain, CMMC 2.0 and CPCSC compliance are becoming essential for maintaining and winning contracts. Ammolite Security makes the process clear and achievable. Our team of defence-aligned cybersecurity experts works alongside you to identify gaps, protect sensitive information, and build a practical, efficient path to compliance that fits your organization. As requirements are rapidly being enforced across the supply chain, acting early can be the difference between winning and losing contracts.
What sets Ammolite apart is the depth of expertise and real-world experience behind every engagement. Trusted by organizations across defence, government, and critical infrastructure, we deliver more than compliance. With advanced capabilities in AI-driven risk analysis, quantum-resilient security, and secure communications, we help position your organization as a trusted, resilient partner.
We are currently supporting organizations preparing for CPCSC compliance, including those exploring potential grant funding opportunities.
If your organization is exploring these opportunities, email us at info@ammolitesecurity.com to start the conversation with our team.
Know where you stand before compliance requirements impact your contracts.
In The News
Stryker Attack Raises Concerns About Role of Device Management Tool
Researchers warn that Microsoft Intune may have been weaponized to wipe critical devices.
CISA Adds Five Known Exploited Vulnerabilities to Catalog
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Threat Groups Target Cyber-Physical Systems to Disrupt Critical Infrastructure Providers
The Iran war has raised concerns that key industrial sectors could be the target of hacktivists, state actors, and other groups.
A DarkSword Hangs Over Unpatched iPhones
Researchers at Google have identified an iOS exploit chain, named DarkSword, that has been used since late last year by multiple actors to infect iPhones with malware in targeted attacks.
Empower Your People. Strengthen Your First Line of Defence with Corporate Training.
Cyber threats are increasing in speed and sophistication, with the average cost of a cyberattack now exceeding $300,000. Your strongest defence is an informed, prepared workforce.
Ammolite Security delivers customized corporate cybersecurity training designed to help your team:
Recognize threats early
Respond with confidence
Reduce human risk across your organization
Led by experts with backgrounds in defence, law enforcement, and adult education, training is hands-on, engaging, and tailored to your organization. Programs can be delivered virtually or on-site through workshops, simulations, labs, and applied exercises.
Build a cyber-aware culture and strengthen your first line of defence.
Ammolite Insights: March 5, 2026
The Conduent breach has quietly grown into one of the biggest third-party data incidents in U.S. history, and the real story now is how many different programs and employers are swept up in it, even for people who have never heard of Conduent.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
CyberAlberta Warning: Iranian-Linked Cyber Activity May Target Canadian Organizations
CyberAlberta has issued a threat intelligence advisory warning Canadian organizations to review their cybersecurity posture following the February 28 military strikes against Iran by the United States and Israel.
The advisory notes that Iranian-aligned cyber threat actors may respond with cyber-enabled operations targeting organizations in allied countries, including Canada. These activities could include spear phishing campaigns, exploitation of known vulnerabilities, ransomware and extortion operations, Distributed Denial of Service (DDoS) attacks, and disruptive website defacements.
Organizations operating in sectors such as energy, oil and gas, and critical infrastructure may face increased risk, particularly those with supply chain ties or operations in the Middle East.
CyberAlberta recommends that organizations review their cybersecurity posture and ensure that vulnerabilities are identified and mitigated before they can be exploited.
You can review the full CyberAlberta Threat Intelligence Report here:
Protect Your Organization with A Cybersecurity Assessment
When geopolitical conflict escalates, cyberattacks often follow. Organizations that proactively assess their cybersecurity posture are far better positioned to detect threats and respond quickly. For organizations operating critical infrastructure or managing sensitive systems, even a single vulnerability can create significant operational and reputational risk.
Ammolite Security’s cybersecurity assessments provide a structured evaluation of your organization’s digital infrastructure, processes, and security controls to identify vulnerabilities before attackers exploit them.
Our assessments help organizations:
Identify security gaps across systems and infrastructure
Evaluate risk exposure across networks and operational technology
Strengthen security policies and internal processes
Prepare for compliance with frameworks such as CMMC & CPCSC, ISO 27001, NERC CIP, HIPAA, and PCI DSS
Each engagement provides actionable insights that help organizations strengthen resilience while minimizing operational disruption.
In The News
The Conduent Breach: from 10 Million to 25 Million (and Counting)
The Conduent breach has quietly grown into one of the biggest third-party data incidents in U.S. history, and the real story now is how many different programs and employers are swept up in it, even for people who have never heard of Conduent.
CISA Adds Two Known Exploited Vulnerabilities
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
US-Israel and Iran Trade Cyberattacks: Pro-West Hacks Cause Disruption as Tehran Retaliates
Both sides conduct hacking and other attacks, including the deployment of wiper malware, DDoS, and disruptions to critical infrastructure.
Canadian Tire Data Breach Impacts 38 Million Accounts
Names, addresses, email addresses, phone numbers, and encrypted passwords were compromised in the attack.
Strengthen Your Cybersecurity Processes with Expert-Led Tabletop Exercises
Cyber incidents are evolving faster than ever, and the stakes continue to rise. IBM's 2025 Cost of a Data Breach Report found that the U.S. average breach cost has reached a record $10.22 million, with critical infrastructure sectors among the hardest hit.
Ammolite Security's expert-led tabletop exercises give your organization a proactive way to strengthen readiness. Tailored for oil and gas, energy, and infrastructure sectors, these sessions simulate real-world threats and help leadership and IT teams identify gaps, improve response protocols, and make high-impact decisions before a breach occurs
Ammolite Insights: February 5, 2026
Russian ransomware operators Qilin have claimed to have broken into Tulsa International Airport and stolen an unspecified amount of sensitive company data.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Empower Your People. Strengthen Your First Line of Defence with Corporate Training.
Cyber threats are rising in speed and sophistication, and the average cost to remediate a cyberattack now exceeds $300,000. Your strongest defence is an informed, prepared workforce. Ammolite Security delivers customized corporate cybersecurity training that equips both technical and non-technical teams with the practical skills they need to recognize risks, respond confidently, and protect your organization from evolving threats.
Designed and led by industry experts with backgrounds in defence, law enforcement, and adult education, Ammolite’s training is hands-on, engaging, and tailored to your organization’s needs. Programs can be delivered virtually or on-site through workshops, simulations, labs, and applied exercises across areas such as cybersecurity, AI, cloud computing, systems design, and emerging technologies.
Build a cyber-aware culture across your organization and turn your people into your first line of defence. Book a complimentary 30-minute consultation with an Ammolite training expert to design a program that fits your team, schedule, and goals.
In The News
Russian Ransomware Hackers Allegedly Hit Tulsa Airport in Cyberattack, Dump Private Files Online as Proof
Russian ransomware operators Qilin have claimed to have broken into Tulsa International Airport and stolen an unspecified amount of sensitive company data.
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Cyber Centre Releases Ransomware Threat Outlook 2025 to 2027
The Canadian Centre for Cyber Security (Cyber Centre), part of the Communications Security Establishment Canada (CSE), released its Ransomware Threat Outlook 2025 to 2027, its latest assessment of ransomware threats facing Canada.
CMMC 2.0 & CPCSC Compliance Support for Defence Subcontractors
CMMC 2.0 is now in effect under 32 CFR Part 170, with requirements being phased into defence contracts through 2028. If your organization handles Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), you may now need to complete a self-assessment or third-party audit to stay eligible for U.S. and Government of Canada defence work.
Ammolite Security helps defence subcontractors prepare with confidence, offering practical CMMC and CPCSC readiness assessments, clear compliance roadmaps, policy and control development, training, and audit preparation. Our team makes complex requirements easier to understand and easier to meet.
Ammolite Insights: January 15, 2026
Hackers stole complete customer information, including contact details, national identity numbers, and payment details.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Strengthen Your Cybersecurity Processes with Expert-Led Tabletop Exercises
Cyber incidents are evolving faster than ever, and the stakes continue to rise. IBM's 2025 Cost of a Data Breach Report found that the U.S. average breach cost has reached a record $10.22 million, with critical infrastructure sectors among the hardest hit.
Ammolite Security's expert-led tabletop exercises give your organization a proactive way to strengthen readiness. Tailored for oil and gas, energy, and infrastructure sectors, these sessions simulate real-world threats and help leadership and IT teams identify gaps, improve response protocols, and make high-impact decisions before a breach occurs.
In The News
Spanish Energy Company Endesa Hacked
Hackers stole complete customer information, including contact details, national identity numbers, and payment details.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
BreachForums Database Breach Exposes Details of Over 324K User Accounts
The newest version of the infamous BreachForums cybercrime marketplace has reportedly experienced another security lapse, with its user database table appearing online.
Empowering Electric Utilities with NERC CIP Compliance
As cyber threats to critical infrastructure continue to grow, electric utilities face increasing pressure to meet NERC Critical Infrastructure Protection (CIP) requirements. NERC CIP compliance is essential to protecting the reliability of the bulk power system, reducing cyber risk, and avoiding significant regulatory penalties that can reach up to $1M per day per infraction.
Ammolite Security supports electric utilities with practical, regulator-informed NERC CIP solutions, including customized training, comprehensive gap assessments, and ongoing remediation support. Our consultative approach focuses on real-world implementation, helping organizations strengthen cybersecurity posture while achieving defensible, sustainable compliance.
Ammolite Insights: December 18, 2025
Apple has released macOS and iOS updates to patch two WebKit zero-days exploited in an “extremely sophisticated” attack.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
CMMC 2.0 & CPCSC Compliance Support for Defence Subcontractors
CMMC 2.0 is now in effect under 32 CFR Part 170, with requirements being phased into defence contracts through 2028. If your organization handles Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), you may now need to complete a self-assessment or third-party audit to stay eligible for U.S. and Government of Canada defence work.
Ammolite Security helps defence subcontractors prepare with confidence, offering practical CMMC and CPCSC readiness assessments, clear compliance roadmaps, policy and control development, training, and audit preparation. Our team makes complex requirements easier to understand and easier to meet.
In The News
Apple Patches Two Zero-Days Tied to Mysterious Exploited Chrome Flaw
Apple has released macOS and iOS updates to patch two WebKit zero-days exploited in an “extremely sophisticated” attack.
Pro-Russia Hacktivists Conduct Opportunistic Attacks Against U.S. and Global Critical Infrastructure
Over the past several years, the authoring organizations have observed pro-Russia hacktivist groups conducting cyber operations against numerous organizations and critical infrastructure sectors worldwide.
Cybersecurity Concerns are Paramount Among Executives in Almost All Roles, Regions, and Industries
A new survey finds widespread agreement that security is one of the biggest challenges facing companies today.
Build A Cyber-Ready Workforce with Customized Corporate Training
Cyber threats continue to grow in cost and complexity, making employee awareness and capability a critical line of defence.
Ammolite Security delivers customized corporate cybersecurity training designed for both technical and non-technical teams, helping organizations reduce risk, upskill their workforce, and respond effectively to evolving threats. Led by defence and law-enforcement cyber experts and built by adult learning specialists, our flexible programs are delivered virtually or on-site and tailored to your organization’s needs, roles, and schedule.
Empower your people and strengthen your security posture.
Ammolite Insights: November 27th, 2025
Keyless car theft devices worth £20k fuel organized crime, prompting urgent legal action and renewed focus on vehicle security.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Canada Showcases Tactical 5G Innovation at NATO SHINE 2025
Ammolite Security, in partnership with Myntex Inc., proudly represented Canada at NATO’s SHINE 2025 in Istanbul, Türkiye. Together with international collaborators, including the UK Ministry of Defence, Sma-RTy (Italy), Microamp (Poland), and ULAK (Türkiye), our team demonstrated a portable, quantum-resilient 5G network engineered to deliver secure, high-speed communications in contested and high-threat environments.
This multinational effort marks a pivotal step in advancing tactical communications, cyber resilience, and operational readiness for NATO and allied forces. Our work reflects Ammolite’s commitment to developing sovereign, secure, and future-ready technologies that strengthen defense and critical infrastructure across the globe.
In The News
Surge in £20k Keyless Car Theft Gadgets Sparks Security Concerns
Keyless car theft devices worth £20k fuel organized crime, prompting urgent legal action and renewed focus on vehicle security.
Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications
CISA is aware of multiple cyber threat actors actively leveraging commercial spyware to target users of mobile messaging applications (apps).
Ransomware Attack Disrupts Local Emergency Alert Systems Across US
The OnSolve CodeRED platform has been targeted by the Inc Ransom ransomware group, resulting in disruptions and a data breach.
Mounting Hacktivist Attacks Compromise Canadian Critical Infrastructure
BleepingComputer reports that online industrial control systems in critical infrastructure organizations across Canada were noted by the Canadian Centre of Cyber Security to have been subjected to intensified hacktivist intrusion.
Strengthen Your Cybersecurity Processes with Expert-Led Tabletop Exercises
Test your team’s response to real-world threats with an expert-led tabletop exercise from Ammolite Security. Identify gaps, improve coordination, and gain actionable insights to strengthen your defenses.
“Ammolite Security guided a structured and thoughtful session that helped us identify areas of strength and improvement.” — Cory Robbins, WCB Alberta
Ammolite Insights: October 9, 2025
Salesforce says the extortion attempts are related to past or unsubstantiated incidents, and not to fresh intrusions.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Ammolite Security Showcases Canadian Innovation at NATO Event
Ammolite Security, in partnership with Myntex, proudly represented Canada at NATO’s GLOW 2025 innovation event in Portugal, part of the NATO Innovation Continuum. Together, the companies demonstrated a post-quantum-secure communications platform designed to protect allied defenses against weaponized malware, spyware, and future quantum threats.
The joint experiment supports NATO’s 5G Testbed Portability initiative, delivering resilient, sovereign communications through a hardened mobile operating system, encrypted messaging, and portable infrastructure that operates independently of third-party cloud providers.
“Our collaboration with Myntex highlights the strength of Canadian innovation in addressing some of the world’s most pressing cybersecurity challenges,” said Cara Wolf, CEO of Ammolite Security.
“Amazing work from Ammolite Security and Myntex Inc. representing Alberta and Calgary in the NATO Innovation Continuum to accelerate the adoption of emerging and disruptive technologies across the Alliance,” said Nate Glubish, Alberta’s Minister of Technology and Innovation. “We are fast emerging as a global leader in cybersecurity, and it’s great to see that it is being noticed by NATO and NATO Allied Command Transformation (ACT).”
The project continues toward SHINE 2025 in Türkiye, where final demonstrations will showcase the next generation of secure, zero-trust communications for defense and critical infrastructure.
In The News
Hackers Extorting Salesforce After Stealing Data from Dozens of Customers
Salesforce says the extortion attempts are related to past unsubstantiated incidents, and not to fresh intrusions.
CISA Releases Two Industrial Control Systems Advisories
CISA released two Industrial Control Systems (ICS) advisories on October 2, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
Canadian Airline WestJet Says Some Customer Data Stolen in June Cyberattack
The attack occurred during the same period when Scattered Spider had begun to pivot toward the aviation sector.
Strengthen Your Cybersecurity Processes with Expert-Led Tabletop Exercises
Test your team’s response to real-world threats with an expert-led tabletop exercise from Ammolite Security. Identify gaps, improve coordination, and gain actionable insights to strengthen your defenses.
“Ammolite Security guided a structured and thoughtful session that helped us identify areas of strength and improvement.” — Cory Robbins, WCB Alberta
Ammolite Insights: September 15, 2025
After announcing that the cyberattack-caused disruption to factories would continue, Jaguar Land Rover is now confirming a data breach.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
New CMMC Rules: Why Pre-Assessments are Essential
The Department of Defense has finalized CMMC 2.0 rules, making certification a contract requirement starting November 2025. Contractors must now demonstrate the right CMMC level through self-assessments, certified third-party assessments, or DIBCAC reviews before being eligible for award. Delays, failed audits, or incomplete Plans of Action and Milestones (POA&Ms) can jeopardize both compliance and revenue.
Ammolite Security helps organizations stay ahead with CMMC pre-assessments and gap analyses. Our experts review your systems against all 110 NIST SP 800-171 requirements and 320 control objectives, identifying weaknesses before a formal audit uncovers them. You gain a clear roadmap, actionable recommendations, and the confidence that your security posture meets evolving DoD expectations.
By engaging Ammolite Security, your leadership team secures more than compliance. It builds resilience, protects reputation, and ensures eligibility for future contracts.
In The News
Jaguar Land Rover Admits Data Breach Caused by Recent Cyberattack
After announcing that the cyberattack-caused disruption to factories would continue, Jaguar Land Rover is now confirming a data breach.
CISA Releases Fourteen Industrial Control System Advisories
CISA released fourteen Industrial Control Systems (ICS) advisories on September 9, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
Emails and Phone Numbers Accessed in Cyberattack, Federal Government Says
The federal government says individuals’ email addresses and phone numbers associated with Canada Revenue Agency, Employment and Social Development Canada, and Canada Border Services Agency accounts were accessed in a cyberattack.
Training & Education Opportunities
Ammolite Security delivers actionable, in-person cybersecurity training for organizations of all sizes, backed by 20+ years of expertise across diverse domains and industries.
Corporate Training Course:
Artificial Intelligence for Cyber Defense
Transform your cybersecurity skills with our 12-week Artificial Intelligence for Cyber Defense course. This 360-hour program blends hands-on training, real-world case studies, and peer learning, preparing you to combat advanced cyber threats using AI. Earn certifications like Certified Ethical Hacker, CompTIA Security+, and ISACA, while gaining practical experience through labs and work placements.
Ammolite Insights: August 21st, 2025
Google has become the latest victim in extortion group ShinyHunter’s exploitation of Salesforce databases, as the tech giant has disclosed a breach of company data.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Strengthen Your Cybersecurity Processes with Expert-Led Tabletop Exercises
Cyber incidents are evolving faster than ever, and the stakes continue to rise. IBM’s 2025 Cost of a Data Breach Report found that the U.S. average breach cost has reached a record $10.22 million, with critical infrastructure sectors among the hardest hit.
Ammolite Security’s expert-led tabletop exercises give your organization a proactive way to strengthen readiness. Tailored for oil and gas, energy, and infrastructure sectors, these sessions simulate real-world threats and help leadership and IT teams identify gaps, improve response protocols, and make high-impact decisions before a breach occurs.
In The News
Google Falls Victim to Salesforce Cyberattacks
Google has become the latest victim in extortion group ShinyHunter’s exploitation of Salesforce databases, as the tech giant has disclosed a breach of company data.
CISA and USCG Identify Areas for Cyber Hygiene Improvement After Conducting Proactive Threat Hunt at US Critical Infrastructure Organization
The purpose of this advisory is to highlight identified cybersecurity issues, thereby informing security defenders in other organizations of potential similar issues and encouraging them to take proactive measures to enhance their cybersecurity posture.
WestJet Says Some Passengers' Personal Information Stolen in Cyberattack
Airline says passport information was compromised, but no credit or debit card information.
Training & Education Opportunities
Ammolite Security delivers actionable, in-person cybersecurity training for organizations of all sizes, backed by 20+ years of expertise across diverse domains and industries.
Corporate Training Course:
The Foundations of Cybersecurity Webinar Series
The Foundations of Cybersecurity webinar series can be a valuable resource for anyone looking to grasp the basics of cybersecurity, whether they’re beginners seeking an introduction or professionals aiming to refresh their understanding of core principles.
Ammolite Insights: July 24th, 2025
Enterprises running SharePoint servers should not wait for a fix for CVE-2025-53770 and should commence threat hunting to search for a compromise immediately.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Protecting Critical Infrastructure: Ammolite Security’s Assessments
Organizations managing essential services face complex and evolving cyber threats that can disrupt operations, compromise safety, and damage reputations.
Ammolite Security’s Cybersecurity Assessments offer a comprehensive evaluation of your current security posture, helping you identify vulnerabilities, validate compliance with frameworks like NERC CIP, CMMC, and ISO 27001, and implement effective safeguards.
Ensure your systems are resilient, responsive, and ready for what’s next.
In The News
SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild - No Patch Available
Enterprises running SharePoint servers should not wait for a fix for CVE-2025-53770 and should commence threat hunting to search for compromise immediately.
CISA Adds One Known Exploited Vulnerability, CVE-2025-53770 “ToolShell”, to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Major Railroad-Signaling Vulnerability Could Lead to Train Disruptions
A newly disclosed vulnerability in train braking systems could let hackers remotely stop trains with relatively simple and inexpensive hardware, potentially causing derailments.
Training & Education Opportunities
Ammolite Security delivers actionable, in-person cybersecurity training for organizations of all sizes, backed by 20+ years of expertise across diverse domains and industries.
Corporate Training Course:
Foundations of IoT Security
As our world becomes more connected, so do the risks. The Foundations of IoT Security webinar series offers practical strategies to secure devices, protect data, and strengthen your organization’s digital infrastructure. Learn how to stay ahead of evolving threats and safeguard what matters most.
Ammolite Insights: July 3rd, 2025
At least two North American airlines have been victims of criminal hackers recently as the FBI and cybersecurity companies warn that a notorious cybercriminal group has been targeting the aviation industry.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Secure Your Defense Contracts: CMMC & CPCSC Compliance Starts Here
The evolving landscape of cybersecurity regulations demands that defense subcontractors meet the rigorous standards of the Cybersecurity Maturity Model Certification (CMMC) and the Canadian Program for Cyber Security Certification (CPCSC). These frameworks safeguard sensitive information, strengthen supply chain security, and enhance national defense resilience.
Achieving compliance requires more than technical solutions; it involves a comprehensive approach to assessing current practices, addressing gaps, and ensuring readiness for certification. Understanding where your organization stands today is essential for protecting data and long-term contract viability.
If you’re ready to take the next step in your compliance journey, we’re here to help with expert insights and tailored strategies.
In The News
North American Airlines Targeted by CyberAttacks
At least two North American airlines have been victims of criminal hackers recently as the FBI and cybersecurity companies warn that a notorious cybercriminal group has been targeting the aviation industry.
CISA and Partners Urge Critical Infrastructure to Stay Vigilant in the Current Geopolitical Environment
CISA, in collaboration with the Federal Bureau of Investigation (FBI), the Department of Defense Cyber Crime Center (DC3), and the National Security Agency (NSA), released a Fact Sheet urging organizations to remain vigilant against potential targeted cyber operations by Iranian state-sponsored or affiliated threat actors.
Update Your Chrome to Fix New Actively Exploited Zero-Day Vulnerability
Google has released an update for its Chrome browser to patch an actively exploited flaw. This update is crucial since it addresses an actively exploited vulnerability which can be exploited when the user visits a malicious website.
Training & Education Opportunities
Ammolite Security delivers actionable, in-person cybersecurity training for organizations of all sizes, backed by 20+ years of expertise across diverse domains and industries.
Corporate Training Course:
Cybersecurity Professional Fast Track
The cybersecurity industry is growing rapidly, and the demand for skilled professionals has never been higher. Ammolite Security’s Cybersecurity Professional Fast Track course equips you with the essential skills, hands-on experience, and globally recognized certifications needed to secure high-paying, entry-level positions in this critical field. Over 8 weeks, you’ll gain real-world training, resume support, and career coaching, ensuring you’re ready to step into the workforce with confidence.
Ammolite Insights: June 12th, 2025
The Federal Bureau of Investigation has issued a joint cybersecurity advisory in conjunction with the U.S. Cybersecurity and Infrastructure Security Agency, as the number of confirmed observed victims of Play ransomware attacks skyrocketed in May.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Enhance Cyber Resilience with Expert-Lead Tabletop Exercises
Cyber incidents continue to grow in scale and complexity, disrupting operations, compromising systems, and driving up costs. According to IBM's 2024 report, the average cost of a data breach is now $4.35 million, with critical infrastructure sectors like oil and gas, and energy among the hardest hit.
Ammolite Security's expert-led tabletop exercises are a proactive way to assess your organization's readiness, identify gaps, and improve response protocols. Tailored for oil and gas, energy, and infrastructure sectors, these sessions simulate real-world threats, providing your leadership and IT teams with a structured environment to make high-impact decisions before a breach occurs.
Our specialists bring industry-specific scenarios, objective insights, and practical recommendations designed to improve operational continuity and regulatory readiness.
In The News
FBI Issues Critical Cyberattack Alert - Act Now as Victims Skyrocket
The Federal Bureau of Investigation has issued a joint cybersecurity advisory in conjunction with the U.S. Cybersecurity and Infrastructure Security Agency, as the number of confirmed observed victims of Play ransomware attacks skyrocketed in May.
CISA Releases Four Industrial Control System Advisories
CISA released four Industrial Control Systems (ICS) Advisories on June 10, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
Ransomware Attacks Jumped 46% Across Industrial Sectors: Honeywell
Cybersecurity threats have increased across manufacturing, construction, and other sectors, including a surge in activity targeting agriculture and food production.
Training & Education Opportunities
Ammolite Security delivers actionable, in-person cybersecurity training for organizations of all sizes, backed by 20+ years of expertise across diverse domains and industries.
Corporate Training Course:
Artificial Intelligence for Cyber Defense
Transform your cybersecurity skills with our 12-week Artificial Intelligence for Cyber Defense course. This 360-hour program blends hands-on training, real-world case studies, and peer learning, preparing you to combat advanced cyber threats using AI. Earn certifications like Certified Ethical Hacker, CompTIA Security+, and ISACA, while gaining practical experience through labs and work placements.
Ammolite Insights: May 21st, 2025
Starting May 31, 2025, Alberta’s new Security Management for Critical Infrastructure Regulation will come into effect. Organizations in the petroleum and natural gas sectors must implement a Security Management Program that aligns with the CSA Z246.1:21 standard.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Leading the Future of Cyber Defense: Ammolite Security Joins NATO Innovation Continuum
Earlier this month, Ammolite Security participated in NATO IGNITE 2025 in Calgary — a key milestone within the NATO Innovation Continuum. The event gathered defense leaders, technologists, and innovators from NATO and partner nations to accelerate the development of emerging and disruptive technologies supporting global security and digital transformation.
Ammolite contributed its quantum-resilient Zero Trust data protection platform, designed to secure communications across complex environments, including subsurface operations and space. Our platform aligns with NATO’s goals of strengthening cybersecurity infrastructure and advancing secure communication frameworks.
“The collaboration we experienced at NATO IGNITE in Calgary was inspiring. The intelligence shared was truly cutting edge,” said Cara Wolf, CEO of Ammolite Security. “We’re honoured to contribute to this global mission and look forward to the next phases in Portugal and Türkiye.”
Participation in this initiative reflects Ammolite’s continued commitment to advancing cybersecurity technologies that meet the evolving needs of defence, critical infrastructure, and commercial sectors.
Is Your Organization Prepared for Alberta’s New Security Regulation?
Starting May 31, 2025, Alberta’s new Security Management for Critical Infrastructure Regulation will come into effect. Organizations in the petroleum and natural gas sectors must implement a Security Management Program that aligns with the CSA Z246.1:21 standard.
These requirements are mandatory. Failing to comply may lead to regulatory penalties and increased risk exposure.
Ammolite Security provides the assessments, program development, and implementation support needed to help your organization meet this new standard.
Read the full details in our latest blog post and take the first step toward compliance.
In The News
Production at Steelmaker Nucor Disrupted by Cyberattack
American steel giant Nucor disclosed a cybersecurity incident that bears the hallmarks of a ransomware attack.
CISA Releases Thirteen Industrial Control System Advisories
CISA released thirteen Industrial Control Systems (ICS) Advisories on May 20, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
Training & Education Opportunities
Ammolite Security delivers actionable, in-person cybersecurity training for organizations of all sizes, backed by 20+ years of expertise across diverse domains and industries.
Corporate Training Course:
The Foundations of Cybersecurity Webinar Series
The Foundations of Cybersecurity webinar series can be a valuable resource for anyone looking to grasp the basics of cybersecurity, whether they’re beginners seeking an introduction or professionals aiming to refresh their understanding of core principles.
Ammolite Insights: April 28th, 2025
Countries around the world are preparing for greater digital conflict as increasing global tensions and a looming trade war have raised the stakes.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Advance Your Cybersecurity Strategy: Upcoming Webinars & Events
Gain clarity on today’s top cybersecurity challenges. Our upcoming events and webinars deliver the knowledge and tools your organization needs to respond with confidence.
Webinar: Supply Chain Security in the Age of AI and OT
(May 9th, 2025 - 12:00 PST / 1:00 MST / 3:00 EST)
Hosted by the Alberta IoT Association, this session explores how AI-powered monitoring is transforming third-party risk management across IT and OT environments. Mike Wilkes of Ammolite Security shares strategies for identifying systemic vulnerabilities, advancing cybersecurity maturity, and aligning leadership - especially in Alberta's energy, manufacturing, and critical infrastructure sectors.
Strengthen Your Defenses:
Cybersecurity Assessments for Oil & Gas and Critical Sectors
In today's digital landscape, cyber threats target more than data, they disrupt operations, compromise safety, and impact the bottom line. According to the FBI, ransomware attacks on U.S. critical infrastructure surged by 9% in 2024, highlighting the increasing urgency for proactive cybersecurity measures.
Ammolite Security's comprehensive cybersecurity assessments help organizations across industries, including the Oil & Gas, Energy, and Critical Infrastructure sectors, identify vulnerabilities, strengthen defenses and ensure compliance with evolving security standards.
Our expert team takes a proactive approach, evaluate your IT and OT systems, assess third-party risks, and review incident response readiness to keep your business resilient against cyberattacks. Don't wait for a breach to expose weaknesses - take control now and secure your most valuable assets.
In The News
Countries Shore Up Their Digital Defenses as Global Tensions Raise the Threat of Cyberwarfare
Countries around the world are preparing for greater digital conflict as increasing global tensions and a looming trade war have raised the stakes.
Fast Flux: A National Security Threat
Many networks have a gap in their defenses for detecting and blocking a malicious technique known as “fast flux.” This technique poses a significant threat to national security, enabling malicious cyber actors to consistently evade detection.
Lantronix Device Used in Critical Infrastructure Exposes Systems to Remote Hacking
Lantronix’s XPort device is affected by a critical vulnerability that can be used for takeover and disruption, including in the energy sector.
Ammolite Insights: April 9th, 2025
Port of Seattle, the U.S. government agency overseeing Seattle’s seaport and airport, is notifying roughly 90,000 individuals of a data breach after their personal information was stolen in an August 2024 ransomware attack.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Featured Security Focused Webinars & Events
Gain clarity on today’s top cybersecurity challenges. Our upcoming events deliver the knowledge and tools your organization needs to respond with confidence.
Webinar: The Power and Promise of AI
(April 16, 2025 - 9:00 PST / 10:00 MST / 12:00 EST)
Join Better Business Bureau of Canada for a dynamic discussion on how generative AI, large language models, and multimodal AI are reshaping business operations. Featuring Mike Wilkes, Senior Security Advisor at Ammolite Security, this session offers strategic insight - no technical background required.
Webinar: Supply Chain Security in the Age of AI and OT
(May 9th, 2025) - 12:00 PST / 1:00 MST / 3:00 EST)
Hosted by the Alberta IoT Association, this session explores how AI-powered monitoring is transforming third-party risk management across IT and OT environments. Mike Wilkes of Ammolite Security shares strategies for identifying systemic vulnerabilities, advancing cybersecurity maturity, and aligning leadership - especially in Alberta’s energy, manufacturing, and critical infrastructure sectors.
In The News
CISA Releases Two Industrial Control Systems Advisories
CISA released two Industrial Control Systems (ICS) advisories on April 1, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
Port of Seattle Says Ransomware Breach Impacts 90,000 People
Port of Seattle, the U.S. government agency overseeing Seattle’s seaport and airport, is notifying roughly 90,000 individuals of a data breach after their personal information was stolen in an August 2024 ransomware attack.
Training & Education Opportunities
Ammolite Security delivers actionable, in-person cybersecurity training for organizations of all sizes, backed by 20+ years of expertise across diverse domains and industries.
Corporate Training Course: Cybersecurity Oversight for Boards
Cyber threats have become a boardroom priority, and as a director, trustee, or executive, you play a key role in overseeing cybersecurity, ensuring compliance, and mitigating risks that threaten finances, reputation, and legal standing.
Ammolite Insights: March 13th, 2025
Elon Musk has blamed a ‘massive cyberattack’ for widespread X outages experienced by tens of thousands of users globally.
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
Secure Your Defense Contracts: CMMC & CPCSC Compliance Starts Here
The evolving landscape of cybersecurity regulations demands that defense subcontractors meet the rigorous standards of the Cybersecurity Maturity Model Certification (CMMC) and the Canadian Program for Cyber Security Certification (CPCSC). These frameworks safeguard sensitive information, strengthen supply chain security, and enhance national defense resilience.
Achieving compliance requires more than technical solutions; it involves a comprehensive approach to assessing current practices, addressing gaps, and ensuring readiness for certification. Understanding where your organization stands today is essential for protecting data and long-term contract viability.
If you’re ready to take the next step in your compliance journey, we’re here to help with expert insights and tailored strategies.
In The News
Dark Storm Claims Responsibility for Attack on Elon Musk’s X
Elon Musk has blamed a ‘massive cyberattack’ for widespread X outages experienced by tens of thousands of users globally.
China’s Volt Typhoon Hackers Dwelled in US Electric Grid for 300 Days
Dragos case study reveals that Volt Typhoon hacked US electric grid and stole information on OT systems.
Government of Canada Announces First Phase of Canadian Program for Cyber Security Certification
The Government of Canada is committed to implementing robust cyber security measures, which are fundamental to Canada’s economic stability and national security.
Training & Education Opportunities
Ammolite Security delivers actionable, in-person cybersecurity training for organizations of all sizes, backed by 20+ years of expertise across diverse domains and industries.
Corporate Training Course: Artifical Intelligence for Cyber Defense
Transform your cybersecurity skills with our 12-week Artificial Intelligence for Cyber Defense course. This 360-hour program blends hands-on training, real-world case studies, and peer learning, preparing you to combat advanced cyber threats using AI. Earn certifications like Certified Ethical Hacker, CompTIA Security+, and ISACA, while gaining practical experience through labs and work placements.