Ammolite Insights: August 13, 2026
CYBERSECURITY NEWS, INSIGHTS & ANALYSIS
CISA, the FBI, NSA, and international partners issued a new advisory on August 10, warning organizations about Gunra ransomware, a growing ransomware-as-a-service operation targeting government, critical infrastructure, and businesses across multiple industries.
Gunra uses a double-extortion model, meaning attackers steal sensitive information before encrypting systems and then threaten to publish or sell that data if a ransom is not paid.
According to the CISA advisory, attackers have gained access by exploiting known vulnerabilities in internet-facing systems, including VPN and firewall infrastructure, as well as compromised or poorly secured accounts.
What Does This Mean for Your Organization?
Ransomware prevention starts before an attacker gains access.
Organizations should prioritize patching known exploited vulnerabilities, particularly on internet-facing systems, while strengthening MFA, privileged account security, and network segmentation. CISA also recommends maintaining and testing offline and immutable backups so critical systems can be recovered without relying on a ransom payment.
Just as importantly, your organization should know whether these protections will actually work during an incident.
Ammolite Security can help you identify vulnerabilities, prioritize your most significant risks, and strengthen your cybersecurity posture before these weaknesses are exploited.
In The News
Hackers Are Targeting US Water Systems. Here’s What That Means.
Government officials are warning about a wave of cyberattacks on water utilities in the US.
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
"Zoomsday" Flaws Could Let One Zoom Participant Attack Another
Researchers have found three vulnerabilities in the popular Zoom meeting platform that could let one meeting participant attack another through malicious collaboration data.
Would Your Team Know What To Do During A Cyber Incident?
When a cyber incident happens, your team needs to make important decisions quickly. Who takes the lead? Who communicates with employees, customers, or regulators? What happens if critical systems are unavailable? And when should your incident response plan be activated?
A Tabletop Exercise gives your organization the opportunity to answer these questions before you're facing a real emergency.
Ammolite Security facilitates realistic, scenario-based exercises that bring together key members of your organization to work through a simulated cyber incident. Your team can test existing plans, clarify roles and responsibilities, identify gaps, and strengthen coordination in a controlled environment.
Cybersecurity preparedness isn't just about having the right technology. It's also about making sure your people know what to do when something goes wrong.
Don't wait for a real cyber incident to test your response.