Sublime

Meghan Hannes, a cyber-insurance portfolio manager, remembers the moment she realised the ground had shifted, back in 2019. “My claims person called and said, ‘Hey Meg, we had seven ransomware demands this week, and they’re all for millions of dollars,’” she said

The group known as Volt Typhoon was exploiting the zero-day flaw — meaning the software maker was unaware of it before having time to patch — in Versa Director, a piece of software made by Versa Networks, according to researchers at Black Lotus Lab, which is part of cybersecurity firm Lumen.

7. Software-only defense contractor.