11-Aug-2026 | Gunra, Microsoft and Critical Infrastructure Under Siege

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Each episode delivers concise, executive-focused analysis of the threats shaping business risk, resilience and security strategy. 1. **Gunra ransomware targets critical infrastructure** The FBI and South Korean police warn that the Gunra gang is exploiting firewall weaknesses to access, steal from and encrypt organizations in healthcare, finance, government and other major sectors. Its ransomware-as-a-service expansion and demands often exceeding $10 million increase pressure on critical infrastructure and public-sector leaders. 2. **Iran-linked actors target U.S. water systems** Cyberattacks against water and wastewater operators have spread across multiple U.S. states, with investigators increasingly suspecting Iranian-linked groups. The campaign highlights the operational and public-safety risks facing essential services with limited security resources. 3. **Storm-1175 exploits N-central software** Microsoft says China-linked Storm-1175 is exploiting a critical flaw in N-central to deploy StormEncryptor ransomware through managed service providers and their customers. The campaign creates a supply-chain risk capable of affecting many downstream organizations, including those that have not yet applied emergency fixes. 4. **Kimsuky advances AI-assisted operations** South Korean researchers report that North Korea’s Kimsuky group is using offline AI tools to support phishing and malware development. More convincing lures could make attacks harder to detect, increasing the importance of monitoring behavior, network activity and payload execution. 5. **DeadLock signals a more resilient ransomware model** Microsoft identifies DeadLock as an emerging operation with more than 80 victims across sectors and regions. Its double-extortion approach and resilient communications infrastructure show how ransomware groups are building harder-to-disrupt operations beyond basic file encryption. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.