top of page



The Gunra Advisory Names Two CVEs, Both Fortinet. Half the Coverage Says Schneider Electric. It Is a Dropped Digit.
On August 10 the FBI, CISA, NSA and South Korea's National Police Agency published a joint #StopRansomware advisory on Gunra — AA26-222A. Gunra emerged in April 2025, is believed to derive from the leaked Conti source, has grown into a full ransomware-as-a-service operation with an affiliate programme, and has listed 51 victims across healthcare, financial services, critical manufacturing, transportation and logistics, government, and utilities. It is a good advisory. It is a
Patrick Duggan
Aug 115 min read


They Had 36 Days. Cisco Had Zero.
How Interlock Ransomware Owned Enterprise Firewalls Before Anyone Knew January 26, 2026. A ransomware gang called Interlock starts exploiting a vulnerability in Cisco Secure Firewall Management Center. CVSS score: 10.0. The maximum. Unauthenticated. Remote. Root access. Cisco doesn't know yet. Their customers don't know yet. For 36 days, every Cisco FMC instance facing the internet is a door with no lock. What CVE-2026-20131 Actually Does Insecure deserialization of user-supp
Patrick Duggan
Mar 203 min read
Clop Ransomware Hits Hilton, Law Firms, Healthcare in January 25 Wave
Clop Ransomware Hits Hilton, Law Firms, Healthcare in January 25 Wave
Patrick Duggan
Jan 254 min read
bottom of page